Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: xAkVyPR58QPISz59NDgShT9d2HDU4RXgX4nNOs3r0ho=
Subject key identifier: D9:B9:E8:FB:3E:40:50:6A:FB:31:C0:06:12:2B:63:43:01:F4:5E:68
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 019CAAC64AB58798597ABF0AC4A0083AEB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 11D1
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: Zp7Fe8FwoCOs4zIHiove7NEPEJ4.roa (hash: gsPnmHx5RKtQUbjYCFzF5Dr3Op9dQI7pc6RXkhPL+X4=)
2: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: xBN39YN4r5lQ6VP/uTj+2GK0u68pvAbcVlf9CCKWwnY=)
3: k-KxVntGfZQqdYlvvADf0vCCShs.asa (hash: tbsoShLfVTUpofMwAUlpBczIlKTh5FfBkdjkDOkAdOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4a:b5:87:98:59:7a:bf:0a:c4:a0:08:3a:eb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=d9b9e8fb3e40506afb31c006122b634301f45e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:d3:e7:c8:0c:59:bf:fc:63:5d:a5:08:b3:
9b:c2:65:a6:eb:e8:21:08:72:8c:da:ce:aa:63:52:
11:aa:8d:36:cb:ee:60:fc:19:f3:dc:46:55:bb:72:
3b:71:ac:44:ef:1d:95:e0:0f:03:f0:12:94:c0:ce:
ec:22:3d:1d:66:42:21:9b:12:23:70:5c:20:73:2d:
c2:ca:75:bb:cc:13:80:f1:d8:fc:5e:f7:44:5e:7c:
4f:d8:f1:a7:7a:cc:e9:54:5e:3f:7b:88:bb:19:dc:
8d:46:d6:86:61:1e:f0:c6:5e:60:8c:01:ff:8d:26:
93:a7:b8:98:39:16:80:68:4f:2d:41:d0:7a:5c:94:
69:bd:1d:c2:ec:e9:fa:f4:45:a4:2c:8c:85:44:d1:
a1:26:ab:df:d1:b1:6d:1c:d7:9b:78:07:af:65:1e:
e1:37:bd:77:da:67:8c:32:0e:e4:e9:8c:74:0f:72:
aa:01:04:c8:18:40:5f:8f:74:2b:ff:0b:79:40:20:
f7:50:f0:ed:18:f3:b2:bd:b2:66:8c:69:57:e4:b8:
85:62:61:53:54:1e:a8:7b:5b:4f:4b:00:67:03:e5:
2e:c5:41:20:27:91:a4:e9:a3:92:00:5b:d8:ef:8f:
2c:af:5a:52:2f:60:2e:e2:96:ab:7e:24:a2:d1:4b:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B9:E8:FB:3E:40:50:6A:FB:31:C0:06:12:2B:63:43:01:F4:5E:68
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2b:12:02:43:a4:77:f2:72:70:bf:41:cf:db:49:04:59:30:
90:9a:8e:2d:aa:e9:9e:ce:e8:00:d0:9d:5d:a1:5d:99:2e:d5:
7b:61:86:e0:c1:91:32:75:51:a6:96:09:24:ad:db:b3:d9:6d:
73:d9:16:02:fd:7b:5a:5c:ce:b0:20:ec:b7:a9:d4:bc:b1:0f:
c3:95:1e:58:23:34:3e:13:13:89:6e:57:cf:f7:8e:65:6e:fc:
3c:94:db:4e:ce:7d:13:71:c5:59:fb:ff:f7:78:13:c1:3f:e6:
eb:21:ec:1d:b9:78:db:67:72:60:ac:48:2d:98:29:a4:37:33:
c3:c9:2f:ad:ad:d0:ad:25:7a:e8:e5:66:01:39:3c:5e:d0:ea:
b9:5c:ab:e4:bc:d1:c7:0d:db:4d:d2:9a:14:0c:12:2d:98:5f:
50:67:16:e9:83:20:18:a6:1c:90:23:4a:c3:f6:63:30:1e:1b:
7c:78:31:63:55:a5:85:e9:a9:c2:84:87:e7:b2:40:b4:90:db:
9a:71:e7:b0:61:c1:7e:9e:57:dc:44:23:5b:3c:62:72:12:6d:
dc:82:51:4c:6a:f9:54:12:5e:37:4e:00:00:49:6c:e9:ae:92:
d9:97:7a:0b:8e:df:19:62:b6:9b:f4:4b:a6:d1:1e:6a:2e:21:
7d:2c:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:17 2026 by rpki-client