Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: PrUYmU2ar4/1F/bDNhP3vEMQbTNH49z5n8psgkTc5dQ=
Subject key identifier: F8:28:A0:D8:B5:ED:5A:5B:85:9F:22:86:8E:5C:2E:CF:8D:D9:B1:10
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 019CABD9503ACDBACD4B2FD1F37A128DC75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 1200
Signing time: Mon 02 Mar 2026 00:01:11 +0000
Manifest this update: Mon 02 Mar 2026 00:01:11 +0000
Manifest next update: Tue 03 Mar 2026 00:01:11 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: sAysRYVr1wL9tfFH6213q8PrCYIddGna49eZYabrI2E=)
2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:50:3a:cd:ba:cd:4b:2f:d1:f3:7a:12:8d:c7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Mar 2 00:01:11 2026 GMT
Not After : Mar 3 00:01:11 2026 GMT
Subject: CN=f828a0d8b5ed5a5b859f22868e5c2ecf8dd9b110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:76:e7:31:1a:a1:72:d4:c1:bf:67:c7:45:
1a:e8:fc:01:5e:e3:65:67:16:2f:50:32:6a:51:5d:
42:eb:0e:00:ca:c0:8f:68:f2:53:0c:e0:fa:b0:cb:
a6:71:a9:e0:b2:1d:c4:ff:82:0f:8b:94:65:6b:1c:
e6:b4:a5:aa:ec:ab:41:08:5d:9f:81:fc:46:8d:a9:
1a:d4:27:e4:61:34:48:3f:7e:86:23:78:ff:81:f7:
39:c6:5d:f2:da:22:43:5e:45:59:fd:4a:06:91:f4:
31:8d:e7:61:55:82:9c:aa:fb:77:a9:4e:ce:94:44:
97:87:62:a2:33:d4:51:10:25:71:6f:07:75:3d:29:
e9:0e:9b:68:4e:b8:56:53:ee:09:19:42:f0:1e:9a:
b0:96:ca:6c:f3:f4:ec:83:f3:78:41:fa:35:92:a3:
07:40:42:35:cc:4b:7b:53:16:4c:d9:b3:96:00:fa:
6f:97:d4:0f:ee:93:b3:80:aa:14:4b:4a:50:74:b6:
95:31:7b:6c:dc:41:83:77:eb:ee:27:b4:63:7a:ca:
5c:c8:d6:fc:c9:4a:1e:b6:4a:a8:a7:92:93:da:f1:
26:97:87:a3:74:50:63:60:a4:03:22:99:d9:81:06:
61:0d:99:fd:d6:ce:c5:8c:b7:48:33:df:1a:8b:e6:
80:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:28:A0:D8:B5:ED:5A:5B:85:9F:22:86:8E:5C:2E:CF:8D:D9:B1:10
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:94:5b:4b:49:59:44:0c:59:9c:15:eb:85:d4:f6:0f:20:08:
fc:27:9a:e9:7d:73:90:7f:4f:e2:b3:b2:63:ce:07:f1:ed:75:
31:bb:6d:8a:f7:9d:6d:28:ae:d0:26:c0:b0:de:d6:f2:af:e4:
51:0a:82:1c:88:5b:b5:91:66:46:7e:25:42:ab:a6:c4:83:60:
be:a4:c9:34:85:d3:55:22:6c:26:1f:b5:a5:24:83:80:f9:47:
e2:8e:78:fc:b8:3b:1c:86:c6:b1:01:9b:88:c1:3c:f1:d0:94:
43:e8:bd:6d:96:92:cb:b1:16:8d:c6:90:30:b6:d2:22:86:8a:
95:80:fe:cd:27:2f:66:90:ae:f8:f2:a2:fc:ee:2a:d1:25:b6:
17:08:87:0a:92:5e:1f:15:16:56:86:5b:80:ba:3f:32:54:2c:
d9:a2:ac:8f:25:91:7a:1e:97:f9:be:85:f3:ac:5b:3d:43:9a:
a4:1d:86:07:96:59:09:af:c7:d2:79:28:3b:6c:b5:5c:f3:7a:
79:6b:84:a5:66:f9:be:fd:12:7a:9e:73:83:b7:4e:99:a4:e6:
12:b6:7e:92:20:00:40:04:bf:b8:b1:c8:f6:08:60:5f:0a:ee:
a6:c4:3c:1f:fd:70:b5:0a:89:b8:24:b4:97:61:2a:56:da:bc:
b4:a9:f3:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2VA6zbrNSy/R83oSjcdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjY5NTQzY2E0NzE1OGI3ZTc3NzU4N2FkZWZmZDdlN2M2
OGIwNjEwHhcNMjYwMzAyMDAwMTExWhcNMjYwMzAzMDAwMTExWjAzMTEwLwYDVQQD
EyhmODI4YTBkOGI1ZWQ1YTViODU5ZjIyODY4ZTVjMmVjZjhkZDliMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH925zEaoXLUwb9nx0Ua6PwBXuNl
ZxYvUDJqUV1C6w4AysCPaPJTDOD6sMumcangsh3E/4IPi5RlaxzmtKWq7KtBCF2f
gfxGjaka1CfkYTRIP36GI3j/gfc5xl3y2iJDXkVZ/UoGkfQxjedhVYKcqvt3qU7O
lESXh2KiM9RRECVxbwd1PSnpDptoTrhWU+4JGULwHpqwlsps8/Tsg/N4Qfo1kqMH
QEI1zEt7UxZM2bOWAPpvl9QP7pOzgKoUS0pQdLaVMXts3EGDd+vuJ7RjespcyNb8
yUoetkqop5KT2vEml4ejdFBjYKQDIpnZgQZhDZn91s7FjLdIM98ai+aAvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgooNi17VpbhZ8iho5cLs+N2bEQMB8GA1UdIwQY
MBaAFAgmlUPKRxWLfnd1h63v/X58aLBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgt
NjBmZmRlMGNkN2M3LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgtNjBmZmRlMGNkN2M3
LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpRbS0lZ
RAxZnBXrhdT2DyAI/Cea6X1zkH9P4rOyY84H8e11MbttivedbSiu0CbAsN7W8q/k
UQqCHIhbtZFmRn4lQqumxINgvqTJNIXTVSJsJh+1pSSDgPlH4o54/Lg7HIbGsQGb
iME88dCUQ+i9bZaSy7EWjcaQMLbSIoaKlYD+zScvZpCu+PKi/O4q0SW2FwiHCpJe
HxUWVoZbgLo/MlQs2aKsjyWReh6X+b6F86xbPUOapB2GB5ZZCa/H0nkoO2y1XPN6
eWuEpWb5vv0Sep5zg7dOmaTmErZ+kiAAQAS/uLHI9ghgXwrupsQ8H/1wtQqJuCS0
l2EqVtq8tKnz7g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:14 2026 by rpki-client