Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: C7gQsedlBZ8IyErziVn4I81czqLm6HuknneiUgybf+k=
Subject key identifier: F0:E1:89:A0:E6:F0:98:EB:E0:96:46:CC:B4:DC:38:5C:04:F7:48:32
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 019D9B513E1D840136FA4F876A08FFF16E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 127C
Signing time: Fri 17 Apr 2026 12:01:25 +0000
Manifest this update: Fri 17 Apr 2026 12:01:25 +0000
Manifest next update: Sat 18 Apr 2026 12:01:25 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: HYZw5UDU7Ci1Pj4oVOH/ww4oEgS4lfXCtfG+ZcWWT9g=)
2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:3e:1d:84:01:36:fa:4f:87:6a:08:ff:f1:6e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Apr 17 12:01:25 2026 GMT
Not After : Apr 18 12:01:25 2026 GMT
Subject: CN=f0e189a0e6f098ebe09646ccb4dc385c04f74832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:68:f8:99:f9:97:ac:18:05:ed:bd:a9:04:24:
b4:1b:a6:49:50:61:16:ae:1f:0b:c9:fe:19:8a:0d:
0c:88:d0:e2:80:4c:c3:6a:e0:56:b4:d1:97:08:57:
a7:97:cf:08:c7:1e:8a:54:9d:16:3a:23:9a:ab:3f:
3d:47:67:2b:ce:05:82:0b:dc:67:10:c0:7f:62:a1:
9b:86:2a:46:40:2f:02:3d:5a:e6:9c:17:2a:81:73:
e3:86:ca:ba:3e:68:57:1c:04:9d:56:a0:59:fd:96:
cc:0d:73:07:9e:28:4a:e9:18:e3:f8:1b:78:34:2c:
f0:51:a2:e7:cd:9c:8e:ea:cb:69:89:f0:76:27:ad:
39:bf:2f:ea:71:16:22:ac:f5:45:e2:78:21:12:0c:
fe:0e:f8:6b:25:c3:15:5d:13:6e:8e:46:8b:a8:c7:
c1:88:6c:7b:96:d2:5c:8a:d9:f2:fc:1d:27:c7:c5:
9f:a7:89:cf:ac:bf:e8:f3:0f:da:3b:59:a8:d3:9c:
3c:67:ab:7a:64:45:06:10:05:1b:fd:dd:0b:bd:01:
be:98:5d:12:d1:42:fe:e2:21:26:43:46:2f:d8:25:
e5:eb:1d:f6:5a:47:fd:d2:8f:17:1d:84:04:b4:42:
1b:45:55:c5:92:67:12:4b:f9:8b:d6:7c:72:b7:62:
cd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E1:89:A0:E6:F0:98:EB:E0:96:46:CC:B4:DC:38:5C:04:F7:48:32
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:22:84:8e:1d:61:8d:08:46:09:b5:ff:1e:e8:13:c8:66:34:
74:5a:fa:ce:a9:7b:bc:be:4b:25:99:25:59:80:b1:8f:bc:9b:
6e:71:22:f8:e4:81:cd:3c:c4:1d:02:64:b8:b0:98:b8:f0:71:
d6:46:95:8d:0b:14:be:85:3b:7f:d4:4d:db:59:be:ac:80:d5:
09:80:a2:ca:79:d0:17:55:d7:95:1e:08:34:22:99:e0:a2:9d:
27:f8:bc:38:cf:00:76:d5:c5:ff:26:38:52:b0:5a:b1:d8:9c:
bc:36:55:5d:e8:ec:79:c0:f2:40:2f:cf:ef:97:75:01:78:00:
90:17:0e:52:0c:be:6b:a9:f5:b0:9e:42:f7:0e:a8:87:6e:7f:
28:b5:69:70:5d:af:63:cd:32:78:57:5b:30:75:b3:1a:19:d4:
aa:dc:e5:8e:46:6b:70:1d:25:60:47:6e:3d:85:dd:50:e4:cb:
3c:f7:96:2c:eb:b6:ca:84:9e:58:6f:be:e6:b2:67:a1:9a:88:
0b:12:4c:37:14:7d:79:f3:61:0e:92:84:39:85:f0:95:14:e7:
80:d5:7b:f6:df:a6:2e:38:af:cb:08:39:72:19:63:f9:17:1a:
77:3e:78:17:10:dc:a9:43:40:e3:67:c3:38:d4:6b:fc:d6:5f:
af:06:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:46 2026 by rpki-client