Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
File: CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json)
Hash identifier: RcuBeULIvZOWJEDRnF0CMDYaFchhIwhk0jtCzl5jfWs=
Subject key identifier: 11:68:4D:63:54:D4:5E:5D:1C:86:B7:85:84:F6:4E:88:74:33:7B:FD
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Certificate issuer: /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial: 019CACB4B4F45C2B82DABBDDCBBFE3758615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 04:00:49 +0000
Manifest this update: Mon 02 Mar 2026 04:00:49 +0000
Manifest next update: Tue 03 Mar 2026 04:00:49 +0000
Files and hashes: 1: 0v42-yuEzObgwInMahxldfZmrHg.roa (hash: spJCO+lQpC/r9TzdhrE3WFFw5uBpamaSo1GrCaKj4Fg=)
2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: FFsy1+96RsO3KZOBJ7fWSPeYaeYcroCJSAJWpkeJSxU=)
3: OIwvLVG14Er178GMxwrh7ig3kjQ.roa (hash: rrrKwVzY5LibLzq9ZeJSCRsjD6gQ33lRLKMuzjoUt44=)
4: gD3TW1PF3JAEZdLvATbmgeJVunI.roa (hash: t6EoCKHR2D/E7ctxbU4crKBTLrkD21MXceMX9ltMJKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b4:f4:5c:2b:82:da:bb:dd:cb:bf:e3:75:86:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Validity
Not Before: Mar 2 04:00:49 2026 GMT
Not After : Mar 3 04:00:49 2026 GMT
Subject: CN=11684d6354d45e5d1c86b78584f64e8874337bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:2f:07:ad:0b:55:75:29:28:0c:46:ba:d5:9a:
b4:fa:7b:4f:a9:b0:08:02:77:cf:f8:88:c4:73:d0:
d6:f5:3d:c8:67:aa:73:12:c5:b0:c4:31:92:63:6f:
d4:a8:4d:b3:0b:98:d4:c4:57:c8:38:65:ca:c5:93:
6a:af:22:60:09:d1:b4:cd:7d:94:21:74:6e:b3:7e:
72:3a:1f:8c:c2:bc:41:11:eb:e6:56:c7:47:7f:f0:
ec:ef:f5:a4:b3:2a:80:9e:4b:1d:b9:e3:68:25:b3:
9e:63:e4:96:d4:53:1d:56:01:c6:26:a8:2e:2c:96:
44:e3:94:f1:fb:1f:54:de:c3:a1:c8:09:9f:c3:28:
46:44:c5:4a:88:6d:bd:50:dc:49:1c:80:02:dd:74:
bc:73:1f:b0:69:bd:6c:e1:cf:bf:ce:21:69:b0:d5:
88:3a:a9:9d:28:35:20:fe:d1:93:f7:0c:3d:1f:75:
32:69:08:06:2c:2f:89:a9:92:e4:d5:24:56:2b:2d:
45:45:0a:b8:68:5a:17:6f:49:fb:23:87:a3:29:18:
fa:13:4a:7c:e6:3d:ec:64:29:4e:89:4d:84:69:18:
2b:7f:73:95:44:7e:df:60:1b:1f:29:15:9b:89:40:
da:31:8f:c7:4b:9d:fb:7f:91:18:f2:f0:57:ef:4b:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:4D:63:54:D4:5E:5D:1C:86:B7:85:84:F6:4E:88:74:33:7B:FD
X509v3 Authority Key Identifier:
keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:29:c5:be:61:ad:27:76:c6:70:d5:db:8d:bd:b1:44:44:bc:
