
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: IsyfgSEPgSM+9A5RdiA0hYX9MxUFl5RZ52CCaw6bgjI=
Subject key identifier: 13:7B:14:36:B7:03:26:0A:02:FE:BF:04:BF:9C:8F:24:12:C5:B7:25
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 019EC1B675383837A5101A2D4AC998106557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 12E6
Signing time: Sat 13 Jun 2026 16:00:20 +0000
Manifest this update: Sat 13 Jun 2026 16:00:20 +0000
Manifest next update: Sun 14 Jun 2026 16:00:20 +0000
Files and hashes: 1: Zp7Fe8FwoCOs4zIHiove7NEPEJ4.roa (hash: gsPnmHx5RKtQUbjYCFzF5Dr3Op9dQI7pc6RXkhPL+X4=)
2: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: kE9Efg6/Pbv+G+/ySXz7FexitIeLk/k9FkVMaFtQP+0=)
3: k-KxVntGfZQqdYlvvADf0vCCShs.asa (hash: tbsoShLfVTUpofMwAUlpBczIlKTh5FfBkdjkDOkAdOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:75:38:38:37:a5:10:1a:2d:4a:c9:98:10:65:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Jun 13 16:00:20 2026 GMT
Not After : Jun 14 16:00:20 2026 GMT
Subject: CN=137b1436b703260a02febf04bf9c8f2412c5b725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:e2:85:ca:0a:f2:44:e2:f3:b6:bb:37:a5:
de:dd:43:2f:2c:58:14:d3:6b:29:9c:24:96:a7:73:
7a:0c:d8:a6:28:16:25:d0:ed:49:83:35:8b:4a:2f:
ee:2b:48:37:de:2d:a6:b1:49:e0:eb:c9:f2:de:9c:
12:06:cb:40:cf:f8:3c:9d:13:a6:44:8c:97:4b:64:
e6:82:d9:b5:65:80:d9:fd:5b:66:da:12:b9:4a:9e:
99:c9:cd:0c:37:d7:c2:19:f7:43:ec:5f:fa:bf:d0:
64:ec:c8:f2:21:b9:4d:a8:2f:71:c1:1d:dc:e2:37:
ca:a4:97:72:75:e6:0d:22:17:0e:7b:f8:6a:52:52:
75:27:55:12:2a:46:22:42:41:ae:fa:08:2a:09:3a:
d9:e1:6e:be:5e:40:35:b0:0d:c7:9f:f3:cf:c5:2a:
e9:23:ee:fc:0c:4a:cb:f1:65:e2:13:93:23:fe:78:
f2:f8:44:21:85:c3:fc:4a:5f:62:ae:39:02:02:ad:
27:ad:0d:c4:86:84:7f:fe:e7:71:00:d3:86:8e:10:
1a:39:74:75:2c:6a:64:e4:11:51:16:4c:55:e1:7e:
9e:80:46:f5:13:75:60:71:de:c6:1a:09:a9:56:80:
fa:a9:b2:6b:ae:03:40:6f:f6:49:96:64:e5:c1:24:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7B:14:36:B7:03:26:0A:02:FE:BF:04:BF:9C:8F:24:12:C5:B7:25
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:42:bf:b8:47:2a:62:9b:ae:12:71:69:16:13:70:1c:88:d0:
5b:37:0f:92:b0:3e:f9:7c:78:60:89:99:46:7f:df:e8:55:c4:
65:9a:76:eb:32:78:8a:38:49:6d:e2:1d:a5:cf:d8:bc:f9:3d:
1c:7b:c2:ff:0a:a2:3d:92:ad:dd:a0:b4:8f:cf:1c:53:b5:e5:
df:e5:34:eb:7d:1d:c0:9b:4f:52:20:7d:f7:47:47:77:d7:7a:
ca:b8:14:a0:15:15:ec:3e:a1:ba:97:bc:3f:ea:ee:39:d5:43:
f6:21:e8:55:46:f6:13:e5:60:01:3a:f3:fd:9c:9b:1f:13:82:
15:c9:5b:b7:6b:34:b8:26:90:92:9a:e9:da:31:1c:24:d0:af:
ad:d1:ab:eb:40:30:70:cc:e6:05:bf:23:d2:26:e2:0b:7f:4a:
f3:b2:61:34:5b:3f:9e:69:0f:e0:d6:38:8b:9d:65:d9:8f:c1:
94:f2:5e:30:73:45:4a:32:36:e4:1f:49:0d:34:eb:f0:51:3e:
f0:a4:32:ef:d4:e6:8d:77:0a:ee:b9:ae:6b:81:cb:74:62:d4:
9d:93:4b:d3:f4:d2:a3:f6:7d:b8:5e:6d:f6:11:96:ab:f4:e0:
a0:e4:db:c3:f1:e1:3d:8f:4a:35:70:99:62:22:d7:33:9b:bc:
f8:b5:f9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:49:57 2026 by rpki-client