Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: kaXt8rlf2DNGicjmsBKNweEXqaXNCDfNITD2Uc4Azws=
Subject key identifier: CD:55:19:80:C9:19:CF:90:67:BF:02:6D:D3:41:C3:D5:B4:8C:28:AB
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 01A1DD26E40C8FC2AE6CC10721B61EAE9F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 1538
Signing time: Sun 15 Nov 2026 03:01:15 +0000
Manifest this update: Sun 15 Nov 2026 03:01:15 +0000
Manifest next update: Mon 16 Nov 2026 03:01:15 +0000
Files and hashes: 1: JIH2hr0PFTmo-UenvIATlScnTmw.roa (hash: /Ko64eIHlbMST16GcGIM1/ka+jF/BdIAp0WDKwXJUzY=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: oyUXCBpYdJMrvN8FIQJl4OolGIWfLHGSw+4hVeNZM7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:e4:0c:8f:c2:ae:6c:c1:07:21:b6:1e:ae:9f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Nov 15 03:01:15 2026 GMT
Not After : Nov 16 03:01:15 2026 GMT
Subject: CN=cd551980c919cf9067bf026dd341c3d5b48c28ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:54:e7:f2:f7:c1:b4:9d:bd:c1:56:78:61:
7e:9f:8b:b9:74:0e:ff:99:de:16:41:57:1e:ea:f4:
24:c4:06:67:ad:79:bd:7d:f4:6a:c7:68:5e:1e:71:
d4:09:da:1a:7d:ef:f6:6b:58:a1:98:7e:19:4f:c4:
27:1a:a5:b4:df:19:e7:54:ce:79:8e:82:3e:d0:27:
dc:96:84:dc:f8:cd:14:40:34:2e:96:1a:c2:10:a2:
a6:0b:c7:ca:a5:68:3e:b6:ad:d6:a2:ca:16:aa:6b:
86:30:f1:c3:4a:e2:4a:5e:6b:0f:00:2f:a1:4d:13:
2d:f3:e5:96:42:f4:23:19:44:2f:c2:49:1b:07:e9:
4e:e6:99:27:39:67:7e:a4:df:45:ce:4b:71:31:47:
10:5e:0a:70:51:ba:12:9d:e0:80:b9:d7:5b:81:a2:
44:be:49:e4:06:7d:df:36:f6:57:bf:bb:3b:f3:5a:
71:8c:9e:b8:32:d1:cb:6a:33:e0:fb:5c:fa:bf:e5:
0b:29:51:7a:fc:20:62:e2:7a:35:a0:00:8f:de:c3:
85:f9:85:9a:f1:7a:b9:d6:c8:ba:b8:60:0c:81:70:
c9:9a:6c:92:06:fd:a9:5d:09:c5:d3:bc:ee:2b:92:
df:67:83:0a:4f:8f:66:37:d0:fb:11:f0:92:df:48:
63:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:55:19:80:C9:19:CF:90:67:BF:02:6D:D3:41:C3:D5:B4:8C:28:AB
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:92:eb:15:99:47:a4:5d:b7:8a:b1:d8:90:a7:77:d2:6c:6d:
9a:1b:14:84:dd:cb:9a:5a:5a:c0:10:91:4d:ef:f2:be:48:27:
48:60:2e:22:e1:2d:70:45:b5:c3:ae:dc:78:d2:59:59:9e:58:
f2:47:a5:61:4c:38:ff:76:88:cb:15:82:12:41:f5:e9:59:2b:
89:06:8d:b4:5d:dc:01:89:47:5b:8d:0d:f1:1c:5e:cb:cc:d3:
cf:59:c1:03:a4:d0:a4:58:8a:8a:c4:03:ae:16:4d:d7:86:c8:
2e:f3:96:1e:8e:00:d1:21:38:02:da:af:f4:32:5c:b4:ad:37:
c0:65:31:4f:52:93:ae:70:b0:d5:16:03:49:c4:59:b4:9b:76:
a6:cb:0e:4d:5c:e9:0a:63:31:36:4a:f4:dd:f6:14:3a:f7:b5:
5b:21:49:e2:bb:4b:09:eb:ab:4b:02:b6:64:1c:54:c1:14:32:
8e:7a:0a:0f:94:a2:c4:3e:95:5f:dd:83:2a:6c:a3:85:c1:6c:
71:29:f3:34:55:e4:87:73:aa:6a:d3:73:64:25:c9:45:f8:fe:
b5:0c:b0:dd:b9:bd:ed:bc:d4:4a:53:d6:70:62:23:2a:a8:48:
e6:6b:1d:db:5e:1d:b6:bb:c9:ab:14:9d:00:49:be:19:f5:43:
41:c7:89:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:31:27 2026 by rpki-client