Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
File: ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json)
Hash identifier: dOzEckwEnqd7UNXcMICO7F1PWi2ZWLZBhu3hf+Upuyg=
Subject key identifier: 99:FB:3C:E1:40:9E:DC:BA:C5:93:5D:4F:A4:21:EA:3A:27:88:DF:7D
Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
Certificate issuer: /CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Certificate serial: 019D98F41B023C7689F10920D18B079E8495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
Manifest number: 0A11
Signing time: Fri 17 Apr 2026 01:00:27 +0000
Manifest this update: Fri 17 Apr 2026 01:00:27 +0000
Manifest next update: Sat 18 Apr 2026 01:00:27 +0000
Files and hashes: 1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: C8sfhbArTMiZKBy5DvZfufL1sCKr6PfqieHleLOIJaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:1b:02:3c:76:89:f1:09:20:d1:8b:07:9e:84:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Validity
Not Before: Apr 17 01:00:27 2026 GMT
Not After : Apr 18 01:00:27 2026 GMT
Subject: CN=99fb3ce1409edcbac5935d4fa421ea3a2788df7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ec:e5:38:b1:30:94:25:22:db:16:d9:90:b6:
f1:40:c7:43:8c:dd:f1:cd:de:a5:e9:30:73:7c:a8:
68:f0:b2:bc:01:73:ae:f7:29:1e:dc:27:b3:53:53:
83:0b:5e:d2:fb:db:4a:f3:91:3f:6d:6a:bb:ff:0f:
63:f6:97:bc:66:b9:b8:94:67:9d:9b:1a:f4:97:91:
7e:0b:09:e9:bc:57:9e:f4:ae:cb:5b:7f:cc:2b:b6:
a4:99:46:6b:3e:3e:a0:77:2d:ea:85:55:fa:56:c9:
89:85:6c:99:1a:14:f8:a1:a6:d6:14:12:ab:53:fa:
f1:cc:b6:fd:59:30:2a:96:b4:e7:4b:36:e5:98:00:
80:bf:7b:7c:a5:10:5a:99:0f:61:33:db:d3:b3:f0:
12:b8:eb:9a:de:0b:31:55:bd:ff:fe:5f:86:cf:4e:
82:41:10:b8:42:2d:d0:7c:d0:51:c6:e4:bc:ad:a7:
6d:39:34:b4:18:6e:2f:b8:bb:c3:a4:3a:ac:28:68:
30:f9:6d:a7:e9:04:b1:dd:32:0e:6f:29:61:4d:a6:
2f:52:da:f9:70:76:ec:39:b1:2b:ec:04:31:77:10:
e4:c7:0d:91:7a:92:c9:0c:73:36:18:b7:9c:8c:34:
77:2b:dd:33:9e:71:d3:3a:e8:4a:c0:ba:58:92:ac:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FB:3C:E1:40:9E:DC:BA:C5:93:5D:4F:A4:21:EA:3A:27:88:DF:7D
X509v3 Authority Key Identifier:
keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d6:86:e5:74:ba:16:b8:ef:32:1d:41:84:e8:b1:df:e5:81:
a1:e4:fb:90:84:e2:c5:7c:29:14:bc:0e:4d:a3:81:0c:be:3a:
26:f9:d7:ea:6e:56:6a:c9:77:a3:8f:60:99:4f:1d:cb:31:9a:
db:d5:b5:8f:ae:e0:77:01:f6:46:d8:fa:60:65:8d:28:c1:d7:
4a:23:a5:b7:ac:7d:0c:46:5a:10:56:74:14:a8:ab:dc:f0:24:
a5:bc:61:01:c2:04:7c:8e:f9:07:45:98:05:a6:5d:97:81:22:
3a:55:c7:00:a1:fc:0f:c9:1b:10:54:7b:47:86:4f:59:21:a1:
46:1c:56:04:27:12:bc:42:2e:07:98:5d:b6:72:4b:f5:78:c9:
38:87:52:25:46:1d:eb:37:f6:5f:fa:65:b7:2b:5a:5d:68:cb:
1f:08:dc:a3:ea:61:f9:b3:62:d6:29:a3:4c:91:88:bf:25:f0:
2d:c9:97:2c:71:2d:d9:07:65:af:b9:a8:58:53:ca:a3:1a:52:
74:a1:14:b9:a0:9f:d4:b4:1c:26:3f:f2:91:78:fc:1b:ea:7d:
a8:ca:61:45:ab:70:21:92:ea:a4:13:fe:f1:94:0e:38:f5:83:
da:7d:14:58:05:f9:60:a9:36:af:2a:00:7f:19:1f:1b:83:dc:
d5:92:53:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:27 2026 by rpki-client