Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier: tU4CLJ9ocP5Fsh+ctprcMqSMPlsruGmP8g8qXcja8kI=
Subject key identifier: 74:E6:63:26:DB:A0:E2:44:5C:42:45:AB:F3:3F:B7:19:F1:5E:21:BE
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 01A0DC178F70B62ABA42C705665C24493453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number: 1A02
Signing time: Sat 26 Sep 2026 05:02:06 +0000
Manifest this update: Sat 26 Sep 2026 05:02:06 +0000
Manifest next update: Sun 27 Sep 2026 05:02:06 +0000
Files and hashes: 1: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: 2yxwC2xkkSe1p0YKw8dtzPxRXlkwFu3DLPR900stN1Q=)
2: utqV7JvD2fPW5q4tE2tywy7q_gU.roa (hash: rBBPe7YgsDv+7/FRm135TSdCTknOZAtf1EPjWsG38hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:8f:70:b6:2a:ba:42:c7:05:66:5c:24:49:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: Sep 26 05:02:06 2026 GMT
Not After : Sep 27 05:02:06 2026 GMT
Subject: CN=74e66326dba0e2445c4245abf33fb719f15e21be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:7d:28:1c:54:05:e2:a0:f9:f2:9c:a3:91:
1a:93:f1:c9:65:90:47:e9:b0:cf:be:aa:f8:c3:df:
d0:70:c1:7a:06:60:66:82:15:8f:b9:71:5d:91:c7:
c2:f4:cc:a8:33:56:e3:71:48:b5:39:db:2d:20:fd:
de:aa:2d:41:94:56:b7:3a:d6:fd:3d:d0:3e:7b:3b:
d5:0d:5d:a1:77:71:af:97:41:36:bc:d6:17:f0:f7:
d4:e0:e4:96:98:d2:fe:0b:06:ff:36:ec:1c:c3:bd:
15:2f:d4:4f:08:16:71:97:fe:ee:eb:26:b7:94:a7:
c4:94:7d:58:fd:9a:e1:26:b1:e5:54:86:af:ba:6e:
ea:e5:ab:b7:01:d2:d2:39:99:77:8f:0a:08:c0:01:
59:e0:4f:90:16:06:33:c2:ce:e9:c7:a9:aa:cb:d3:
df:21:07:ae:89:d5:5d:af:22:f2:06:45:d2:da:99:
12:1e:a4:00:a4:3f:20:76:01:b8:46:fe:d5:7d:7b:
31:c1:5f:3a:e2:23:73:58:8a:2b:f8:47:74:b3:68:
c5:62:da:23:08:22:3e:01:5a:b3:65:07:1e:af:19:
70:67:32:e9:92:5f:59:c5:fe:77:0e:4a:55:cd:29:
2c:d1:5d:38:eb:00:b9:68:d3:50:e6:08:86:99:c1:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E6:63:26:DB:A0:E2:44:5C:42:45:AB:F3:3F:B7:19:F1:5E:21:BE
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:09:23:80:df:f5:71:73:e1:fe:90:15:4f:2c:d8:4b:cb:4e:
3e:9e:a1:60:61:ef:fd:c5:36:7b:7c:b2:87:2f:b9:fe:1d:86:
ca:3c:ee:ef:2e:88:41:5f:e6:1f:7b:ed:ec:f9:7c:e3:94:88:
48:82:91:0e:3f:21:49:7b:28:4c:9d:eb:56:bc:34:df:68:9f:
bf:4e:d4:b9:e9:ab:81:c0:41:ca:38:ff:07:8d:f3:04:0b:c0:
ca:95:92:34:10:05:23:8b:35:9e:e7:1c:26:93:30:74:8f:20:
21:ee:35:84:48:31:45:72:79:a2:6c:17:7b:98:b1:0a:bd:83:
9b:51:b7:ab:9b:7a:3e:ed:d3:aa:d6:66:a5:36:13:73:68:e4:
41:a7:e5:81:95:d5:e6:ae:53:7b:42:c6:76:a6:86:f6:fb:c5:
b7:57:37:06:54:9f:98:f4:d6:20:53:6b:9b:69:4e:45:fe:2b:
03:33:66:de:68:95:ac:e2:f9:b3:9a:7d:28:99:3d:53:32:6e:
a9:c6:41:d2:42:41:0c:b1:e2:8a:ff:c4:a6:04:2b:71:c2:9f:
98:3b:ac:ec:9b:3e:1a:9d:0e:ba:05:66:9c:94:5b:89:64:67:
ce:7d:70:b5:50:c1:56:f7:13:23:22:90:84:c6:bc:70:ce:37:
49:98:39:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcF49wtiq6QscFZlwkSTRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YzcxNDYwZWE0MWQzZTY1NjVjNGI0MTBiMjZjOWU3OGNl
MTZmOWYwHhcNMjYwOTI2MDUwMjA2WhcNMjYwOTI3MDUwMjA2WjAzMTEwLwYDVQQD
Eyg3NGU2NjMyNmRiYTBlMjQ0NWM0MjQ1YWJmMzNmYjcxOWYxNWUyMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrZ9KBxUBeKg+fKco5Eak/HJZZBH
6bDPvqr4w9/QcMF6BmBmghWPuXFdkcfC9MyoM1bjcUi1OdstIP3eqi1BlFa3Otb9
PdA+ezvVDV2hd3Gvl0E2vNYX8PfU4OSWmNL+Cwb/Nuwcw70VL9RPCBZxl/7u6ya3
lKfElH1Y/ZrhJrHlVIavum7q5au3AdLSOZl3jwoIwAFZ4E+QFgYzws7px6mqy9Pf
IQeuidVdryLyBkXS2pkSHqQApD8gdgG4Rv7VfXsxwV864iNzWIor+Ed0s2jFYtoj
CCI+AVqzZQcerxlwZzLpkl9Zxf53DkpVzSks0V046wC5aNNQ5giGmcH6WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTmYybboOJEXEJFq/M/txnxXiG+MB8GA1UdIwQY
MBaAFAnHFGDqQdPmVlxLQQsmyeeM4W+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAt
ODZjZjA2YWNiZjQxLzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAtODZjZjA2YWNiZjQx
LzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAkjgN/1
cXPh/pAVTyzYS8tOPp6hYGHv/cU2e3yyhy+5/h2Gyjzu7y6IQV/mH3vt7Pl845SI
SIKRDj8hSXsoTJ3rVrw032ifv07UuemrgcBByjj/B43zBAvAypWSNBAFI4s1nucc
JpMwdI8gIe41hEgxRXJ5omwXe5ixCr2Dm1G3q5t6Pu3TqtZmpTYTc2jkQaflgZXV
5q5Te0LGdqaG9vvFt1c3BlSfmPTWIFNrm2lORf4rAzNm3miVrOL5s5p9KJk9UzJu
qcZB0kJBDLHiiv/EpgQrccKfmDus7Js+Gp0OugVmnJRbiWRnzn1wtVDBVvcTIyKQ
hMa8cM43SZg5Iw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:29:33 2026 by rpki-client