Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: Yzx4bwF+6jjRwTwiZlwXRXmvnIuOFTS3eLOlT8uUx8c=
Subject key identifier: 84:C9:AD:6C:71:1D:A9:56:BA:44:95:00:61:AD:BD:EF:F6:3F:03:01
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 019D992B1729FCE5E897F18F7A78DE4B12BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 02:00:31 +0000
Manifest this update: Fri 17 Apr 2026 02:00:31 +0000
Manifest next update: Sat 18 Apr 2026 02:00:31 +0000
Files and hashes: 1: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: A0t2uuHSLIcGMjrYWcvqaPbDyuAijsmRqDgJSpiFvjw=)
2: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (hash: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w=)
3: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (hash: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:17:29:fc:e5:e8:97:f1:8f:7a:78:de:4b:12:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Apr 17 02:00:31 2026 GMT
Not After : Apr 18 02:00:31 2026 GMT
Subject: CN=84c9ad6c711da956ba44950061adbdeff63f0301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:1b:ff:99:e6:8b:55:dc:d4:9f:fa:a3:28:
56:f0:00:b0:0b:a0:bc:c3:f2:1e:ba:36:b1:ff:16:
92:65:12:40:b9:01:34:59:95:de:8b:8f:ca:bb:91:
60:70:69:ff:cc:55:e3:80:55:f0:99:e5:d4:74:06:
80:fc:29:2d:bf:16:f7:19:68:52:ad:d0:be:9f:14:
2c:99:c7:16:bb:97:21:79:96:cb:44:bf:9d:25:50:
1c:91:05:6b:29:5b:12:31:bb:72:37:a7:fc:b4:84:
c2:7d:11:e6:7e:d0:52:33:f6:31:78:6c:f9:0d:33:
1e:e1:d8:72:ba:cf:58:99:07:05:3a:da:e2:30:fa:
42:6a:b2:0d:3e:6c:5f:02:dd:90:d1:ea:9d:4b:45:
da:97:54:e6:4e:7c:1b:da:6e:79:a0:91:ab:39:c6:
b2:b6:54:44:bd:4f:c5:6d:19:e5:3d:4b:a3:c9:bd:
03:87:9b:8f:22:48:ec:bd:4e:dd:6d:ab:e7:28:e1:
92:6d:3c:c4:e8:99:8a:3e:77:21:0e:6b:93:67:80:
0f:5b:b3:06:81:2b:ec:78:d0:94:90:60:ae:95:fb:
46:19:15:cc:f7:44:65:9b:ac:59:b5:06:dc:1b:ca:
fc:d3:4c:54:71:1c:57:10:91:0d:a4:96:c2:a6:a9:
64:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C9:AD:6C:71:1D:A9:56:BA:44:95:00:61:AD:BD:EF:F6:3F:03:01
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:39:2f:69:70:a7:df:36:bb:4f:b1:ed:a8:2e:71:46:18:5f:
b7:e8:a8:b4:85:f1:fd:cd:a1:bf:4d:83:4f:21:9e:c5:fb:c8:
39:c0:d4:24:60:d2:fd:a0:da:d5:b6:b2:a2:ca:de:67:8e:52:
09:58:9a:4e:70:ec:d9:c4:cf:be:84:89:00:c6:f9:37:e0:5d:
51:b1:02:59:d5:e1:e6:37:19:1f:4e:b0:2b:36:de:0f:ff:ef:
b6:e4:de:57:df:23:f2:15:16:d5:59:da:64:f5:e3:12:36:a0:
be:6d:20:8e:b1:d0:04:c8:e7:c6:82:5c:49:e1:17:ba:fd:4a:
6a:4a:aa:8d:97:24:bc:cb:44:2e:3a:a8:51:fa:28:14:54:02:
f4:d9:3d:26:f2:e9:d7:0c:0c:68:6f:ce:e5:4b:a9:96:57:8d:
42:12:68:6f:c3:4a:b9:4d:bf:51:53:98:91:54:dc:fd:61:8b:
5f:4c:d0:27:b0:4d:7a:2b:cb:a2:dc:e8:2e:e5:e4:9c:59:ba:
fc:11:d7:20:8c:af:20:7e:b1:2c:72:51:54:4f:43:d6:32:9b:
fd:58:5a:fb:1e:50:68:f8:d3:0a:32:b8:d6:d4:f8:a4:36:a0:
90:79:41:07:d8:55:11:dd:7c:0a:e1:6a:e1:e8:d2:b0:ca:ea:
05:12:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:19:14 2026 by rpki-client