Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: 2YNFlxi+6gVGNUnApdaGVbakNw8O6Wq//XUtgLVv5JE=
Subject key identifier: DD:0A:32:0E:A5:F7:7B:1C:EF:70:AD:EC:C9:42:E4:E8:ED:AE:32:69
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 01A0D192D834F77A8B8BC7CDFB8A1717FAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 1798
Signing time: Thu 24 Sep 2026 04:00:56 +0000
Manifest this update: Thu 24 Sep 2026 04:00:56 +0000
Manifest next update: Fri 25 Sep 2026 04:00:56 +0000
Files and hashes: 1: 4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa (hash: nUClw79qayz71Sc4V6xVjW6UfUubOR4LTlNu0VRIsdI=)
2: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: U3KQCMLGQu51ccLN0LnMSeYj4syzn/4GnswTeh2AKKg=)
3: TT3NuIk1jnUlKN28ZgYKJPiSqvg.roa (hash: 5qXHnDoMl4Q3U+1gYr+pAeCUGStPZ9XDhx99c3xsil0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:d8:34:f7:7a:8b:8b:c7:cd:fb:8a:17:17:fa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Sep 24 04:00:56 2026 GMT
Not After : Sep 25 04:00:56 2026 GMT
Subject: CN=dd0a320ea5f77b1cef70adecc942e4e8edae3269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:36:a5:9b:56:c2:67:db:f5:08:80:fe:a0:
66:50:91:aa:f2:6f:02:f2:0a:26:7d:0a:79:7a:fa:
12:66:4c:a1:ec:0f:a4:9e:4f:9c:b1:8b:87:6a:e0:
1b:50:38:05:ab:06:55:a9:48:6b:f6:99:51:2d:59:
44:1e:d6:f3:c3:69:7f:a4:f6:cd:20:fc:ce:4f:79:
85:21:68:4d:46:58:0f:93:41:71:2a:16:cc:ae:76:
ec:4b:38:17:36:2f:27:14:b2:45:d1:f6:51:d3:ef:
6b:7b:15:04:99:e5:ed:df:2c:38:54:3f:03:96:4a:
dd:6b:06:9c:32:83:4c:71:bf:ac:d8:4a:00:6b:55:
bd:7d:c5:e0:56:c9:b2:55:52:a3:84:55:d5:3c:3e:
c9:fe:29:9d:2b:f0:e0:55:fb:10:7c:d4:73:38:8d:
b3:27:05:c5:33:fc:9b:ac:e8:9c:a5:e0:a1:bc:6d:
0a:6a:09:c7:5e:4b:54:31:88:7c:b0:58:61:cd:a7:
dc:0b:af:1e:8f:e9:68:3d:68:ed:34:bf:95:d8:22:
66:4d:a2:4a:a4:a2:5a:ac:58:46:aa:ac:64:88:10:
63:2d:69:a4:05:2e:3f:63:d2:47:9a:ef:56:94:b3:
1b:bd:a0:94:c3:6f:4e:c0:3d:5a:43:61:65:b6:7a:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0A:32:0E:A5:F7:7B:1C:EF:70:AD:EC:C9:42:E4:E8:ED:AE:32:69
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:48:d3:13:cb:a6:87:f8:af:80:7e:40:85:1c:85:ee:2e:f9:
82:32:52:c5:42:a3:fb:2c:60:23:2c:e1:64:c0:3c:de:e6:c0:
90:ec:f0:f4:d8:6c:aa:54:bd:48:89:df:25:e1:59:7f:01:b2:
2e:ef:9e:9f:4a:38:38:98:b5:da:01:b7:62:b7:05:05:3f:a9:
f2:6d:d4:ac:3d:b8:2e:b6:1e:09:75:50:9f:fc:ad:28:b8:b6:
13:4b:a3:3f:96:c9:c1:39:2c:e6:f5:d9:c3:a3:2d:60:9c:13:
c4:34:55:fc:cf:3c:8f:30:e9:32:ad:ca:65:ee:bc:8e:8b:4a:
35:ad:10:31:54:4c:a4:a9:8b:8c:a5:d9:0f:27:1a:1f:6b:22:
37:80:3b:90:18:46:e2:1f:fa:3e:52:bb:22:20:1a:f6:7b:e1:
da:c4:a4:ff:c0:e4:00:2e:9b:da:8c:7a:16:52:b7:3b:e0:a2:
05:e4:57:ce:5d:f5:b7:dd:34:a8:99:37:60:85:a5:9b:73:23:
85:8d:81:1e:9b:4b:a7:d1:2b:33:d7:21:92:74:0c:c5:92:28:
fe:4b:79:f3:3a:96:5b:6a:88:dc:b4:6e:d7:59:85:25:68:e0:
c0:95:c1:d5:c8:f3:1e:a7:cf:3c:48:95:7c:6a:3c:47:0d:74:
f6:5e:16:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:34:31 2026 by rpki-client