Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: FjHh6TWQ6ooTKiQ952dLPfwtkv2RoV9hD5iEqX5xAMQ=
Subject key identifier: DD:EF:1B:58:3C:AD:7F:62:C9:1D:A3:58:32:EA:4B:2C:94:D3:D3:50
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 01A0C2FB71A993E2127A49F578867353E5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 06A8
Signing time: Mon 21 Sep 2026 08:00:53 +0000
Manifest this update: Mon 21 Sep 2026 08:00:53 +0000
Manifest next update: Tue 22 Sep 2026 08:00:53 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: /wEXGeQPMX/6Aia//gpH0U9Z8d1+HvLhuPf+rdHrvWA=)
2: iup8bZJXQWzi6WIn8KegueZOLKE.roa (hash: zSYxeBh1XdgerWZy0gplpGx/R0toVcfaeIhO/MDyw5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:71:a9:93:e2:12:7a:49:f5:78:86:73:53:e5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Sep 21 08:00:53 2026 GMT
Not After : Sep 22 08:00:53 2026 GMT
Subject: CN=ddef1b583cad7f62c91da35832ea4b2c94d3d350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:51:68:2c:19:18:a6:00:ed:30:73:04:da:
ac:4f:d9:ea:13:42:53:ef:c4:6e:ac:ab:70:32:2b:
93:f8:e3:80:bc:5d:23:65:47:85:a6:7d:d0:64:3c:
32:02:47:9b:0b:79:5d:14:b9:bb:1d:e6:47:57:36:
31:ed:fb:10:5a:02:37:8a:2c:c3:7b:1c:e0:1d:e7:
dd:c6:cb:0a:15:95:48:0e:9e:4c:3b:1d:46:00:30:
e4:a1:ea:00:4d:94:94:86:94:5b:e1:04:66:e0:d8:
43:f3:9b:b0:23:45:1d:a8:e6:64:1c:91:70:8e:9f:
35:9a:74:d8:c3:db:79:3a:38:8f:14:7a:15:30:6d:
bd:a1:48:33:95:35:61:0e:09:f6:62:16:7e:75:00:
89:c7:6e:ce:9f:1f:6f:73:76:4b:a0:5c:16:d4:b6:
4c:6c:0c:09:1f:3e:92:42:df:0e:0c:04:d4:a2:99:
52:50:91:62:05:8d:88:f6:2e:63:28:4c:a5:85:95:
2c:cd:06:0c:a3:67:8b:48:9f:f8:20:b2:58:59:4d:
b5:87:7d:56:1f:40:7a:e8:db:9e:69:00:47:8e:89:
ad:32:0b:1f:cd:f4:a9:a4:e1:2e:db:bf:fc:64:7a:
cb:0f:fd:d0:85:8d:e0:fd:83:1d:64:60:da:e2:8b:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EF:1B:58:3C:AD:7F:62:C9:1D:A3:58:32:EA:4B:2C:94:D3:D3:50
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e5:04:c2:68:d2:62:1a:26:41:b1:9c:4f:a6:39:4c:0b:47:
3a:27:b7:22:99:de:7f:e6:3e:a6:ee:5b:fc:d0:7b:36:65:7c:
a1:ee:d1:c1:3b:4c:4c:d3:69:30:fa:bb:73:08:b8:c9:88:23:
14:f4:1f:ac:81:c3:9b:2d:69:95:ff:2c:76:6c:7b:ff:f8:70:
b8:f2:2b:67:6a:53:60:0c:cb:e0:fd:00:8a:e8:a8:af:7f:a1:
d6:ed:73:e3:43:91:48:23:e6:4c:93:f9:75:5b:2a:20:dd:76:
d1:66:f4:2f:ce:1f:01:db:e9:0d:d6:80:59:9c:46:27:02:2a:
4c:5e:ae:bb:69:9c:b6:41:7f:5a:a2:c4:9c:b9:cc:88:9a:de:
da:f1:d2:cd:41:0f:b3:c6:bb:94:56:41:fb:a7:00:1c:06:2b:
87:2d:e0:b7:d5:bf:53:62:bf:e7:c0:58:ca:56:82:38:93:58:
8f:b3:bd:02:e9:e7:d9:1f:3c:d3:b0:87:8e:f7:6f:c6:38:68:
b4:87:32:08:2a:fe:a0:e8:87:f8:7d:12:3f:c2:4e:b3:7d:7e:
6d:7a:0d:68:41:80:eb:89:90:b2:e4:3f:68:f9:d2:fe:b1:89:
28:6f:86:a6:6d:0a:64:42:67:62:07:8e:e3:eb:10:92:f4:ee:
8a:5c:21:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:35:56 2026 by rpki-client