Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: 7VysBJxzw6jbxbmhl8ox1UqkkFjtIj9QIWXktYk1l+I=
Subject key identifier: F9:2B:33:82:D2:B1:79:FE:88:AF:C5:86:0E:AA:94:DE:4E:ED:BE:71
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 019E1C7DED3DEFE77B0995C2CA089867C543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 14:01:15 +0000
Manifest this update: Tue 12 May 2026 14:01:15 +0000
Manifest next update: Wed 13 May 2026 14:01:15 +0000
Files and hashes: 1: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: Q2ugw357lASKTBGvE2+EVa075WP8KK2scBW94LEDodI=)
2: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (hash: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w=)
3: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (hash: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:ed:3d:ef:e7:7b:09:95:c2:ca:08:98:67:c5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: May 12 14:01:15 2026 GMT
Not After : May 13 14:01:15 2026 GMT
Subject: CN=f92b3382d2b179fe88afc5860eaa94de4eedbe71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:9a:85:78:0d:8b:a7:d7:bf:16:20:30:5f:
45:9e:f0:88:b2:9b:56:94:d7:2b:e0:13:b2:06:18:
bc:78:e8:93:ed:ac:c7:a0:dc:3e:9d:00:b7:b0:0e:
cd:7d:a6:c3:5e:8f:a4:29:70:5d:40:0d:f8:0a:96:
f9:b1:c0:99:8c:91:6d:43:f8:f8:d9:bb:7e:a9:55:
97:23:91:6b:dd:09:b2:d2:d2:63:4f:1d:90:fb:a9:
4f:78:a1:7d:4c:68:71:8c:5d:c1:ec:cc:b8:86:55:
cf:e2:9d:6f:e4:4a:ae:45:2c:6e:f8:4d:14:90:19:
53:de:f2:73:e1:be:ee:f8:3e:f7:d4:cf:4b:e7:4e:
9c:2f:59:09:9a:2a:49:2c:98:70:16:8a:75:2a:c6:
55:ba:fb:24:61:e5:ba:7b:2c:42:e2:aa:35:ae:d3:
fa:3b:cf:ed:44:23:db:53:fa:10:6f:fb:4e:2e:98:
8c:88:20:17:42:e8:a5:09:23:0b:aa:90:29:6b:fb:
0c:a2:95:eb:1c:66:29:28:f7:5b:ee:b0:14:10:d5:
b2:01:5e:4f:af:2e:99:d2:3e:4c:cf:61:a3:5d:76:
3f:3a:ed:ac:b5:dc:cf:46:00:99:d6:c7:80:9a:17:
da:40:7d:27:b6:52:fb:05:c9:48:6d:d7:86:c6:7f:
59:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2B:33:82:D2:B1:79:FE:88:AF:C5:86:0E:AA:94:DE:4E:ED:BE:71
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5c:d7:39:7d:f0:4c:f1:c4:5c:24:fb:51:64:39:37:41:db:
34:ad:02:43:fa:11:c0:c0:0a:5d:2c:f3:15:24:44:42:07:7c:
3d:2b:b2:d0:39:aa:f8:a5:01:61:6e:b4:0b:1f:eb:31:48:a7:
b8:84:f5:66:56:e0:b7:64:70:87:b0:6f:1a:ba:e4:f9:76:91:
b2:79:0d:7c:05:af:02:f5:a3:d4:b4:bf:9a:16:c7:f8:41:eb:
68:f5:68:1e:e7:59:28:a5:30:7c:03:29:9c:23:d1:65:e2:12:
0e:43:4a:be:82:df:65:b6:db:cb:25:ee:4b:20:d8:50:a2:12:
a0:73:24:ad:d2:da:eb:50:c9:21:ff:22:89:e8:55:dd:7b:cd:
10:1f:95:fb:f3:97:54:85:6b:72:8a:80:4f:bf:34:53:59:ef:
f0:30:2a:9e:71:78:7b:0b:61:ce:a2:ba:45:8f:d6:25:b8:30:
a4:13:72:dd:31:85:90:65:a0:26:67:5e:4a:ab:ec:09:22:f9:
5e:92:c2:c0:b4:b0:6a:83:40:37:85:57:09:7a:39:66:4a:f9:
90:34:de:90:3a:e5:5a:b3:c2:1a:c9:3b:89:58:e6:61:bc:b7:
33:9e:62:87:66:c2:be:d5:48:a6:18:3f:91:20:22:a6:bd:6b:
82:48:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:33:38 2026 by rpki-client