35:62:6e:d3:9d:ce:c3:5d:33:39:5d:6e:c5:05:df:cb:77:c4:
97:37:2c:48:6d:c9:3f:2b:c8:77:3a:26:1a:47:70:bf:b4:70:
52:1a:b2:88:5c:54:d8:43:59:35:aa:92:74:c0:44:b0:a1:fc:
5c:3b:30:cf:4a:4d:6a:c6:ad:11:dc:57:1b:2b:0f:32:53:ae:
2e:90:34:5b:d8:c6:54:6a:6d:36:e7:15:77:fb:45:53:ea:e0:
d7:dd:bf:5c:45:74:d5:5d:41:d4:3a:aa:2a:bb:c5:5d:66:9b:
fd:c6:bb:3a:18:60:9c:9f:f0:09:f7:c7:20:77:d4:15:97:dd:
c6:ca:ea:cf:62:e5:e1:5b:07:e2:4a:4e:3d:f3:8e:31:1a:0f:
cd:38:51:42:5c:29:71:68:28:ea:58:a2:9b:8f:46:90:be:35:
9a:4a:99:cf:e3:83:2c:3c:45:2b:66:a2:93:6d:38:63:de:71:
15:47:b7:d8:86:88:1f:49:19:43:ae:e7:b7:59:8e:22:c6:2e:
54:4d:9c:67:cf:58:e6:56:e6:90:f0:48:58:bc:35:c2:73:68:
37:d4:be:a4:49:40:87:8c:99:4f:a5:6b:ee:0d:e7:2d:9e:0e:
b2:c8:44:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystLT0XCuC2rvdy7/jdYYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YzUwZWZlMTNhYWRmNTQyM2IwNGYwZGRjYThiMzI4ODM5
NTgyM2UwHhcNMjYwMzAyMDQwMDQ5WhcNMjYwMzAzMDQwMDQ5WjAzMTEwLwYDVQQD
EygxMTY4NGQ2MzU0ZDQ1ZTVkMWM4NmI3ODU4NGY2NGU4ODc0MzM3YmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/y8HrQtVdSkoDEa61Zq0+ntPqbAI
AnfP+IjEc9DW9T3IZ6pzEsWwxDGSY2/UqE2zC5jUxFfIOGXKxZNqryJgCdG0zX2U
IXRus35yOh+MwrxBEevmVsdHf/Ds7/WksyqAnksdueNoJbOeY+SW1FMdVgHGJqgu
LJZE45Tx+x9U3sOhyAmfwyhGRMVKiG29UNxJHIAC3XS8cx+wab1s4c+/ziFpsNWI
OqmdKDUg/tGT9ww9H3UyaQgGLC+JqZLk1SRWKy1FRQq4aFoXb0n7I4ejKRj6E0p8
5j3sZClOiU2EaRgrf3OVRH7fYBsfKRWbiUDaMY/HS537f5EY8vBX70t7CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFoTWNU1F5dHIa3hYT2Toh0M3v9MB8GA1UdIwQY
MBaAFAnFDv4Tqt9UI7BPDdyosyiDlYI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NVT19oT3EzMVFqc0U4TjNLaXpLSU9WZ2o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84NWEyMDgtMWFiNi00NmY3LWIxYTUt
YTI2ZDI1YmM3NjU0LzEvQ2NVT19oT3EzMVFqc0U4TjNLaXpLSU9WZ2o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84NWEyMDgtMWFiNi00NmY3LWIxYTUtYTI2ZDI1YmM3NjU0
LzEvQ2NVT19oT3EzMVFqc0U4TjNLaXpLSU9WZ2o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCnFvmGt
J3bGcNXbjb2xRES8NWJu053Ow10zOV1uxQXfy3fElzcsSG3JPyvIdzomGkdwv7Rw
UhqyiFxU2ENZNaqSdMBEsKH8XDswz0pNasatEdxXGysPMlOuLpA0W9jGVGptNucV
d/tFU+rg192/XEV01V1B1DqqKrvFXWab/ca7OhhgnJ/wCffHIHfUFZfdxsrqz2Ll
4VsH4kpOPfOOMRoPzThRQlwpcWgo6liim49GkL41mkqZz+ODLDxFK2aik204Y95x
FUe32IaIH0kZQ67nt1mOIsYuVE2cZ89Y5lbmkPBIWLw1wnNoN9S+pElAh4yZT6Vr
7g3nLZ4OsshEDQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:10 2026 by rpki-client