Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: IWKRUd3cd7QTZ15o/VWwwmdc/tVQpIDZs83S9SbIG5k=
Subject key identifier: 0A:F5:C2:39:81:94:71:7F:EE:10:ED:9F:52:7A:9A:C0:19:EE:85:B3
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 01A0E1074C0C09F82C54D661B2E8EC2EC93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 17A0
Signing time: Sun 27 Sep 2026 04:02:26 +0000
Manifest this update: Sun 27 Sep 2026 04:02:26 +0000
Manifest next update: Mon 28 Sep 2026 04:02:26 +0000
Files and hashes: 1: 4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa (hash: nUClw79qayz71Sc4V6xVjW6UfUubOR4LTlNu0VRIsdI=)
2: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: IBb5DJ+cZl5F2YVJFKx5qIEmDWDSftm/FfMpscJ9hgc=)
3: TT3NuIk1jnUlKN28ZgYKJPiSqvg.roa (hash: 5qXHnDoMl4Q3U+1gYr+pAeCUGStPZ9XDhx99c3xsil0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:4c:0c:09:f8:2c:54:d6:61:b2:e8:ec:2e:c9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Sep 27 04:02:26 2026 GMT
Not After : Sep 28 04:02:26 2026 GMT
Subject: CN=0af5c2398194717fee10ed9f527a9ac019ee85b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:7a:9b:96:f2:a9:7d:bb:6f:91:8a:94:3f:
75:55:4f:62:95:23:9a:92:7b:63:84:e0:75:f4:32:
49:5f:ec:df:84:d3:25:68:34:59:c1:43:8e:a4:58:
00:a5:75:d6:f2:20:10:fe:9b:e3:40:ec:14:d4:d7:
4b:d3:6e:c1:5c:a9:7d:47:21:04:30:93:b8:5a:42:
40:99:07:af:68:82:de:56:59:8f:2f:42:2a:94:ec:
42:e0:5f:2f:d5:40:12:e1:b4:5d:19:74:32:52:e3:
19:a9:72:4b:3c:1c:76:de:f6:c1:b1:29:83:73:c6:
99:bf:07:32:d9:cc:69:1d:c8:e4:22:25:ef:93:6b:
1d:c2:ba:4e:40:43:12:36:c3:03:fe:8d:aa:ff:13:
41:f3:d6:77:13:33:73:53:6c:ef:48:7e:ba:67:a1:
28:79:58:21:2f:32:ed:93:20:60:26:a8:ab:52:dc:
35:e4:62:5a:f5:25:92:2d:5f:8c:15:8b:eb:96:af:
0b:03:9d:f0:24:ae:9a:51:71:5f:0a:5c:2c:1a:45:
71:cc:df:bb:cc:e7:59:48:ff:73:f0:8d:54:86:e5:
00:4f:40:51:dc:8a:dd:c1:89:5d:54:9d:e7:ea:ba:
7c:2c:1d:db:b2:0e:46:95:0d:36:a3:cc:72:d0:2a:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F5:C2:39:81:94:71:7F:EE:10:ED:9F:52:7A:9A:C0:19:EE:85:B3
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5a:df:63:fc:d7:5c:e0:e0:38:f6:89:6d:03:31:02:dd:5a:
54:d8:06:6a:73:54:02:1a:35:86:8c:7b:bf:18:20:77:2b:bf:
80:8c:a8:a8:db:c3:20:3a:1d:f4:b4:b8:f9:75:f5:b1:31:c8:
3b:b0:d6:82:4a:55:33:ca:35:74:1d:45:40:9e:af:5d:f3:2a:
89:19:c6:d3:b3:10:f1:ad:de:dd:e0:26:9f:99:67:35:d7:9e:
35:20:eb:46:fd:3b:a4:7b:7d:ad:7d:bc:59:5b:d5:48:5a:1c:
07:1f:8e:d6:77:30:33:7f:be:bc:2c:a4:39:eb:d1:de:59:07:
68:a9:47:5e:f0:14:50:8e:b1:a3:d5:76:d0:f4:15:8d:0c:e0:
58:52:2c:75:2c:1d:64:16:d2:fa:18:fb:fa:72:a5:66:4b:58:
67:cc:63:7b:c9:b4:25:51:86:7e:4a:9d:86:9b:86:85:28:7b:
7c:0a:62:34:9c:4a:56:25:f3:98:3e:75:82:8b:66:4e:e0:1f:
8e:cd:e0:4f:f0:9e:96:d9:bb:ac:1a:71:8b:ac:b0:ed:d9:2a:
fc:27:52:f6:2b:17:c8:ba:fb:9c:e5:c2:98:61:d1:96:cb:b5:
8e:9d:e7:1f:34:31:97:29:a1:4b:38:62:c1:2f:26:47:bb:ef:
b9:18:1e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhB0wMCfgsVNZhsujsLsk8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5Yzc0NmY2N2I3YWM1NmVhNmRkODU5NTFlYzAyMmNiYmQ2
N2FmMDYwHhcNMjYwOTI3MDQwMjI2WhcNMjYwOTI4MDQwMjI2WjAzMTEwLwYDVQQD
EygwYWY1YzIzOTgxOTQ3MTdmZWUxMGVkOWY1MjdhOWFjMDE5ZWU4NWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdF6m5byqX27b5GKlD91VU9ilSOa
kntjhOB19DJJX+zfhNMlaDRZwUOOpFgApXXW8iAQ/pvjQOwU1NdL027BXKl9RyEE
MJO4WkJAmQevaILeVlmPL0IqlOxC4F8v1UAS4bRdGXQyUuMZqXJLPBx23vbBsSmD
c8aZvwcy2cxpHcjkIiXvk2sdwrpOQEMSNsMD/o2q/xNB89Z3EzNzU2zvSH66Z6Eo
eVghLzLtkyBgJqirUtw15GJa9SWSLV+MFYvrlq8LA53wJK6aUXFfClwsGkVxzN+7
zOdZSP9z8I1UhuUAT0BR3IrdwYldVJ3n6rp8LB3bsg5GlQ02o8xy0Cpr0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAr1wjmBlHF/7hDtn1J6msAZ7oWzMB8GA1UdIwQY
MBaAFAnHRvZ7esVupt2FlR7AIsu9Z68GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQt
YTZmNjExYThhYjkzLzEvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQtYTZmNjExYThhYjkz
LzEvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFrfY/zX
XODgOPaJbQMxAt1aVNgGanNUAho1hox7vxggdyu/gIyoqNvDIDod9LS4+XX1sTHI
O7DWgkpVM8o1dB1FQJ6vXfMqiRnG07MQ8a3e3eAmn5lnNdeeNSDrRv07pHt9rX28
WVvVSFocBx+O1ncwM3++vCykOevR3lkHaKlHXvAUUI6xo9V20PQVjQzgWFIsdSwd
ZBbS+hj7+nKlZktYZ8xje8m0JVGGfkqdhpuGhSh7fApiNJxKViXzmD51gotmTuAf
js3gT/Celtm7rBpxi6yw7dkq/CdS9isXyLr7nOXCmGHRlsu1jp3nHzQxlymhSzhi
wS8mR7vvuRge1g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:10:25 2026 by rpki-client