Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: 6KRxo5Ea9hz8CXGCZVtR2uiu60yTEjU46UcqnpbN7x8=
Subject key identifier: EC:0E:54:FF:7A:4C:72:1F:0B:15:3C:EA:5C:6D:57:CE:77:A3:BC:63
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 019D28F20312D820D4F083DB248180C25EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 15B3
Signing time: Thu 26 Mar 2026 07:00:42 +0000
Manifest this update: Thu 26 Mar 2026 07:00:42 +0000
Manifest next update: Fri 27 Mar 2026 07:00:42 +0000
Files and hashes: 1: 4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa (hash: nUClw79qayz71Sc4V6xVjW6UfUubOR4LTlNu0VRIsdI=)
2: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: qJpa+02rpCqoXwwa7VfgmB4unVvEtwyBaB7eoHItPf8=)
3: TT3NuIk1jnUlKN28ZgYKJPiSqvg.roa (hash: 5qXHnDoMl4Q3U+1gYr+pAeCUGStPZ9XDhx99c3xsil0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:03:12:d8:20:d4:f0:83:db:24:81:80:c2:5e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Mar 26 07:00:42 2026 GMT
Not After : Mar 27 07:00:42 2026 GMT
Subject: CN=ec0e54ff7a4c721f0b153cea5c6d57ce77a3bc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:8e:61:72:d9:02:90:07:33:30:6a:27:9b:
5a:d7:26:47:2c:05:d7:3c:b9:b7:5b:b8:09:db:b9:
fa:e1:dc:fb:df:33:12:a6:20:54:4b:6b:37:5a:a8:
a7:af:ae:ff:fc:e1:2f:3c:09:cb:3d:56:12:1c:56:
19:6f:8e:0d:a8:c8:fa:a5:c3:18:8a:a7:95:48:55:
39:76:e7:7d:24:cc:d0:f2:16:e8:a7:4b:e2:45:98:
18:13:d9:5d:98:5b:00:27:e5:6b:86:42:ce:73:2f:
e6:b1:58:61:53:e3:f4:0f:89:b5:18:b8:af:5a:6f:
6c:4b:05:2b:33:4d:e7:14:d0:10:24:9c:8d:54:65:
09:81:e5:84:24:27:24:ac:27:9f:30:44:86:ac:08:
34:51:7a:8c:e4:80:b1:00:31:f2:53:77:6e:3d:a5:
1f:92:46:d4:de:68:97:22:16:12:38:6a:cd:c6:9a:
47:84:4c:ee:41:d5:8e:12:d4:bf:89:d1:4f:91:8a:
d5:a9:f0:d8:44:7a:6e:26:6f:12:2f:13:50:da:31:
c4:f7:dc:8d:b0:a9:5d:69:22:16:2d:57:13:f7:bb:
09:07:0d:26:1a:64:87:63:0c:4f:f7:f0:fa:46:52:
67:be:82:e3:36:ad:88:56:53:c3:e0:a1:7c:99:1a:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0E:54:FF:7A:4C:72:1F:0B:15:3C:EA:5C:6D:57:CE:77:A3:BC:63
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fd:8c:58:ff:fb:1b:67:8d:96:f9:ac:6d:91:97:f3:c8:33:
3d:7e:bc:bc:1d:64:95:b8:f6:83:ef:f5:c4:3a:1d:54:8a:6c:
b2:eb:1a:ee:63:0b:1c:9b:78:b0:99:ba:19:a9:df:ae:ac:57:
bf:cd:76:58:e1:a1:63:0c:04:33:34:01:6d:54:92:cb:fe:c9:
06:d4:ae:77:e3:65:cf:6b:67:dc:95:72:95:1c:39:fd:e6:f5:
46:d7:a9:ae:28:87:06:27:7e:ff:c2:1b:c6:0b:ad:1f:c4:cd:
03:8a:ee:61:15:7f:e4:ca:70:3f:5d:de:50:6a:9a:96:53:be:
c3:f3:bc:2b:e0:32:7d:52:ee:7b:ba:bc:91:80:ef:59:34:21:
49:7c:1b:00:fb:22:84:8c:71:d0:fa:d1:a6:1e:8a:e0:04:30:
fb:e0:0e:11:32:3b:92:f8:24:d2:53:2b:49:a7:94:48:f1:09:
c6:25:bb:e4:36:2e:b9:59:bf:b0:9c:01:41:ec:13:81:61:3c:
7d:65:36:5c:c3:16:d7:90:20:5b:ab:44:c9:02:7c:12:77:eb:
a8:4d:e2:06:a8:fb:a7:cb:ab:74:64:a7:cc:6c:6f:c0:27:0e:
77:8a:92:13:48:f3:00:bd:0b:5c:9a:17:cd:94:a8:71:7f:5b:
e6:4c:3e:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8gMS2CDU8IPbJIGAwl7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5Yzc0NmY2N2I3YWM1NmVhNmRkODU5NTFlYzAyMmNiYmQ2
N2FmMDYwHhcNMjYwMzI2MDcwMDQyWhcNMjYwMzI3MDcwMDQyWjAzMTEwLwYDVQQD
EyhlYzBlNTRmZjdhNGM3MjFmMGIxNTNjZWE1YzZkNTdjZTc3YTNiYzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz2OYXLZApAHMzBqJ5ta1yZHLAXX
PLm3W7gJ27n64dz73zMSpiBUS2s3Wqinr67//OEvPAnLPVYSHFYZb44NqMj6pcMY
iqeVSFU5dud9JMzQ8hbop0viRZgYE9ldmFsAJ+VrhkLOcy/msVhhU+P0D4m1GLiv
Wm9sSwUrM03nFNAQJJyNVGUJgeWEJCckrCefMESGrAg0UXqM5ICxADHyU3duPaUf
kkbU3miXIhYSOGrNxppHhEzuQdWOEtS/idFPkYrVqfDYRHpuJm8SLxNQ2jHE99yN
sKldaSIWLVcT97sJBw0mGmSHYwxP9/D6RlJnvoLjNq2IVlPD4KF8mRoXMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwOVP96THIfCxU86lxtV853o7xjMB8GA1UdIwQY
MBaAFAnHRvZ7esVupt2FlR7AIsu9Z68GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQt
YTZmNjExYThhYjkzLzEvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQtYTZmNjExYThhYjkz
LzEvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGP2MWP/7
G2eNlvmsbZGX88gzPX68vB1klbj2g+/1xDodVIpssusa7mMLHJt4sJm6GanfrqxX
v812WOGhYwwEMzQBbVSSy/7JBtSud+Nlz2tn3JVylRw5/eb1RtepriiHBid+/8Ib
xgutH8TNA4ruYRV/5MpwP13eUGqallO+w/O8K+AyfVLue7q8kYDvWTQhSXwbAPsi
hIxx0PrRph6K4AQw++AOETI7kvgk0lMrSaeUSPEJxiW75DYuuVm/sJwBQewTgWE8
fWU2XMMW15AgW6tEyQJ8EnfrqE3iBqj7p8urdGSnzGxvwCcOd4qSE0jzAL0LXJoX
zZSocX9b5kw+dw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:55 2026 by rpki-client