Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: wMAXes2yy31HPQC7rgsbAYAGzzDChb7lF1+Gg0frvjI=
Subject key identifier: 11:90:22:14:34:FC:86:F1:E6:B5:CB:E6:CF:0E:90:92:8F:CC:5D:0C
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 019D9818E59F949AE8EEB5A7E067EF5394DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 1302
Signing time: Thu 16 Apr 2026 21:01:01 +0000
Manifest this update: Thu 16 Apr 2026 21:01:01 +0000
Manifest next update: Fri 17 Apr 2026 21:01:01 +0000
Files and hashes: 1: JIH2hr0PFTmo-UenvIATlScnTmw.roa (hash: /Ko64eIHlbMST16GcGIM1/ka+jF/BdIAp0WDKwXJUzY=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: +Axb/FfBJcpbQIz1s9kFLPhugXnSXiaahgKMGUbZiMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:e5:9f:94:9a:e8:ee:b5:a7:e0:67:ef:53:94:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Apr 16 21:01:01 2026 GMT
Not After : Apr 17 21:01:01 2026 GMT
Subject: CN=1190221434fc86f1e6b5cbe6cf0e90928fcc5d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:e8:b2:b6:90:1f:b5:d3:3c:97:eb:23:28:
90:b4:2c:02:23:00:e4:c5:b0:f9:f1:ec:59:ef:fc:
66:d9:31:b4:7a:82:d6:77:69:20:23:d7:95:65:6f:
48:21:0d:85:8d:77:40:da:b8:8e:eb:1e:20:d6:7b:
08:1f:9c:05:0c:61:e5:d1:c4:a2:58:45:2d:8a:7b:
43:3e:c9:5e:92:10:ce:d3:1b:72:26:2f:a2:49:df:
59:fb:91:2f:ee:5d:f3:b5:87:4c:2e:22:5f:6a:7d:
5c:a6:1c:04:90:8a:cd:0f:28:fb:60:89:bd:1f:d5:
b3:25:0a:6b:b8:78:c5:f8:29:c8:b9:1c:d6:86:2a:
c3:17:b4:7c:d2:33:8d:bb:c6:f1:36:e8:a9:5e:63:
bc:73:73:a1:f9:c0:a7:25:92:84:08:52:0a:13:0c:
55:00:38:be:20:2d:10:e7:46:2e:a6:67:bb:42:90:
ef:ea:fd:b5:14:79:bb:2e:40:26:fd:65:00:55:05:
1f:2d:60:9b:17:c4:e4:c3:00:3d:30:81:d6:e0:a4:
23:74:a8:3d:c8:2f:f4:bb:7d:b8:49:1b:3b:a4:a1:
ac:3a:e0:ad:c2:58:4a:64:bc:dc:4d:36:9e:be:02:
aa:ce:cb:7d:cb:98:a2:4b:58:cf:c3:e0:a3:f4:92:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:22:14:34:FC:86:F1:E6:B5:CB:E6:CF:0E:90:92:8F:CC:5D:0C
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4c:a9:82:a5:6f:79:97:02:f5:cf:1d:99:b9:e5:7c:ee:2d:
ee:9a:f5:2b:8d:53:c8:04:c5:36:4d:62:f7:13:8d:56:70:7e:
33:da:aa:92:fe:d5:7e:e5:2a:9b:ad:63:22:36:6a:ea:9c:4e:
4d:2c:0e:44:d9:1c:24:88:41:41:96:2a:8f:7a:96:bd:eb:ed:
ac:5b:e0:2b:f4:a2:dd:01:b9:1d:86:e8:8f:02:6c:a4:a8:1a:
86:ad:e6:ea:25:fc:b4:1c:3d:b3:6c:6e:5f:0e:e5:f8:8f:95:
77:b9:5a:a2:40:de:09:00:71:ac:6e:81:ab:b5:2f:63:fb:ca:
4d:9a:cd:50:5e:86:90:24:a3:90:a6:36:0a:d3:13:00:90:e8:
9e:b8:b1:eb:15:dd:56:5a:64:9b:31:36:e7:ca:10:fe:76:e0:
f5:65:66:6d:73:b5:6e:31:26:78:80:76:86:6b:95:fb:23:35:
a3:38:43:6a:e2:18:bb:ae:11:ab:b6:5c:d9:ba:fe:e6:a6:14:
d2:3d:9d:4b:a4:08:f8:40:ec:e5:b5:df:7c:fa:36:28:dc:10:
44:b1:3f:c9:f0:82:63:ae:39:ee:5a:db:e7:20:3f:39:bf:2a:
a7:fe:4d:ec:44:91:78:cb:0d:6f:c9:28:3f:83:bc:40:29:70:
fd:f9:68:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:30 2026 by rpki-client