Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: XbMJWfMVU1u+5LHNrmGAQGUiYEaE7v+u7BpE2pdC91I=
Subject key identifier: 43:76:21:7E:BA:02:88:87:31:95:3A:0C:9E:81:6F:96:2D:66:B1:2B
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 019D26288472487F7F070CC130D43CC95BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 12C7
Signing time: Wed 25 Mar 2026 18:01:22 +0000
Manifest this update: Wed 25 Mar 2026 18:01:22 +0000
Manifest next update: Thu 26 Mar 2026 18:01:22 +0000
Files and hashes: 1: JIH2hr0PFTmo-UenvIATlScnTmw.roa (hash: /Ko64eIHlbMST16GcGIM1/ka+jF/BdIAp0WDKwXJUzY=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: IZQUNlmBtA00T+o1z0HUI0XmbmtBqJuzFzdn7oASee0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:84:72:48:7f:7f:07:0c:c1:30:d4:3c:c9:5b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Mar 25 18:01:22 2026 GMT
Not After : Mar 26 18:01:22 2026 GMT
Subject: CN=4376217eba02888731953a0c9e816f962d66b12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:15:ca:de:4b:4c:ff:43:4f:f3:b4:57:c6:
54:96:a0:58:79:6c:2c:c0:65:a5:eb:18:8b:ae:a6:
8e:80:59:85:01:30:8a:f9:a4:de:e7:06:14:8f:0f:
85:7f:f0:ab:c0:a0:7f:68:a7:64:5e:68:ef:eb:1b:
3d:b4:c0:2b:fe:c5:bf:5e:c4:02:96:fa:53:8b:c0:
69:e7:a1:ca:4c:ff:6c:75:de:23:ba:ef:91:15:15:
52:7f:a3:3f:ff:36:85:34:95:d2:03:f0:ab:4c:2d:
be:6e:ae:ca:ad:3e:b2:c1:46:de:f0:84:6d:69:3e:
f9:2e:88:65:5b:be:6c:3c:28:b1:a3:21:14:96:ee:
d8:c7:19:bd:cf:ec:af:b7:7a:35:bf:ea:68:9b:26:
07:cb:fd:8b:68:aa:53:d2:eb:20:b9:b6:a4:c1:37:
00:bb:45:ad:6f:4b:97:e5:1f:43:76:6c:cf:65:80:
79:2a:fd:8f:09:44:dd:d5:2b:2d:db:42:31:ad:69:
c4:4d:1b:63:19:7c:37:da:36:4e:d4:3b:89:e3:39:
36:a9:a1:ef:8a:d4:6c:6c:39:8e:0b:5d:84:b4:db:
99:63:a7:ab:a8:be:18:fa:c8:a6:27:70:a5:be:9d:
55:1f:00:47:72:13:74:af:b2:89:3e:bc:b5:42:d4:
26:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:76:21:7E:BA:02:88:87:31:95:3A:0C:9E:81:6F:96:2D:66:B1:2B
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fd:4d:c9:e7:05:90:3f:c1:cc:35:4d:89:75:c3:13:c4:9a:
44:d4:ca:31:c9:d5:ad:e5:6f:53:70:4c:28:8a:92:42:87:96:
1d:54:d9:20:c4:90:63:f6:c5:48:98:35:8c:b9:3e:c7:20:99:
d7:4d:b7:47:d3:c3:4e:e6:34:92:41:34:38:bd:2f:e4:cd:87:
ef:fa:5a:d0:44:12:ab:db:ac:48:c3:a1:58:ff:e6:6b:cd:5d:
ec:46:fe:88:2b:09:3b:65:73:52:e7:07:ad:15:65:a1:ca:5a:
5f:84:84:e7:d6:96:21:c6:6d:dd:f8:ac:27:4f:c1:b7:55:ca:
a1:d7:98:62:d3:8e:09:77:1b:c1:0a:78:c7:e4:97:db:ed:93:
72:e1:f7:03:e2:ee:37:78:6f:fb:7d:55:4c:18:83:8c:1d:aa:
b0:8e:25:57:86:85:4a:e0:b8:ed:bd:c6:87:ca:a6:73:de:d5:
4f:4b:b7:ae:bd:8c:83:a6:1c:5c:4b:80:19:61:46:a0:f6:44:
50:4d:b5:ab:e5:6b:44:95:85:e6:5f:d8:79:b4:3a:56:27:80:
9c:45:3b:ea:ba:8d:cb:4c:f3:f8:78:48:47:2d:45:23:19:c2:
9a:94:06:e9:fc:7d:f7:35:4b:6d:53:a2:db:f1:01:4d:1c:9b:
6f:b7:36:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:43 2026 by rpki-client