Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: OgWDBBd+dmZINgmJu63qqfF55YRINDoVNQISRU5+Q30=
Subject key identifier: 0F:D0:28:B6:F9:9D:E9:B4:DC:F8:3A:C5:A1:23:F0:E1:9F:D1:16:4A
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 01A128E82679606E7DFDB4F5D91EC850D1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 1453
Signing time: Sun 11 Oct 2026 03:01:05 +0000
Manifest this update: Sun 11 Oct 2026 03:01:05 +0000
Manifest next update: Mon 12 Oct 2026 03:01:05 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: As4qNXBCiLAYJWFoBE86HU8GXC6/E0hFti2e2cfB2Y4=)
2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:26:79:60:6e:7d:fd:b4:f5:d9:1e:c8:50:d1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Oct 11 03:01:05 2026 GMT
Not After : Oct 12 03:01:05 2026 GMT
Subject: CN=0fd028b6f99de9b4dcf83ac5a123f0e19fd1164a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:93:0d:7d:d0:25:8f:a1:28:66:51:58:26:
72:1a:ae:5d:d0:ad:fa:c5:d9:2f:b7:01:cc:ed:d2:
b1:2b:40:f4:ca:cf:63:6d:24:19:52:2a:22:b8:e8:
58:70:55:16:ff:45:ca:c0:d0:e5:f3:4b:49:9e:63:
45:59:0e:4b:20:9a:92:18:97:89:d3:98:a9:e5:c2:
3c:bb:08:02:bc:fc:54:7b:90:2e:95:09:03:b8:2f:
eb:b7:65:dd:7c:ec:77:04:10:ed:17:97:75:19:29:
8f:36:d7:c5:00:b7:20:28:2c:0c:5c:0b:f8:1c:2b:
df:05:39:87:4d:75:54:ee:a9:fa:0a:29:c6:98:f2:
3d:19:a4:ce:3a:b8:a3:85:83:8c:12:15:8d:e8:2e:
22:79:a5:20:11:b6:17:65:33:db:9e:83:ea:96:3d:
d1:cc:c3:dc:8d:90:ad:f0:03:27:fb:3f:f6:e6:83:
4d:09:a2:ad:7b:07:cb:06:56:d3:a0:b4:51:a4:5e:
8a:3b:ae:0d:f7:7b:d0:bf:2a:49:ec:63:01:05:2f:
44:0b:de:a4:a7:d9:2b:bf:5a:81:01:88:08:bd:63:
19:f9:76:00:fb:8a:1f:89:57:07:08:29:ef:12:75:
fa:94:c2:b9:38:29:d3:a7:80:66:f8:f6:10:f8:bc:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D0:28:B6:F9:9D:E9:B4:DC:F8:3A:C5:A1:23:F0:E1:9F:D1:16:4A
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:62:2b:31:b8:5c:04:4e:a8:63:1c:3f:e4:3a:dc:8c:06:34:
d2:2d:45:20:86:05:35:9a:ce:91:f2:1f:ea:72:58:aa:fd:3a:
b4:88:ef:c2:64:e6:56:18:20:74:2a:9a:12:9d:f6:aa:b5:2e:
de:0e:e0:3e:a4:b3:14:a1:49:80:f2:6c:ef:7e:65:f4:35:1e:
50:04:4a:10:1d:73:d9:bd:e9:f5:e4:78:58:06:3e:ec:71:65:
b0:0f:ab:6b:36:cc:59:b7:31:cc:94:eb:ad:60:53:4d:6c:b2:
3e:b7:6b:7f:ca:2b:a7:fc:08:46:1d:2b:53:6e:70:b8:42:cc:
2b:04:f9:20:93:ef:40:29:89:7c:53:66:9f:21:97:fb:cf:42:
a1:34:f7:b2:2f:48:17:d0:f3:5a:31:b1:a8:cc:39:d8:3b:b5:
61:b4:48:6a:81:60:59:7a:7b:9c:e2:e2:94:7f:b4:84:6a:fb:
f3:66:6d:4a:e0:0c:65:3e:47:9b:ee:57:90:f3:ac:0d:81:fb:
b1:c0:17:13:bc:35:70:08:1e:c9:f9:ca:b5:c3:ec:03:68:2c:
f5:f0:84:7c:fb:55:fa:3e:fa:ae:33:ff:dc:b7:b6:f3:58:7c:
ce:fa:0e:77:56:43:b8:98:57:ef:8f:9f:e5:a4:24:e5:83:1f:
52:8a:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:48:39 2026 by rpki-client