Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: R6nsuugdD2LNBnPGd32NKv/+r7QgjETRoE7y5aA5AP4=
Subject key identifier: F3:12:56:72:10:F8:98:21:C2:CE:B7:81:0D:6A:D8:6A:98:9A:70:D0
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 01A1C1416404352DD3AA21E3DC21B6DFC243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 1AEE
Signing time: Mon 09 Nov 2026 17:00:50 +0000
Manifest this update: Mon 09 Nov 2026 17:00:50 +0000
Manifest next update: Tue 10 Nov 2026 17:00:50 +0000
Files and hashes: 1: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: cvVN/Ob0B2U6pHcfU5+65JX/oo4a0M4ylSzyf8f9aVk=)
2: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (hash: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w=)
3: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (hash: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:41:64:04:35:2d:d3:aa:21:e3:dc:21:b6:df:c2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Nov 9 17:00:50 2026 GMT
Not After : Nov 10 17:00:50 2026 GMT
Subject: CN=f312567210f89821c2ceb7810d6ad86a989a70d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:68:64:4c:01:2e:b1:9a:ad:35:b3:68:fd:
af:b5:1f:ac:90:0d:33:da:a0:50:e3:1e:3d:85:78:
6b:fb:0a:f8:7d:23:45:91:03:c8:ec:0d:f5:49:3a:
a4:76:1f:f2:af:66:ab:08:65:65:27:c3:aa:23:41:
01:64:e2:82:7a:b1:ae:d6:12:cf:d4:b5:34:1c:8d:
41:e7:48:59:93:40:ad:97:db:2b:7c:5b:51:16:e6:
a5:10:00:e0:84:47:00:04:1c:f5:c6:03:45:d5:2d:
21:58:e5:b6:0d:04:f5:9e:3f:29:8d:0b:6a:3b:de:
35:d3:e1:47:9c:e1:f4:aa:82:f6:ae:88:ce:34:41:
f1:71:9a:45:dd:80:7e:9e:e2:cf:43:5b:48:bc:95:
7f:48:5c:60:cc:bb:87:a8:08:ff:f6:29:90:de:df:
5d:49:33:d3:d7:6e:b8:31:f3:56:f1:b2:e0:aa:04:
86:64:26:75:b5:ed:d9:e7:76:50:95:22:ff:38:72:
e6:9d:a0:f3:84:03:20:ae:56:fc:e6:bf:b2:03:b5:
8d:ca:62:91:2e:02:ab:11:4d:34:75:96:e6:b5:1b:
0a:b3:1c:c8:da:00:77:9a:bb:4f:c6:1b:a0:e2:f6:
d8:e8:e8:df:d9:b6:96:9d:a7:1e:43:1d:fc:c5:96:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:12:56:72:10:F8:98:21:C2:CE:B7:81:0D:6A:D8:6A:98:9A:70:D0
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:18:81:5f:e0:43:60:f9:33:04:c0:15:ad:a1:30:e5:0a:20:
d0:5a:c4:e1:7c:98:47:11:75:98:d3:4a:ed:3b:08:46:c5:f4:
21:c1:af:fd:42:91:fa:81:7e:7a:7a:de:ec:0b:33:50:87:a2:
24:eb:c5:49:e1:c6:54:62:56:45:b6:a5:11:0e:9a:bb:ef:2a:
d9:f5:19:18:f8:63:b6:fb:96:1c:16:26:f0:6e:93:9b:f7:fd:
4b:2a:0d:66:28:62:95:ba:11:a1:00:3b:5b:69:d7:1e:77:c0:
d9:c3:99:61:2b:3c:43:04:f9:62:9a:86:96:17:e1:83:2e:60:
98:0d:c1:07:8c:fd:c0:0b:75:7d:5d:32:76:c4:40:ea:2c:56:
7a:7e:a5:b2:27:a5:0a:b6:a3:a0:06:da:bf:b9:23:22:a8:4b:
a6:d4:33:07:f3:95:34:1b:8f:d4:d9:93:8f:cc:bd:5a:c5:1e:
16:cc:95:e7:00:62:ce:dd:68:db:f2:cb:3e:8a:97:16:18:50:
c3:d3:7a:3b:1f:9a:a5:7f:aa:ad:af:de:b1:f3:ac:c3:d9:80:
0f:31:7e:f3:1d:e8:4f:59:bd:13:62:63:f8:07:1e:1d:d9:a1:
8b:73:cc:60:d3:87:89:af:ce:6d:1c:23:fb:e2:50:02:d1:ea:
02:62:64:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 02:02:26 2026 by rpki-client