Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: QXFuQp5RzIhNofqaRpCRsLYu7MZ0sz/1YHfZaUb+Yug=
Subject key identifier: 25:A9:FE:41:A4:E5:51:2F:F6:7A:77:4D:2D:6E:48:B8:28:C1:41:B1
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 01A0D1C933877515CCC4C30BA9444DFA5C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 05:00:19 +0000
Manifest this update: Thu 24 Sep 2026 05:00:19 +0000
Manifest next update: Fri 25 Sep 2026 05:00:19 +0000
Files and hashes: 1: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: DavLKxlK4w/d/mWQit6qNOGvFMBTjbnNQppzGq3pgQE=)
2: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (hash: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w=)
3: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (hash: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:33:87:75:15:cc:c4:c3:0b:a9:44:4d:fa:5c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Sep 24 05:00:19 2026 GMT
Not After : Sep 25 05:00:19 2026 GMT
Subject: CN=25a9fe41a4e5512ff67a774d2d6e48b828c141b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:37:a5:72:bc:50:c3:5e:7b:f6:ab:d4:a5:
6b:b6:ee:35:bb:95:87:07:9b:a4:ed:d3:ee:39:09:
58:af:1f:c0:6e:5f:7d:cf:ae:88:2d:15:db:5a:90:
51:be:93:99:cd:aa:f7:31:aa:33:5f:bf:15:3d:25:
55:ea:fe:65:f2:9b:55:32:93:b5:3d:ce:fe:fb:f0:
eb:59:63:10:9b:e7:05:38:f2:19:d0:0c:05:6e:7e:
04:d1:ae:f6:45:63:05:80:3e:86:06:9a:8d:88:c4:
91:39:47:46:4a:32:05:9a:6e:dd:cf:e7:df:1f:77:
3d:78:8b:e0:44:c3:74:bb:6e:30:b1:44:d1:90:c6:
00:e4:21:c0:cd:bb:57:15:9e:43:e5:9e:b8:52:a6:
c5:ac:43:88:14:36:c4:9a:00:76:38:ae:4e:3f:93:
f8:f7:c9:c1:9e:6d:19:17:73:6e:49:c0:3e:03:8f:
34:f7:c8:cd:de:db:75:89:df:55:58:f2:a2:4c:d6:
4b:d6:2f:c7:46:04:b2:4d:e9:ae:c3:e4:7a:ab:74:
d8:30:82:94:ad:d5:61:98:4e:43:0a:43:8e:f4:7d:
0d:e9:74:42:f6:c6:7f:3a:85:4c:50:d2:50:d7:92:
22:b6:fa:80:d5:28:90:27:80:cb:fd:43:50:74:77:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A9:FE:41:A4:E5:51:2F:F6:7A:77:4D:2D:6E:48:B8:28:C1:41:B1
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fc:c5:77:72:24:10:c6:b1:08:26:e4:e0:f0:9e:5c:74:ca:
35:d0:85:ad:cb:ca:d4:1f:e5:11:c4:bb:a3:17:7a:9f:81:8f:
bc:f4:8d:ac:9a:62:a6:2d:98:f6:70:98:e5:33:cd:da:2e:0a:
2c:5d:9e:59:fe:b4:d0:9c:d5:21:2e:c8:ba:61:d7:23:a7:7e:
ab:6c:ab:83:2f:58:2e:df:12:bb:23:29:24:1c:97:bf:e9:04:
ba:e2:4d:73:82:20:e1:bf:68:bf:fb:1c:3c:67:11:dd:fb:94:
d1:db:aa:55:b6:94:bd:0b:46:98:0f:1c:31:32:1b:94:ce:e0:
20:e1:26:de:8f:32:f4:ac:e3:d1:4b:3d:be:8d:76:23:05:12:
2a:c1:4e:a7:b0:a7:e6:57:81:41:54:fe:fc:9e:37:c9:20:c7:
b8:a9:71:a7:85:79:af:50:c3:1a:5d:5e:d1:92:3a:6a:11:2f:
42:8a:83:d9:e0:f0:c4:ee:28:ce:7e:02:6c:78:c0:1c:9f:22:
f4:a4:fe:f7:f2:3d:35:f2:5f:d4:f6:5f:a2:f0:1d:2d:13:9e:
7f:4e:74:55:0a:53:6d:69:af:dc:4b:b1:a6:a4:98:f5:93:3d:
16:69:76:38:b3:8a:02:8c:71:a1:84:0f:29:a8:64:ab:a5:48:
f6:ed:61:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:37:59 2026 by rpki-client