Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: MEMwC2FIXSLsl0KXDNoR9nS9QHUeTNsuLOEDLEag5S4=
Subject key identifier: 0F:45:04:18:DC:29:4A:02:A2:B1:ED:E2:AD:12:8F:A7:44:16:07:FC
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 01A0C143E3DC66AA3493358A20B9CFF3425A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 14A5
Signing time: Mon 21 Sep 2026 00:00:46 +0000
Manifest this update: Mon 21 Sep 2026 00:00:46 +0000
Manifest next update: Tue 22 Sep 2026 00:00:46 +0000
Files and hashes: 1: JIH2hr0PFTmo-UenvIATlScnTmw.roa (hash: /Ko64eIHlbMST16GcGIM1/ka+jF/BdIAp0WDKwXJUzY=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: 8WP1ZHU7eoZaMjgYJ6QbcDUAplmYIGtHOMuvEEQQsWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:e3:dc:66:aa:34:93:35:8a:20:b9:cf:f3:42:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Sep 21 00:00:46 2026 GMT
Not After : Sep 22 00:00:46 2026 GMT
Subject: CN=0f450418dc294a02a2b1ede2ad128fa7441607fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:d2:54:00:10:69:c4:a8:f6:37:8a:e3:35:
ba:74:dc:4e:5f:14:0a:3f:d7:e5:4c:47:8f:63:9e:
15:46:87:fc:41:9f:b2:4c:16:bb:df:17:26:2b:39:
32:ec:9f:6c:bd:f4:8e:bd:cf:5b:84:89:65:4f:da:
3c:b5:75:8a:22:7b:d8:09:b9:c9:ec:be:f0:a4:9f:
8e:22:82:0e:2a:28:10:1b:12:8c:15:bc:33:3c:2b:
49:9c:00:d7:15:1b:12:4a:16:eb:ea:5d:cf:28:43:
52:ff:36:24:c0:93:7e:6b:df:cc:d8:e8:e8:1a:ef:
7b:13:47:8e:df:e0:dc:f8:cb:98:9b:1c:a9:46:16:
f0:4c:07:5a:16:75:5f:c4:48:f0:85:74:22:27:bf:
f6:f6:83:63:93:58:5b:d6:1e:1d:e4:e3:f3:a4:a1:
af:07:8e:69:3c:dc:49:95:59:ed:9f:21:e8:db:eb:
63:c0:de:a4:b3:db:10:16:d8:a7:a5:67:be:7c:92:
a8:7a:01:c5:d2:a0:f8:72:51:a8:e9:d6:fb:bb:a3:
64:8e:6c:fd:bf:13:03:ef:f0:e4:80:12:9f:24:83:
26:35:6f:f5:1b:c1:09:13:99:57:a8:56:b0:d1:69:
97:8f:d0:92:7e:c9:24:39:68:51:e2:dc:fc:fd:70:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:45:04:18:DC:29:4A:02:A2:B1:ED:E2:AD:12:8F:A7:44:16:07:FC
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:51:ca:fc:89:45:ac:8c:6f:c0:1a:6a:6f:d5:9f:f8:ea:96:
20:32:29:9a:88:05:68:eb:7d:99:9b:a7:79:04:e4:88:08:bd:
83:c0:bb:92:e8:c9:54:ea:69:a5:e3:1e:a6:0e:4f:55:7d:84:
e1:cf:e0:d4:1a:e2:50:4a:ea:62:43:52:37:29:c3:69:db:a6:
bc:71:ee:75:c2:5f:1e:72:75:e1:03:ff:25:7b:93:c1:6b:0a:
2f:39:43:01:ad:60:20:a3:81:11:c6:c4:f2:18:ac:05:c7:ed:
78:74:bf:d8:da:87:c3:f4:c3:78:a1:78:a5:08:67:c0:33:a9:
55:9d:b3:ef:50:f8:ee:13:5f:2e:e7:e2:f8:ea:b5:b0:3e:34:
0d:0e:34:a8:e1:2a:b7:09:b0:79:4f:89:20:1f:fc:d5:78:c2:
47:f8:c3:7c:d1:49:84:19:7e:3c:d8:76:36:89:05:0e:eb:53:
8a:23:bd:ed:d4:b4:80:48:f3:9e:09:0c:82:7d:91:8b:e9:80:
db:d4:08:8a:f6:d1:bd:88:b3:a3:2b:74:e6:2d:df:2e:99:27:
f6:27:f4:fe:3d:4c:0c:cf:7c:8c:49:b4:d5:17:10:f1:eb:2b:
34:fd:c7:d9:85:d5:b1:29:ff:4b:b0:6f:04:c4:a3:8d:f8:c4:
8e:c8:f1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:43:19 2026 by rpki-client