Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
File: CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft (raw, json)
Hash identifier: yPqT6ftvfIBp4OVFGGb8Xz5q73QfdALihwCUz+kj5Ko=
Subject key identifier: 1F:19:FA:DD:2F:32:A3:FB:51:83:13:8B:D4:5E:09:84:A8:EF:5D:14
Authority key identifier: 08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11
Certificate issuer: /CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
Certificate serial: 01A0CEC8029A37F26B29DC6CF85C0830E564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
Manifest number: 03CB
Signing time: Wed 23 Sep 2026 15:00:09 +0000
Manifest this update: Wed 23 Sep 2026 15:00:09 +0000
Manifest next update: Thu 24 Sep 2026 15:00:09 +0000
Files and hashes: 1: CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl (hash: EPJpQ1+P1Nf9773Zt1Jv76JBiayFvfDsGVuwW9cBqp8=)
2: Hm_m491XoXkRYN13NObfd481Amk.roa (hash: aw00i43ojCPAL/bMwtW4sU2iXT88omwAr6mDI5/DvVY=)
3: PQ1Cau6xIjwzfdiBMbZurFbWq4g.roa (hash: TNQeQoC/qT98wAaweVjAuTu11UnJIuOyyoosQn8fzXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:02:9a:37:f2:6b:29:dc:6c:f8:5c:08:30:e5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
Validity
Not Before: Sep 23 15:00:09 2026 GMT
Not After : Sep 24 15:00:09 2026 GMT
Subject: CN=1f19fadd2f32a3fb5183138bd45e0984a8ef5d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:21:b9:f2:fc:14:e1:0b:3b:1e:a3:22:6c:
43:66:74:7a:c9:a1:1e:d5:cb:01:ed:3c:36:f2:2b:
b0:1c:6f:74:f9:29:2d:8d:c3:0c:b9:6d:93:b5:ad:
4f:74:25:02:8a:9b:38:23:a7:89:a8:8b:6a:51:be:
54:cd:5f:69:30:a1:94:84:4b:92:e6:f2:a3:40:29:
d2:b8:cd:72:96:4b:44:cd:ce:4f:a7:de:6e:5e:fb:
71:ed:97:74:b6:ac:58:7e:19:c5:c9:3f:e0:c1:c1:
cb:c2:8f:ef:8a:d5:85:50:a2:2e:46:15:0d:fd:5c:
ac:bf:4f:9d:62:b0:fa:43:63:c5:51:af:64:85:83:
8d:6b:8e:57:74:86:ba:70:6a:4a:50:95:be:3b:48:
b2:d5:2d:f5:8c:2e:bd:0c:a8:8c:15:18:da:7d:88:
d6:b9:ec:79:b4:3e:bf:d2:0f:80:5c:c3:bf:37:8e:
49:bf:e9:dd:cc:5d:cd:66:9b:6c:a7:4e:c0:3d:7f:
e0:2a:4a:a3:51:63:35:1e:39:5c:4c:ae:11:1b:db:
bc:85:88:93:24:f9:10:b4:d8:0c:6f:55:d1:69:f6:
d7:19:27:4e:f8:7a:e1:72:da:7a:68:f7:47:38:e6:
75:d1:be:fd:ba:3b:8d:8b:f7:55:16:0d:0d:49:9a:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:19:FA:DD:2F:32:A3:FB:51:83:13:8B:D4:5E:09:84:A8:EF:5D:14
X509v3 Authority Key Identifier:
keyid:08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0f:bb:38:d4:a2:76:0a:8e:7e:fe:fb:cb:b3:35:7e:aa:4c:
bd:4a:07:ef:67:9e:80:17:ea:5d:40:69:39:ee:1e:35:83:a6:
6e:dd:dd:32:82:23:a6:d8:44:f8:70:8a:3f:41:99:92:3d:b4:
21:f9:4f:3e:7d:b0:42:6e:b7:c7:2c:ac:68:6d:2b:48:94:a3:
1c:17:a6:72:e5:7a:fa:21:e1:eb:89:ef:ac:7a:76:9b:f4:9f:
18:cd:1e:2d:2d:a0:95:ca:72:90:53:75:76:42:9d:30:33:17:
d7:35:16:14:11:ca:fd:95:0a:b1:9b:b0:d4:6b:5d:e4:0f:86:
89:38:02:96:36:cd:69:67:fa:f2:01:f3:f7:3c:17:f6:3e:62:
6f:f6:08:f7:a8:51:f7:7f:7e:b3:8f:4a:7c:a0:64:89:07:00:
20:f1:20:46:09:4c:85:d5:81:5f:7a:f4:21:b6:fa:72:89:c6:
9a:95:33:a1:c9:1c:10:be:f6:0a:c2:66:95:0c:86:f3:59:dd:
5a:4a:92:a7:5d:82:7b:d7:99:10:95:91:8d:07:3b:28:80:61:
92:fb:a1:f8:78:2d:b3:f2:6f:95:16:c4:64:04:57:15:c8:11:
63:89:f7:59:ab:6f:5b:13:ec:1e:f5:6e:7b:d5:28:97:03:b3:
80:ad:5f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:18:54 2026 by rpki-client