Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
File: ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json)
Hash identifier: vlQvX290tcCx0UdqF3Htb1CCSLBE+rvHqkXCnzIc1VE=
Subject key identifier: 6B:08:63:88:77:7A:B1:0C:F4:9A:E3:00:E1:6D:22:96:FA:C9:43:74
Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
Certificate issuer: /CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Certificate serial: 019CA97C75AF4E9D8FCA5B7AF0DE93AE4154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
Manifest number: 0995
Signing time: Sun 01 Mar 2026 13:00:31 +0000
Manifest this update: Sun 01 Mar 2026 13:00:31 +0000
Manifest next update: Mon 02 Mar 2026 13:00:31 +0000
Files and hashes: 1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: YgJxhH7YddBC+YlxwvWJxmpFQalhHGQefinewNGb0dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:75:af:4e:9d:8f:ca:5b:7a:f0:de:93:ae:41:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Validity
Not Before: Mar 1 13:00:31 2026 GMT
Not After : Mar 2 13:00:31 2026 GMT
Subject: CN=6b086388777ab10cf49ae300e16d2296fac94374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:40:66:13:bd:c3:ba:9b:69:0b:6e:be:fa:51:
32:0b:9c:de:62:e1:85:ca:b9:bd:0d:fb:b1:8f:7d:
9f:78:77:ea:26:30:69:1f:76:ff:8e:94:56:87:23:
21:0f:4e:15:08:d8:d9:bb:b8:eb:27:b5:ce:23:69:
b1:d8:d2:f4:a7:84:86:50:f7:f1:8e:8e:90:27:a6:
4a:25:2f:37:7b:19:ab:a9:7b:ca:b2:43:ae:40:76:
fb:b1:73:a4:3b:91:02:41:b4:31:8c:b2:58:b6:74:
f1:b1:fd:5a:f0:43:d2:91:76:d1:23:5e:8b:bc:d8:
e2:a9:f2:de:1f:a0:2a:40:c0:32:2a:c3:f5:bd:11:
5d:db:b2:2a:e7:ed:f7:d6:7e:43:8a:48:2e:0d:70:
a0:e1:50:ff:4d:d5:82:34:c5:b0:6f:d8:02:40:de:
89:5c:27:68:ab:44:30:a5:5e:f2:99:a7:07:bd:e0:
0f:ce:da:92:4a:6b:74:c4:99:53:40:7f:df:54:77:
81:01:6b:ed:6a:b2:8f:76:63:07:5e:7b:77:dc:9e:
0d:cf:ae:62:38:6c:93:10:1e:b7:d0:84:b2:aa:b2:
9e:eb:6f:68:e1:aa:8b:78:d7:ff:72:ea:3e:c1:87:
9c:36:79:d1:ca:b3:f1:c3:60:a5:b7:64:d1:86:6e:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:08:63:88:77:7A:B1:0C:F4:9A:E3:00:E1:6D:22:96:FA:C9:43:74
X509v3 Authority Key Identifier:
keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4a:66:23:bf:96:e5:4e:e4:0a:b3:74:7f:6e:c1:2a:5f:de:
e3:24:4c:f2:b8:b0:f8:01:3b:d9:9b:38:7f:ef:70:e7:84:c4:
dd:75:ef:4c:03:b9:1f:f3:37:2f:e2:c6:98:42:d6:67:5b:01:
ee:2e:6b:4e:9d:da:4e:71:2b:75:4d:fa:3b:6c:da:7f:46:23:
3e:53:6d:92:14:a8:63:3b:1d:2b:b8:57:5c:16:1d:3f:d8:52:
76:2b:79:10:b7:11:c8:a5:f6:f2:5c:de:8a:db:30:80:98:d7:
98:d5:7e:fa:a9:f2:6c:a1:3d:58:53:68:83:96:11:d1:e8:96:
92:9a:79:80:61:01:86:5a:35:23:2c:6f:a5:29:33:c9:01:5b:
fe:cf:d2:54:4c:96:a0:b7:6b:3c:b5:a3:b5:63:e6:f8:ed:f2:
4c:d1:63:d0:7d:57:19:43:d5:21:53:75:e6:a1:09:44:74:ca:
d4:4b:d3:60:9f:6a:fa:d2:99:05:a0:24:62:73:0d:4c:da:06:
14:2c:05:68:8f:c6:a9:f6:fc:f6:95:56:cf:86:d9:7f:9f:64:
c3:7b:f6:61:6b:08:43:2a:c4:a5:12:5a:58:58:42:28:ba:2f:
9c:4e:5b:19:11:51:93:46:8d:42:17:ad:7b:15:11:53:cb:54:
e8:13:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:46 2026 by rpki-client