Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: R10xHEOphU9cbuTvzDkWU1uQY8mG2nliq9/ZY/2Kf/4=
Subject key identifier: 66:33:66:B4:B0:0A:CA:96:07:E3:D6:80:FA:3A:D9:07:EB:D8:B0:BF
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 019D99991B354628762954B6C7C0FF25E907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 15CA
Signing time: Fri 17 Apr 2026 04:00:41 +0000
Manifest this update: Fri 17 Apr 2026 04:00:41 +0000
Manifest next update: Sat 18 Apr 2026 04:00:41 +0000
Files and hashes: 1: 6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa (hash: kl9YGSouHVzVMvRPPAag8+zWXrah44Y/BhsIajbDopE=)
2: 7mW4wOHRW1H71d-sSOc_lK75qpg.roa (hash: 2C20Y1HJD9NUUe3oyFVws916YL4BTi4Ci2cXXpoCfNg=)
3: 8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa (hash: 0WUQ+r+hiGXINe9SN2Kz/K2ffPmAOMbSUmJhrABwNlo=)
4: UvogVQiFlOzL1lQpufyLEmyZKjQ.roa (hash: cIiYR4bOC43Bt+bdDmmyoUYytMbqFO52hP62NEaq3as=)
5: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: uci1qcj0SONMWHy7fO5sKj+bPd5J5ylss71RXAfKHbg=)
6: m45yjB9heCQgWbdWEVZCVnmp6X4.roa (hash: tpHOEqU2bYIH0qEm+Dci7EwfRuPoT7dkTl0e7TMKNVk=)
7: qi3SqAR4IIR7pmGIGinOQFwfq00.roa (hash: 7JqUABvsjicn+d6phPLtYhYvVDr7+WhkTEpAXtYm16M=)
8: yvpIZfiXJrwugGnY8W0FyE6MSYY.roa (hash: DTFYVK7K9TZPbDz7/73V8tXEHb2zMN5hyl3mObjqscw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:1b:35:46:28:76:29:54:b6:c7:c0:ff:25:e9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Apr 17 04:00:41 2026 GMT
Not After : Apr 18 04:00:41 2026 GMT
Subject: CN=663366b4b00aca9607e3d680fa3ad907ebd8b0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:56:0d:a1:e7:81:68:e3:cb:be:07:6e:0f:
79:70:66:90:97:f4:45:93:7a:f2:b5:da:f4:9f:0d:
0e:52:ba:c5:00:e0:53:42:53:ff:7d:8b:bd:1f:bd:
72:a9:32:66:4f:fc:7b:eb:20:dc:12:e0:bd:84:7b:
a6:cd:e2:6e:5e:ae:3b:17:b3:07:66:9e:98:bd:df:
02:91:85:01:2e:ad:1b:1b:ad:9f:4d:12:6d:47:52:
07:f3:b1:6d:e9:ab:53:0d:8c:c3:77:82:d7:10:d4:
25:cc:75:29:59:a3:78:22:7e:5c:d7:2a:26:43:2b:
f6:48:6b:ab:3e:58:87:b8:66:3c:36:38:da:e3:37:
ba:aa:ea:80:0e:c5:26:43:25:e1:8c:1e:81:dc:f5:
32:86:27:b4:00:22:7f:0d:72:ec:d5:aa:05:64:ae:
50:61:07:8b:69:0c:7a:1c:e9:4b:ac:68:81:d4:a6:
eb:09:f3:90:f8:95:85:ad:35:3d:78:cd:ba:45:d7:
08:d3:ab:5d:bb:af:21:f6:12:14:66:fb:a2:03:14:
d7:9a:14:ef:49:a6:47:22:5e:91:4c:63:b4:c9:7d:
ba:c2:e3:13:be:4f:64:ca:93:79:e3:3d:fd:3f:c3:
8b:f9:a7:9c:4a:f4:98:21:07:c7:72:32:ec:87:00:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:33:66:B4:B0:0A:CA:96:07:E3:D6:80:FA:3A:D9:07:EB:D8:B0:BF
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bc:dc:49:9a:38:70:88:91:53:18:6f:8a:b6:3f:a7:d2:2e:
fb:a5:dd:74:67:58:80:6e:e2:a6:e7:f0:64:4b:5a:1a:5a:17:
22:96:c4:76:5c:76:a2:80:89:4b:48:36:6f:36:5e:91:10:a2:
2a:bc:08:4a:9f:f9:b6:3c:91:33:c6:26:98:67:80:e2:62:34:
50:96:54:b9:7a:6a:e0:7a:75:17:5a:48:39:b1:60:68:06:1e:
37:90:d8:54:42:1c:d8:e4:3f:4f:8c:68:f2:03:5c:30:e5:31:
cb:97:7b:67:78:10:87:cc:fa:69:f2:ad:47:74:89:ca:a9:7b:
40:43:11:7f:17:6c:01:3b:dc:75:cf:bc:66:dd:71:91:7b:47:
d9:dc:fc:44:d1:c2:08:4e:9f:40:bc:25:34:3b:c8:8b:6e:28:
29:31:d8:93:ca:f8:aa:e9:07:5e:bb:32:ce:00:5c:4c:7c:8d:
bd:9c:cc:d5:e3:4a:b6:4b:25:57:38:d4:35:99:6f:98:5e:44:
00:dd:ca:ca:9d:0f:94:38:57:6a:f6:40:2a:03:f1:05:47:f4:
5e:36:59:cc:23:68:ce:de:5c:14:5a:8c:15:a3:96:eb:34:49:
26:19:21:4a:97:21:51:5c:66:f3:75:4c:dd:b2:3b:d4:5c:ae:
85:d3:35:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:47 2026 by rpki-client