Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: Ap3woHoDCmDGtqsgSkxZV6REaCbW6psFy9hA1OJNQJU=
Subject key identifier: 51:65:11:50:B6:0B:18:25:09:6A:2F:E2:3E:33:F1:C3:1B:68:F4:B4
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 019EC2C98F3177E2E39A428367E92C07AA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 1315
Signing time: Sat 13 Jun 2026 21:00:49 +0000
Manifest this update: Sat 13 Jun 2026 21:00:49 +0000
Manifest next update: Sun 14 Jun 2026 21:00:49 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: bWzbl7Xx9PPVFY7ZDtvCchN47UVqvWKQWUd5qqrTW8M=)
2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:8f:31:77:e2:e3:9a:42:83:67:e9:2c:07:aa:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Jun 13 21:00:49 2026 GMT
Not After : Jun 14 21:00:49 2026 GMT
Subject: CN=51651150b60b1825096a2fe23e33f1c31b68f4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:a4:a0:62:6e:02:d8:c5:db:a5:64:7f:ef:
54:c9:ee:a4:28:b6:61:1e:9c:fa:75:a6:8c:b9:be:
e1:a2:f3:84:29:d5:d0:a4:06:47:9a:81:fd:a1:ba:
4b:08:c9:2b:ff:19:e9:52:41:a5:35:5b:ea:0d:49:
55:b7:69:13:b4:fa:a8:a8:8c:44:14:fa:a3:4e:85:
32:c3:8e:08:ed:8c:8f:46:1c:35:26:6f:99:77:6c:
91:dd:ae:fe:2e:a6:f7:56:6a:10:0e:e7:09:52:d5:
3e:ef:06:bb:98:42:f3:aa:bc:70:6b:26:d9:06:7b:
e6:c4:4c:24:c2:31:af:3b:4b:14:7c:eb:3e:19:75:
e1:17:3d:6b:08:1b:c4:b9:88:a8:ec:78:91:2c:33:
b1:41:91:23:57:b6:6a:21:9d:e5:92:5a:11:ef:39:
58:e2:4c:71:f9:7a:83:75:b0:e1:b7:a1:6f:7d:4f:
d4:74:be:ea:c5:f9:2f:b7:3b:d7:a8:f6:f4:9a:29:
10:b5:b8:b6:ba:04:7c:07:63:b5:87:60:4e:71:eb:
a4:55:b8:17:a7:d1:e9:21:7f:6f:c3:aa:af:84:c0:
87:bc:3b:1c:e0:5d:8b:a4:f9:6b:49:1d:58:32:bd:
a3:e3:89:0a:41:97:56:90:35:46:1a:62:6a:cd:5c:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:65:11:50:B6:0B:18:25:09:6A:2F:E2:3E:33:F1:C3:1B:68:F4:B4
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b9:01:7f:d8:d6:cd:42:2a:f4:4a:34:32:2c:a2:ac:93:bd:
a2:bb:ab:92:4d:27:e8:40:bc:8f:28:ed:f2:b4:3a:0e:4a:c9:
18:ce:e7:cf:45:2b:7c:31:83:36:4c:1e:ec:a0:ec:84:6f:25:
1d:30:ce:fb:d1:18:64:39:07:f8:a8:ed:93:aa:65:42:fb:d1:
d6:93:cd:47:7b:e1:8c:a4:67:72:d4:7f:9f:72:44:15:b1:d7:
1f:22:c1:50:09:25:2c:9c:12:dd:e8:db:d2:0b:88:8c:ed:1b:
eb:2c:9e:49:5c:54:01:b0:b5:43:f7:47:bb:65:35:43:72:f3:
40:09:31:9c:75:d2:ad:75:1b:7e:1d:1c:61:ab:88:df:59:4d:
78:2c:3a:ba:1e:4e:c5:fe:9c:df:b9:b4:6e:e3:ef:19:2f:0c:
49:12:fe:06:dd:71:cb:c8:7a:cc:cf:04:0a:fd:d1:fc:7c:f0:
8a:b4:d4:8c:05:22:28:81:1f:04:a9:23:fb:c0:b1:39:d1:eb:
ab:c1:cb:c3:f0:c3:b5:fd:57:9a:67:df:b9:60:17:fc:4f:39:
42:81:4c:0f:91:e6:ad:fe:6f:5b:d8:96:da:59:81:31:6f:13:
17:1e:d5:4a:49:a6:d6:97:5f:d2:40:83:ae:b6:71:0f:57:be:
91:35:62:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyY8xd+LjmkKDZ+ksB6paMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjY5NTQzY2E0NzE1OGI3ZTc3NzU4N2FkZWZmZDdlN2M2
OGIwNjEwHhcNMjYwNjEzMjEwMDQ5WhcNMjYwNjE0MjEwMDQ5WjAzMTEwLwYDVQQD
Eyg1MTY1MTE1MGI2MGIxODI1MDk2YTJmZTIzZTMzZjFjMzFiNjhmNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KKkoGJuAtjF26Vkf+9Uye6kKLZh
Hpz6daaMub7hovOEKdXQpAZHmoH9obpLCMkr/xnpUkGlNVvqDUlVt2kTtPqoqIxE
FPqjToUyw44I7YyPRhw1Jm+Zd2yR3a7+Lqb3VmoQDucJUtU+7wa7mELzqrxwaybZ
BnvmxEwkwjGvO0sUfOs+GXXhFz1rCBvEuYio7HiRLDOxQZEjV7ZqIZ3lkloR7zlY
4kxx+XqDdbDht6FvfU/UdL7qxfkvtzvXqPb0mikQtbi2ugR8B2O1h2BOceukVbgX
p9HpIX9vw6qvhMCHvDsc4F2LpPlrSR1YMr2j44kKQZdWkDVGGmJqzVy1BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFlEVC2CxglCWov4j4z8cMbaPS0MB8GA1UdIwQY
MBaAFAgmlUPKRxWLfnd1h63v/X58aLBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgt
NjBmZmRlMGNkN2M3LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgtNjBmZmRlMGNkN2M3
LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLkBf9jW
zUIq9Eo0MiyirJO9orurkk0n6EC8jyjt8rQ6DkrJGM7nz0UrfDGDNkwe7KDshG8l
HTDO+9EYZDkH+Kjtk6plQvvR1pPNR3vhjKRnctR/n3JEFbHXHyLBUAklLJwS3ejb
0guIjO0b6yyeSVxUAbC1Q/dHu2U1Q3LzQAkxnHXSrXUbfh0cYauI31lNeCw6uh5O
xf6c37m0buPvGS8MSRL+Bt1xy8h6zM8ECv3R/HzwirTUjAUiKIEfBKkj+8CxOdHr
q8HLw/DDtf1XmmffuWAX/E85QoFMD5Hmrf5vW9iW2lmBMW8TFx7VSkmm1pdf0kCD
rrZxD1e+kTViRw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:25:12 2026 by rpki-client