Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: lO4jpVTHDqD/0sJ4hUjV+8HXdig9w087JPysgw0sxKg=
Subject key identifier: 64:8D:13:E3:F8:AC:01:E8:44:F1:B7:45:8E:50:82:55:CB:73:29:79
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 019CA9B39CE6D8249E7CB639A53338883A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 14:00:46 +0000
Manifest this update: Sun 01 Mar 2026 14:00:46 +0000
Manifest next update: Mon 02 Mar 2026 14:00:46 +0000
Files and hashes: 1: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: L8YwjFe3gyM7dypiqgEctTQxbx3iQ5eyCmJztv1g8fo=)
2: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (hash: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w=)
3: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (hash: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:9c:e6:d8:24:9e:7c:b6:39:a5:33:38:88:3a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Mar 1 14:00:46 2026 GMT
Not After : Mar 2 14:00:46 2026 GMT
Subject: CN=648d13e3f8ac01e844f1b7458e508255cb732979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:30:dc:5d:5a:8c:4a:54:d6:b2:c5:98:aa:
ad:8b:19:e7:f7:84:08:65:06:3c:77:f1:91:07:0d:
b4:de:de:b4:50:d5:bd:03:cb:61:51:0d:33:d0:33:
67:8c:1f:de:81:27:f7:80:bd:bf:dc:b6:ce:e4:16:
1e:1a:0c:bd:be:0a:64:a6:c2:b3:58:4a:b9:6c:21:
e6:4a:e2:5e:16:04:b0:88:fb:30:6a:a5:84:71:69:
09:e3:56:6b:a9:ca:a3:a0:7a:1b:ca:bd:ea:38:ff:
09:8b:89:ef:59:7a:76:93:e1:f3:1d:75:44:1c:18:
7f:af:05:3c:7c:e8:58:35:b4:e6:3d:cf:81:ad:77:
58:1a:c8:59:bf:66:c6:ec:87:22:7f:ef:21:6c:6c:
50:3e:ca:88:b0:31:9a:1b:f1:32:eb:af:d9:36:26:
cb:2b:23:37:41:18:a7:7e:4b:7b:32:66:8b:fb:19:
ff:db:a8:82:af:88:f2:b2:63:e0:c9:d1:84:50:e0:
14:be:40:1e:ee:a3:27:4e:e6:2b:ea:fa:8a:19:de:
8c:d0:46:b8:e5:1e:21:54:15:61:e3:d4:79:83:9e:
57:a4:9f:87:38:1e:c6:17:42:3b:d6:d7:2a:c1:02:
36:7c:a4:30:43:4d:7d:07:d1:ee:d2:39:2b:68:33:
f4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8D:13:E3:F8:AC:01:E8:44:F1:B7:45:8E:50:82:55:CB:73:29:79
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:37:65:54:c3:9c:7b:9b:2c:5a:b7:a9:6a:1f:32:0b:dd:e8:
3a:07:89:07:11:e5:e5:93:21:77:0f:5c:7a:05:e7:47:0a:c3:
eb:66:d2:0e:11:95:85:b6:9b:36:77:86:9d:94:2e:d7:fd:8c:
02:5d:15:14:b8:af:80:63:cb:4f:0b:1a:93:b7:90:4c:0a:50:
30:7b:0b:e8:ab:b5:ed:ae:7f:70:15:71:6d:e6:c3:5d:81:62:
c4:4c:f0:2c:43:93:dd:02:a9:fc:ec:84:e9:e8:47:af:a3:12:
c7:63:7d:3c:c4:29:aa:7a:55:fc:d9:35:57:eb:7a:0f:ba:cf:
0f:8b:f6:d6:5e:ab:57:d1:10:3f:e1:58:6d:4b:da:70:c6:4c:
8c:f7:08:01:f0:f1:53:35:78:61:aa:c7:f8:f5:cd:57:96:04:
ee:a5:a2:04:ab:82:6d:d9:1e:92:be:d3:17:6c:f3:ba:a1:3b:
fc:01:1f:d8:ca:ce:1d:91:4f:67:12:b8:26:9e:8d:63:97:b1:
70:49:13:19:91:7a:13:bc:f5:19:b4:ad:2f:2f:ed:77:85:0b:
cd:01:74:7e:f7:1a:66:7c:c1:09:50:2f:e9:b8:aa:e3:a7:dc:
45:26:c7:1b:af:51:95:75:20:d0:d2:a1:b5:29:6e:2e:4f:81:
5c:3f:34:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:15 2026 by rpki-client