Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: Rdi3rkxGPE7KNsT9mRWFIA+PVSHod5lobPSy87Yg8I0=
Subject key identifier: 7C:B8:BF:07:BE:1E:E0:93:50:30:49:A7:45:52:49:36:52:3C:4E:20
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 019E1E35CC06412B8DA35CC48655AEEBE16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 1632
Signing time: Tue 12 May 2026 22:01:42 +0000
Manifest this update: Tue 12 May 2026 22:01:42 +0000
Manifest next update: Wed 13 May 2026 22:01:42 +0000
Files and hashes: 1: 4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa (hash: nUClw79qayz71Sc4V6xVjW6UfUubOR4LTlNu0VRIsdI=)
2: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: qwlc9ppylGZyQLXS9+2PTRz4RpUUrghosixH8aDJOfk=)
3: TT3NuIk1jnUlKN28ZgYKJPiSqvg.roa (hash: 5qXHnDoMl4Q3U+1gYr+pAeCUGStPZ9XDhx99c3xsil0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:cc:06:41:2b:8d:a3:5c:c4:86:55:ae:eb:e1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: May 12 22:01:42 2026 GMT
Not After : May 13 22:01:42 2026 GMT
Subject: CN=7cb8bf07be1ee093503049a745524936523c4e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:52:72:46:95:94:3c:64:b8:e4:ba:33:d3:
56:f9:30:8f:b8:7f:6c:07:49:e8:30:63:b9:69:85:
a3:ee:c5:62:6f:c5:98:fa:4e:7b:04:57:c9:68:8c:
54:16:4a:3a:a8:46:58:cb:d7:34:1e:3c:72:70:26:
b4:26:9c:3c:a9:44:4f:1c:3b:46:3e:6b:1a:c8:b4:
eb:41:65:20:63:89:5c:69:db:94:fc:ec:6d:de:16:
af:e3:77:3e:eb:f7:74:f7:09:21:cf:55:eb:33:2d:
ba:29:5c:7b:d3:df:5f:15:4f:b4:a7:35:27:76:22:
84:d4:8a:ec:59:df:a3:01:7d:c7:c4:84:c2:95:93:
82:e8:1b:73:fa:45:2c:e4:ef:83:93:82:50:91:db:
d5:db:bb:c1:7a:2d:29:d7:a3:47:fd:3d:66:b3:69:
cc:81:a5:da:56:19:c3:4f:b3:a5:54:56:2d:c8:01:
ef:2d:15:2d:d0:bd:7b:7c:40:5c:44:cc:4e:ac:b1:
2b:59:e5:4f:33:43:a1:31:f2:d3:e0:db:f4:46:04:
31:6d:fc:06:47:fe:0d:b0:72:78:e5:11:5b:4e:c8:
7d:9f:57:e7:9a:52:03:55:83:16:df:2e:b1:f0:09:
98:c8:3c:01:51:4a:a0:af:49:45:88:12:ec:d2:40:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B8:BF:07:BE:1E:E0:93:50:30:49:A7:45:52:49:36:52:3C:4E:20
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:29:ad:fe:72:06:99:58:65:b7:24:33:c6:74:9b:71:cd:58:
09:36:98:76:fd:8f:15:1c:a2:7e:f8:98:85:a2:fe:4a:cb:12:
88:a1:9b:4f:a6:a1:5f:2d:59:4f:1f:8a:e4:8d:44:47:42:f3:
1f:a5:93:08:fd:cd:2c:21:ad:9e:10:99:27:93:02:d9:9e:2a:
2d:06:db:28:05:14:e8:0c:33:05:8b:ce:35:44:2b:2f:3a:55:
17:d5:cb:11:0e:6c:27:b5:8e:6c:31:d1:51:49:20:8b:bb:1d:
36:22:31:38:71:2b:7c:e2:39:74:69:34:1f:fa:58:7a:7d:bb:
6a:2b:fa:3c:f9:7f:0d:94:43:5f:3d:d6:d8:c6:bb:14:e4:c7:
76:4d:1d:db:d0:0d:ad:b3:04:ef:39:80:ed:2f:18:f5:dc:b2:
a6:60:2d:5b:bc:2d:ab:02:04:7b:e6:78:8e:81:b9:57:74:81:
5d:d8:44:b8:6b:3c:15:bf:30:f5:c5:74:84:50:60:95:c9:85:
41:ae:f0:c6:8b:74:d1:fe:65:8e:29:d0:05:e6:36:a3:aa:79:
ac:94:a2:4a:69:2f:9d:d4:03:b9:27:31:ed:71:41:c6:b6:51:
d2:e2:00:d8:b2:48:1b:dc:2b:bb:df:de:0f:d6:ea:35:1a:a4:
39:10:9b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:52:49 2026 by rpki-client