Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: zuyC2LqCtxP0JKhjppEx+6tdt/YsCf/2jqN34CwYHck=
Subject key identifier: C3:0C:56:3D:79:73:FF:DA:B3:D3:9A:8C:27:AF:8C:1D:17:4B:44:8E
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 019D98F52CCEF58E5F265EAA86A0CFE13C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 15ED
Signing time: Fri 17 Apr 2026 01:01:37 +0000
Manifest this update: Fri 17 Apr 2026 01:01:37 +0000
Manifest next update: Sat 18 Apr 2026 01:01:37 +0000
Files and hashes: 1: 4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa (hash: nUClw79qayz71Sc4V6xVjW6UfUubOR4LTlNu0VRIsdI=)
2: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: QFRH2+bhD/CQ27SFwIeyZAaW/lzPdwOwICiWpT0aq/c=)
3: TT3NuIk1jnUlKN28ZgYKJPiSqvg.roa (hash: 5qXHnDoMl4Q3U+1gYr+pAeCUGStPZ9XDhx99c3xsil0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:2c:ce:f5:8e:5f:26:5e:aa:86:a0:cf:e1:3c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Apr 17 01:01:37 2026 GMT
Not After : Apr 18 01:01:37 2026 GMT
Subject: CN=c30c563d7973ffdab3d39a8c27af8c1d174b448e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:7f:af:b9:50:d2:b5:1f:fd:f6:49:86:62:
1d:04:73:18:bf:0a:99:be:ed:0b:5a:56:8d:1f:39:
7b:8a:f5:d8:ab:b1:f8:7b:69:cf:bf:92:8d:47:8d:
64:f6:17:0d:2d:f3:bb:2b:c5:54:11:31:75:81:a3:
b0:9d:ea:de:0a:41:e9:99:98:ec:f0:5e:c0:e1:10:
a7:1d:1d:7f:25:a6:bb:9d:9f:ef:fd:b1:b0:c4:1f:
6a:bf:70:5d:d3:fe:e9:d9:9d:1b:94:b7:43:95:2d:
50:5b:63:d1:07:2b:d4:85:ad:1d:27:95:8f:2c:22:
3f:2b:3a:7e:dd:9e:90:ec:c2:34:0b:1e:13:0b:63:
24:54:ec:a9:68:3e:42:29:13:54:84:03:cd:a5:28:
6c:7c:8d:b3:f4:26:91:41:71:00:6b:a3:6b:10:b2:
2c:66:93:98:9c:06:c6:64:49:ff:d3:20:ee:ce:6b:
d8:2a:c1:0b:72:df:0e:28:eb:04:8c:88:ee:cb:8d:
b0:69:7c:b8:eb:64:27:c6:3d:ae:32:26:b1:41:e5:
76:d9:52:13:ef:5a:d9:76:ba:e2:81:38:7d:5e:45:
bc:88:51:9c:ed:8a:29:a5:7d:4c:57:b3:28:a2:11:
4a:03:70:80:7f:8d:9d:8d:6a:d6:0c:9a:80:79:44:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0C:56:3D:79:73:FF:DA:B3:D3:9A:8C:27:AF:8C:1D:17:4B:44:8E
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ee:30:ab:ee:3b:e4:15:ab:aa:c0:0f:d6:65:fe:c8:1b:ad:
f1:4d:68:28:73:d3:ce:ea:a7:59:b7:c6:b7:14:40:03:00:09:
34:96:49:5c:f1:e3:cb:cb:b2:a6:71:3c:be:d0:20:d8:f8:ff:
1a:a4:b6:d7:cb:56:92:c3:d6:36:1d:0d:48:c7:2a:f5:aa:88:
4f:5f:5f:cc:6f:d5:66:6a:17:9d:2a:10:ee:42:6a:58:47:24:
21:ec:b1:03:0c:78:11:3e:5b:16:ef:73:de:d7:91:67:20:e9:
06:30:a0:3d:14:d2:97:0e:56:f0:10:54:6a:78:23:97:49:3f:
a0:2f:19:74:35:25:24:89:3b:42:e1:5e:2c:be:85:74:1d:f3:
de:f0:4d:bd:fe:69:e8:ac:2a:eb:e0:48:df:17:76:db:7f:c4:
cc:9d:51:a9:18:36:9e:ad:b0:b2:73:f9:7c:97:b1:80:c9:a2:
71:92:69:a5:5f:85:69:18:a3:54:ec:b3:b2:e6:d4:c6:f2:94:
44:17:ac:bf:9b:a5:86:3f:83:4c:9a:1a:1b:69:a2:5f:55:30:
9d:33:36:81:92:1c:97:e3:a2:f9:e5:94:17:1c:de:45:ab:d4:
a9:b5:da:93:74:c5:3e:b3:10:5f:9f:6c:17:f0:4f:34:e1:37:
ba:ba:21:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9SzO9Y5fJl6qhqDP4Tw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5Yzc0NmY2N2I3YWM1NmVhNmRkODU5NTFlYzAyMmNiYmQ2
N2FmMDYwHhcNMjYwNDE3MDEwMTM3WhcNMjYwNDE4MDEwMTM3WjAzMTEwLwYDVQQD
EyhjMzBjNTYzZDc5NzNmZmRhYjNkMzlhOGMyN2FmOGMxZDE3NGI0NDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKR/r7lQ0rUf/fZJhmIdBHMYvwqZ
vu0LWlaNHzl7ivXYq7H4e2nPv5KNR41k9hcNLfO7K8VUETF1gaOwnereCkHpmZjs
8F7A4RCnHR1/Jaa7nZ/v/bGwxB9qv3Bd0/7p2Z0blLdDlS1QW2PRByvUha0dJ5WP
LCI/Kzp+3Z6Q7MI0Cx4TC2MkVOypaD5CKRNUhAPNpShsfI2z9CaRQXEAa6NrELIs
ZpOYnAbGZEn/0yDuzmvYKsELct8OKOsEjIjuy42waXy462Qnxj2uMiaxQeV22VIT
71rZdrrigTh9XkW8iFGc7YoppX1MV7MoohFKA3CAf42djWrWDJqAeURSHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMMVj15c//as9OajCevjB0XS0SOMB8GA1UdIwQY
MBaAFAnHRvZ7esVupt2FlR7AIsu9Z68GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQt
YTZmNjExYThhYjkzLzEvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQtYTZmNjExYThhYjkz
LzEvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMe4wq+47
5BWrqsAP1mX+yBut8U1oKHPTzuqnWbfGtxRAAwAJNJZJXPHjy8uypnE8vtAg2Pj/
GqS218tWksPWNh0NSMcq9aqIT19fzG/VZmoXnSoQ7kJqWEckIeyxAwx4ET5bFu9z
3teRZyDpBjCgPRTSlw5W8BBUangjl0k/oC8ZdDUlJIk7QuFeLL6FdB3z3vBNvf5p
6Kwq6+BI3xd223/EzJ1RqRg2nq2wsnP5fJexgMmicZJppV+FaRijVOyzsubUxvKU
RBesv5ulhj+DTJoaG2miX1UwnTM2gZIcl+Oi+eWUFxzeRavUqbXak3TFPrMQX59s
F/BPNOE3uroh9w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:28 2026 by rpki-client