Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: oHLAyAv1imJVQ6Ke/zi7GerneC43BNuZNATnFxMagJ8=
Subject key identifier: 20:77:BD:43:EF:EE:70:BD:1C:71:35:7E:BB:F3:07:C6:18:52:7C:FF
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 01A0C255FA58305697529B778E1A4C8310AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 1A6A
Signing time: Mon 21 Sep 2026 05:00:09 +0000
Manifest this update: Mon 21 Sep 2026 05:00:09 +0000
Manifest next update: Tue 22 Sep 2026 05:00:09 +0000
Files and hashes: 1: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: iD3Lp2HoI6m/Id0TYhWJZIh2EFetDS67RMOnJZKfByQ=)
2: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (hash: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w=)
3: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (hash: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:55:fa:58:30:56:97:52:9b:77:8e:1a:4c:83:10:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Sep 21 05:00:09 2026 GMT
Not After : Sep 22 05:00:09 2026 GMT
Subject: CN=2077bd43efee70bd1c71357ebbf307c618527cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:be:91:34:76:25:30:56:cb:c7:a3:0b:7e:
32:fc:ab:bd:02:29:f8:2a:81:c3:51:4f:31:d3:70:
07:d5:c5:54:66:bb:55:de:d1:a5:3b:43:98:f4:f0:
db:cf:8c:0a:2b:5e:94:f0:d0:24:29:a2:54:89:28:
01:2b:01:2c:43:f4:92:27:62:7c:99:73:62:2f:d2:
02:bb:9f:43:6b:49:90:f9:c7:b7:95:63:ba:34:91:
a7:cd:54:cb:d7:9c:92:8d:25:5e:52:f0:9a:3a:cb:
3e:d6:2b:1e:14:56:61:31:d3:11:da:83:48:d9:ff:
2d:cb:57:1f:61:15:53:2a:66:d5:23:34:9e:18:5c:
0a:bc:ca:a8:71:db:21:e7:6a:ab:03:a4:13:75:b1:
09:11:b2:25:c3:1b:0e:71:13:c2:e6:81:e0:37:7b:
df:71:3f:eb:e0:b8:52:fc:99:73:31:2a:5c:f0:50:
24:47:91:5d:82:8d:51:31:07:44:2d:46:4c:57:7b:
df:45:d9:10:8c:44:26:00:72:2b:4c:f7:2d:56:31:
40:d2:1a:08:a4:40:c8:60:26:2b:c7:86:3a:6c:fa:
10:a6:95:d4:70:d6:9a:76:07:8f:70:21:a0:88:be:
69:1a:d4:d9:86:26:38:cd:a0:36:82:b3:2f:99:b0:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:77:BD:43:EF:EE:70:BD:1C:71:35:7E:BB:F3:07:C6:18:52:7C:FF
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c7:de:be:4a:f3:a2:2a:1f:05:03:1e:24:fe:42:48:a3:9f:
9b:ae:5c:ea:58:73:8e:44:c5:15:6b:c9:19:dd:f6:e6:f7:24:
63:53:05:e3:52:fb:3c:a5:db:bf:c3:04:c9:43:eb:58:bf:60:
2b:2c:e9:a9:bf:63:38:94:eb:31:24:f8:03:f4:04:42:19:71:
cc:82:4d:34:7f:12:60:6a:31:c7:f1:5b:f4:f3:9c:14:81:94:
64:d4:84:a8:3b:27:ac:0b:83:22:48:05:10:f1:57:92:2a:63:
c0:1e:4c:9a:fe:8d:8d:15:09:e5:56:73:77:02:f9:3a:8e:a8:
0e:61:d1:c5:2b:91:f8:41:a5:29:f1:67:50:d9:ff:d6:c1:43:
de:3c:64:03:24:3f:0b:84:88:f2:28:9e:7b:cf:4b:df:48:df:
41:09:64:77:df:c5:64:11:2d:d3:4d:90:b0:3b:5f:9a:18:88:
44:38:0a:6f:8e:a1:a7:2d:a2:d5:7a:7d:fe:c3:32:0f:d3:4f:
0b:29:db:27:89:12:ca:f4:8d:5d:5d:48:8c:bb:2c:be:fd:67:
7b:54:47:5c:16:7d:32:09:29:0c:be:7c:2a:de:13:5e:b4:e8:
04:27:c9:cf:37:3b:99:a8:31:ef:01:5a:06:78:82:ee:8d:2e:
0a:c6:ab:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:26:24 2026 by rpki-client