Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: ycFdSiiyx98DdVI3sJ1vheDobI/CRuxB41affB6j6ik=
Subject key identifier: 60:62:10:32:ED:4F:45:8B:9B:E9:DC:D7:16:AA:E8:F9:25:49:99:9C
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 019D984FF8E6542161D8EE122788C1F98CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 124C
Signing time: Thu 16 Apr 2026 22:01:10 +0000
Manifest this update: Thu 16 Apr 2026 22:01:10 +0000
Manifest next update: Fri 17 Apr 2026 22:01:10 +0000
Files and hashes: 1: Zp7Fe8FwoCOs4zIHiove7NEPEJ4.roa (hash: gsPnmHx5RKtQUbjYCFzF5Dr3Op9dQI7pc6RXkhPL+X4=)
2: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: KJlxpflawzlw4+uSTlx2z/syP4ad4OQLW0mLH3/wcKU=)
3: k-KxVntGfZQqdYlvvADf0vCCShs.asa (hash: tbsoShLfVTUpofMwAUlpBczIlKTh5FfBkdjkDOkAdOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:f8:e6:54:21:61:d8:ee:12:27:88:c1:f9:8c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Apr 16 22:01:10 2026 GMT
Not After : Apr 17 22:01:10 2026 GMT
Subject: CN=60621032ed4f458b9be9dcd716aae8f92549999c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:db:f6:47:ec:6f:08:9a:d1:d7:53:d9:9f:
ca:ac:20:e0:af:41:6e:eb:b9:b6:6c:02:08:9a:8e:
a5:92:ee:fb:1a:4c:5b:79:98:d2:16:38:3e:35:02:
26:3c:67:01:b5:60:01:ef:a3:58:fa:46:e2:bc:24:
f6:f3:ee:ca:5e:15:32:f4:c3:e0:b8:38:25:3d:f1:
09:45:3a:8b:9a:28:1a:8b:b2:b1:89:e8:9b:2f:7a:
7a:eb:8b:8f:54:bf:57:51:97:09:ea:8a:a4:c5:5f:
de:6a:96:59:b3:b8:e9:95:86:16:d5:43:71:52:6b:
76:37:17:0e:f1:9d:e0:e9:e6:6c:03:53:47:b0:56:
9c:8d:b8:3e:b4:a0:e2:5f:82:d6:bd:0a:9b:a3:32:
e5:8e:39:d2:1d:3f:4a:56:69:8a:31:6a:b1:c7:ac:
90:81:12:d6:64:d4:a9:1a:8d:97:05:7f:b0:d7:ba:
73:14:af:6e:52:ba:29:00:2d:e4:d5:41:e6:af:b7:
0d:32:d3:dd:66:c6:09:d6:c9:da:7c:07:ee:b1:90:
33:00:20:0d:9f:ac:c0:b5:59:01:1a:a5:a6:e0:b3:
f8:a9:33:4b:ba:22:36:59:dd:56:7b:fe:aa:f8:eb:
07:82:e2:ba:c3:a8:16:50:01:03:27:29:88:49:94:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:62:10:32:ED:4F:45:8B:9B:E9:DC:D7:16:AA:E8:F9:25:49:99:9C
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:30:12:44:25:43:1c:1f:d1:f6:90:04:8d:61:e9:99:a7:9f:
d5:0a:fe:86:3c:58:4d:aa:27:75:f1:ec:cb:a5:73:e9:95:d0:
98:2b:c7:92:b1:99:98:f4:ea:60:da:5a:59:57:60:35:61:f8:
5c:ae:da:49:cf:01:ed:f9:92:da:33:9e:ce:51:7f:ac:7e:a0:
3f:5e:ef:d4:8e:fd:c5:0d:b4:fb:a7:5b:df:b8:d3:14:f9:1b:
46:0e:98:19:b8:84:d2:61:f7:ed:18:dd:d4:be:d7:08:f1:ee:
54:8e:81:e5:76:50:d2:26:03:16:93:75:3b:01:dc:33:86:8b:
7e:50:ae:62:da:eb:9b:a1:05:e1:6f:61:a4:f6:c7:b6:06:d6:
b2:9a:cf:d0:96:65:4a:0c:50:a8:03:96:b4:0a:d0:b0:3c:2c:
48:5b:00:d3:8d:cd:a5:4f:f6:89:53:fb:b7:f9:40:9a:0a:87:
f8:2c:93:e9:e0:85:ae:43:78:2c:6f:cd:60:59:b0:d3:f1:0c:
66:06:e9:4f:42:34:5a:3a:67:bc:eb:2f:66:99:71:a8:11:d3:
36:8f:e6:dc:45:5a:3d:65:26:68:2f:09:73:c9:27:90:8e:f9:
38:07:65:2a:dd:58:63:40:d2:e9:4e:0d:65:dc:be:a2:04:fa:
00:09:17:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT/jmVCFh2O4SJ4jB+YzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjBmOTExNWQxOTQwMzFmYzVjODQ5ZjE1YWJiZmQ4MGUw
ODYyMmIwHhcNMjYwNDE2MjIwMTEwWhcNMjYwNDE3MjIwMTEwWjAzMTEwLwYDVQQD
Eyg2MDYyMTAzMmVkNGY0NThiOWJlOWRjZDcxNmFhZThmOTI1NDk5OTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh/b9kfsbwia0ddT2Z/KrCDgr0Fu
67m2bAIImo6lku77GkxbeZjSFjg+NQImPGcBtWAB76NY+kbivCT28+7KXhUy9MPg
uDglPfEJRTqLmigai7KxieibL3p664uPVL9XUZcJ6oqkxV/eapZZs7jplYYW1UNx
Umt2NxcO8Z3g6eZsA1NHsFacjbg+tKDiX4LWvQqbozLljjnSHT9KVmmKMWqxx6yQ
gRLWZNSpGo2XBX+w17pzFK9uUropAC3k1UHmr7cNMtPdZsYJ1snafAfusZAzACAN
n6zAtVkBGqWm4LP4qTNLuiI2Wd1We/6q+OsHguK6w6gWUAEDJymISZQhywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBiEDLtT0WLm+nc1xaq6PklSZmcMB8GA1UdIwQY
MBaAFHAg+RFdGUAx/FyEnxWrv9gOCGIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmIt
NWYwNDU2ODhiYjk5LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmItNWYwNDU2ODhiYjk5
LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDASRCVD
HB/R9pAEjWHpmaef1Qr+hjxYTaondfHsy6Vz6ZXQmCvHkrGZmPTqYNpaWVdgNWH4
XK7aSc8B7fmS2jOezlF/rH6gP17v1I79xQ20+6db37jTFPkbRg6YGbiE0mH37Rjd
1L7XCPHuVI6B5XZQ0iYDFpN1OwHcM4aLflCuYtrrm6EF4W9hpPbHtgbWsprP0JZl
SgxQqAOWtArQsDwsSFsA043NpU/2iVP7t/lAmgqH+CyT6eCFrkN4LG/NYFmw0/EM
ZgbpT0I0WjpnvOsvZplxqBHTNo/m3EVaPWUmaC8Jc8knkI75OAdlKt1YY0DS6U4N
Zdy+ogT6AAkXUg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:03 2026 by rpki-client