Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: ivKnnMWr0qUtYPAmMn26hTCwbxrq12v62EB/gUMINcQ=
Subject key identifier: D4:89:FA:16:C6:C4:F1:34:DF:A3:67:6B:5F:5B:B2:E3:BF:BE:D5:0C
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 019CAC7E4151F54DD93A24924A425A17E9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 1288
Signing time: Mon 02 Mar 2026 03:01:21 +0000
Manifest this update: Mon 02 Mar 2026 03:01:21 +0000
Manifest next update: Tue 03 Mar 2026 03:01:21 +0000
Files and hashes: 1: JIH2hr0PFTmo-UenvIATlScnTmw.roa (hash: /Ko64eIHlbMST16GcGIM1/ka+jF/BdIAp0WDKwXJUzY=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: hiOKTabINp21ii2TcFujA6wGOH29UOKkVvn6ThaMelo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:41:51:f5:4d:d9:3a:24:92:4a:42:5a:17:e9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Mar 2 03:01:21 2026 GMT
Not After : Mar 3 03:01:21 2026 GMT
Subject: CN=d489fa16c6c4f134dfa3676b5f5bb2e3bfbed50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:e0:38:94:9a:cd:d8:fc:0d:28:c1:06:64:
c4:66:b6:10:f7:fe:f3:66:0b:39:a0:99:35:08:c3:
48:b6:7d:b5:0d:eb:45:ef:fe:13:f7:ce:83:52:d1:
a8:0e:75:ae:2e:b7:92:b2:76:08:2d:51:de:03:40:
a7:93:fa:16:4b:a2:57:25:6f:56:8a:5e:d9:6a:ad:
e6:79:b3:68:90:e8:13:12:30:28:bc:91:ee:c3:bd:
ab:d4:f7:f3:d2:df:8c:ba:a8:55:90:c5:35:66:70:
b2:42:6f:a3:04:3f:7a:e9:2c:1c:f2:9b:02:33:64:
bb:74:bc:3a:45:9f:75:92:3c:c6:ca:d5:03:af:3d:
63:20:f8:4a:63:af:b8:41:0c:9e:51:4b:e1:40:0b:
41:f9:9f:f3:bc:c3:8e:69:fb:f3:57:0f:56:8b:70:
39:2f:1f:10:75:7b:ff:76:e3:47:da:6c:51:18:ee:
33:e0:46:79:b0:2a:9b:62:4b:aa:aa:83:51:67:2c:
72:41:d5:0b:e5:51:a8:57:d1:42:5f:a1:7a:9d:46:
67:fc:0c:77:d3:c7:0c:be:d6:92:fa:90:d6:7a:eb:
cc:59:55:1f:6b:45:92:08:16:cb:6c:32:e4:3e:2d:
75:62:ea:34:6e:ad:02:8a:ef:4a:1c:ad:50:82:c2:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:89:FA:16:C6:C4:F1:34:DF:A3:67:6B:5F:5B:B2:E3:BF:BE:D5:0C
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9f:a0:43:99:70:b8:03:be:64:a8:29:82:ae:68:1a:37:5f:
e9:67:07:54:bb:3f:7a:b3:06:33:d2:3a:a2:0b:e6:e1:e2:81:
07:53:1d:01:11:a0:e2:b1:9f:62:92:50:f3:12:83:a1:7e:1c:
48:16:24:5a:2d:7e:b4:f1:66:88:78:fc:45:47:3c:18:12:59:
bb:ca:5c:cc:e2:19:a7:90:10:09:69:37:b2:ce:62:23:51:20:
d6:e5:58:3a:dd:70:32:0d:f2:83:c3:84:cd:3f:a3:1c:24:e5:
2f:29:ea:eb:86:66:5d:20:37:0a:53:d0:b9:4c:aa:cc:4e:44:
cf:d6:09:4d:69:04:5f:6f:f8:4b:9a:6e:51:8a:72:23:ed:7a:
1c:6b:1f:13:42:c9:25:e6:c2:87:0c:60:cf:61:19:24:08:b6:
0b:ec:d9:4b:c3:37:e8:1e:0d:c9:2a:eb:d0:15:b9:8d:89:e0:
a5:1d:9e:28:4d:2f:bb:43:57:62:cc:aa:3f:c9:89:bc:f1:40:
62:d5:cb:95:06:7d:df:5e:ea:21:50:13:87:02:b1:e5:20:67:
6a:42:99:c2:62:7c:8e:4a:74:01:9a:e4:49:a2:b9:fd:2f:7d:
74:74:58:a2:6e:a8:90:c8:73:b7:4c:3f:b7:ce:60:20:c2:e4:
ed:1f:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:47 2026 by rpki-client