Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier: gsyhNsT6zI9BloAKOnYs7KdA+/aswKOwgDlQQJ0+Mbo=
Subject key identifier: FA:CE:E0:82:23:97:54:8F:14:71:21:14:E0:C2:C5:C2:48:40:70:16
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial: 019D9A3E569361A9848107EB27F5CB4D1BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number: 17F0
Signing time: Fri 17 Apr 2026 07:01:09 +0000
Manifest this update: Fri 17 Apr 2026 07:01:09 +0000
Manifest next update: Sat 18 Apr 2026 07:01:09 +0000
Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: Xsh64n16cdHtwBFoU9AoqB/3JTTS76xzqTQp1YExLRI=)
2: TdxQhWG2wtulK5Vb9nCA77o4y_I.roa (hash: DQ1/x26NNKj14C8KsFmS1PfWzVr7cd7MQfy8SdkpOYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:56:93:61:a9:84:81:07:eb:27:f5:cb:4d:1b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
Validity
Not Before: Apr 17 07:01:09 2026 GMT
Not After : Apr 18 07:01:09 2026 GMT
Subject: CN=facee0822397548f14712114e0c2c5c248407016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:be:74:a4:3a:c0:b7:da:23:c8:c6:79:9e:
36:8d:6f:78:aa:12:cd:52:c2:af:ca:8d:f2:66:12:
d4:08:3d:13:45:39:08:c8:71:e0:30:ec:1b:d7:e1:
37:f4:ce:2f:90:d7:5b:bb:db:7c:ea:85:f0:56:3d:
55:c3:4a:9f:92:db:7a:f4:c4:36:86:46:89:ed:0d:
f8:f3:3b:ec:a4:a0:75:22:95:13:ba:0d:b9:de:8e:
2c:cc:a8:48:c3:50:f3:e3:9d:da:dc:0b:96:ca:49:
eb:fe:b3:e0:bd:7d:68:ce:64:b9:76:92:34:e4:c4:
1d:14:eb:ff:d3:c2:36:22:48:55:bb:fd:37:af:2b:
fe:8e:7c:74:0c:da:de:3a:f0:ed:75:c3:37:f6:5b:
c8:46:20:51:d6:fb:cd:ac:f8:06:7a:cf:b0:85:a3:
b6:8d:96:25:69:b5:81:f5:4e:77:3e:7d:2c:8a:d5:
51:65:19:62:45:d7:bb:af:1a:12:a7:3a:9e:7d:e9:
d2:fd:37:dd:41:55:4b:a0:5b:30:ed:ed:0f:6b:28:
af:04:f8:61:60:d4:73:2b:70:65:95:0e:59:4d:b2:
0e:e8:b9:6c:f8:7b:2e:1a:98:f9:67:e7:2f:9d:93:
29:a0:80:b1:55:76:47:34:cf:00:db:d2:2f:25:4d:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CE:E0:82:23:97:54:8F:14:71:21:14:E0:C2:C5:C2:48:40:70:16
X509v3 Authority Key Identifier:
keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e8:bf:41:68:63:37:e1:0a:be:00:94:71:ce:d0:8e:81:0b:
a3:9d:99:7e:4e:96:33:3f:01:e2:74:9b:cc:0f:d0:b6:a3:e4:
8a:f2:c5:e1:04:1c:8d:42:7d:7c:7a:04:c4:21:8f:56:d8:40:
22:c8:d2:c0:77:57:dd:0f:41:1b:42:82:02:61:f5:32:94:5a:
2c:91:1d:81:af:89:c7:d2:0a:ee:ad:ff:76:94:a6:34:34:81:
82:b6:e7:f9:be:fb:11:ff:58:96:d1:4a:9c:4f:84:54:b7:d9:
2e:b5:65:df:58:db:d3:86:7f:9f:ef:9c:85:ce:a2:24:bb:81:
b1:42:5e:78:00:ab:bf:15:fa:90:6a:4b:0d:c0:a5:9f:ad:f2:
01:fd:8f:38:94:31:0f:1f:aa:95:70:8c:0f:c0:3d:81:e5:b7:
c6:b4:7e:c2:6d:15:24:11:11:7f:03:07:b5:06:dc:d5:52:e7:
35:14:11:7e:69:d2:0d:af:14:69:f1:4b:37:46:0d:5a:a7:a6:
22:ee:6a:3b:e3:e0:94:e9:3c:98:92:5d:09:3a:69:13:ed:a7:
ba:d7:28:6c:3f:4e:e6:03:d1:d9:c1:1c:fa:4a:3b:2d:e4:e0:
cb:26:17:a9:75:c1:95:2a:34:b1:28:df:0b:90:a0:cc:5e:c0:
45:0c:f9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:23 2026 by rpki-client