Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: cFxZTgzv52YefMPyH7vueG8V012s4TSH+fKnNqRjs/E=
Subject key identifier: 59:DB:84:0E:80:7E:07:53:EF:26:1F:5D:5F:37:09:85:11:3E:B3:6D
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 01A0D3156CA2A69A2D872F35CECA5F5ECB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 13F9
Signing time: Thu 24 Sep 2026 11:03:11 +0000
Manifest this update: Thu 24 Sep 2026 11:03:11 +0000
Manifest next update: Fri 25 Sep 2026 11:03:11 +0000
Files and hashes: 1: Q2c2ZVxD01eYMSDQao1YoIXjWy0.asa (hash: E2cO6SXyK9HZAexFchG/a5DBbHwX9fgWeihBGqBK40o=)
2: Zp7Fe8FwoCOs4zIHiove7NEPEJ4.roa (hash: gsPnmHx5RKtQUbjYCFzF5Dr3Op9dQI7pc6RXkhPL+X4=)
3: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: RDPA6m7vBrz9PmgEkJfBvUQFHMyNtixXhfh2t5QJlMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:6c:a2:a6:9a:2d:87:2f:35:ce:ca:5f:5e:cb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Sep 24 11:03:11 2026 GMT
Not After : Sep 25 11:03:11 2026 GMT
Subject: CN=59db840e807e0753ef261f5d5f370985113eb36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:bd:56:14:20:0c:df:7d:82:8d:eb:97:80:
72:1b:13:05:fe:19:cf:45:9c:a3:3d:67:d8:c3:d6:
20:b3:e1:71:05:0b:1d:60:7f:d7:c9:54:9d:1b:cc:
ee:7d:8a:3c:0e:cb:fd:e2:36:10:43:56:d7:d5:71:
f5:5b:42:1d:40:c7:27:a2:e6:29:96:74:b3:0f:e7:
56:f1:44:6e:bd:86:04:4b:14:0b:45:40:46:37:21:
c0:5c:17:75:f5:c3:5e:dc:4a:09:dd:07:2d:8b:b5:
15:8a:c6:43:ec:c8:c7:22:4c:3f:11:db:bc:1f:bc:
32:d9:67:8f:38:3a:67:64:42:8c:d8:13:e3:31:3e:
d8:f0:2c:03:3f:93:1d:cf:ff:eb:78:27:b3:e4:f7:
d1:87:92:e9:b2:b3:7c:77:c8:a5:6c:e4:65:3f:51:
2e:e0:0e:9e:d0:6a:03:18:6d:c7:2e:b3:5e:60:eb:
08:f8:49:c6:f6:e0:07:81:3f:a2:3d:e1:1b:f9:46:
9b:90:18:f2:b0:58:b1:08:b5:a6:e7:46:b0:6b:9e:
e9:d8:b8:b8:53:d2:c3:e1:ab:82:78:e4:c6:6f:c2:
5e:4c:01:6b:ac:51:e4:49:c1:75:af:d6:80:d0:9b:
e3:5f:51:fb:48:76:9a:e2:cc:71:ff:e8:fe:23:32:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DB:84:0E:80:7E:07:53:EF:26:1F:5D:5F:37:09:85:11:3E:B3:6D
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a1:5e:dc:bf:e6:e8:80:c1:2d:2a:eb:68:f9:5e:3a:31:eb:
b7:9c:8a:bf:4c:92:df:b8:a5:ec:29:44:76:c0:9d:fc:d5:17:
19:46:d9:ba:45:b3:b5:47:e8:7f:db:f2:7e:b5:61:25:76:f2:
0b:8d:cf:5b:ca:09:c9:b9:f0:34:ae:9a:09:c1:46:92:8b:15:
a8:90:4c:ef:2b:80:d9:fc:d6:32:9f:3e:b7:51:21:19:9b:05:
b8:d2:63:9d:62:78:ce:67:eb:62:67:aa:76:49:50:89:8b:77:
29:02:d1:e5:7d:4f:53:f8:c9:d4:11:03:20:d7:01:f8:52:ef:
1e:71:5f:55:f4:1f:21:db:af:5f:96:78:fd:6b:ab:89:5b:7b:
73:16:4f:c4:7a:26:93:6f:69:e9:36:f8:7c:e7:bb:80:16:9d:
a7:f0:08:2c:ef:56:14:f5:51:96:d5:2d:bd:5c:de:31:f4:b0:
9a:4d:9d:a5:42:52:75:e1:ca:3c:ea:23:46:8b:99:ec:a2:19:
df:29:51:87:e3:0d:b6:65:5f:41:f6:9b:4c:3e:7f:2e:65:37:
2c:7f:86:dc:fd:46:34:80:2f:2f:d4:8a:dd:b4:e9:86:bb:00:
79:09:54:d9:c0:97:62:ad:5a:fc:93:c6:09:56:5f:11:6f:ec:
a4:c2:7f:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTFWyippothy81zspfXsuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjBmOTExNWQxOTQwMzFmYzVjODQ5ZjE1YWJiZmQ4MGUw
ODYyMmIwHhcNMjYwOTI0MTEwMzExWhcNMjYwOTI1MTEwMzExWjAzMTEwLwYDVQQD
Eyg1OWRiODQwZTgwN2UwNzUzZWYyNjFmNWQ1ZjM3MDk4NTExM2ViMzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi+9VhQgDN99go3rl4ByGxMF/hnP
RZyjPWfYw9Ygs+FxBQsdYH/XyVSdG8zufYo8Dsv94jYQQ1bX1XH1W0IdQMcnouYp
lnSzD+dW8URuvYYESxQLRUBGNyHAXBd19cNe3EoJ3Qcti7UVisZD7MjHIkw/Edu8
H7wy2WePODpnZEKM2BPjMT7Y8CwDP5Mdz//reCez5PfRh5LpsrN8d8ilbORlP1Eu
4A6e0GoDGG3HLrNeYOsI+EnG9uAHgT+iPeEb+UabkBjysFixCLWm50awa57p2Li4
U9LD4auCeOTGb8JeTAFrrFHkScF1r9aA0JvjX1H7SHaa4sxx/+j+IzJG4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnbhA6AfgdT7yYfXV83CYURPrNtMB8GA1UdIwQY
MBaAFHAg+RFdGUAx/FyEnxWrv9gOCGIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmIt
NWYwNDU2ODhiYjk5LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmItNWYwNDU2ODhiYjk5
LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKFe3L/m
6IDBLSrraPleOjHrt5yKv0yS37il7ClEdsCd/NUXGUbZukWztUfof9vyfrVhJXby
C43PW8oJybnwNK6aCcFGkosVqJBM7yuA2fzWMp8+t1EhGZsFuNJjnWJ4zmfrYmeq
dklQiYt3KQLR5X1PU/jJ1BEDINcB+FLvHnFfVfQfIduvX5Z4/WuriVt7cxZPxHom
k29p6Tb4fOe7gBadp/AILO9WFPVRltUtvVzeMfSwmk2dpUJSdeHKPOojRouZ7KIZ
3ylRh+MNtmVfQfabTD5/LmU3LH+G3P1GNIAvL9SK3bTphrsAeQlU2cCXYq1a/JPG
CVZfEW/spMJ/2A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:28:11 2026 by rpki-client