Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier: VRqJK6/KHdP5PeRfyflexlr3LIJpjvDCokdRMuXU6mU=
Subject key identifier: C7:84:C2:34:EC:EE:29:2E:6D:05:AD:DB:88:75:47:57:A2:1B:03:54
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial: 019FAB639AC9E2CF6A9A6DC8FD8170B68C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number: 1902
Signing time: Wed 29 Jul 2026 01:00:59 +0000
Manifest this update: Wed 29 Jul 2026 01:00:59 +0000
Manifest next update: Thu 30 Jul 2026 01:00:59 +0000
Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: HBlrnJ/bEBeMljYlCIFk6316l0IhgFKdupW0PN6mRYA=)
2: TdxQhWG2wtulK5Vb9nCA77o4y_I.roa (hash: DQ1/x26NNKj14C8KsFmS1PfWzVr7cd7MQfy8SdkpOYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:9a:c9:e2:cf:6a:9a:6d:c8:fd:81:70:b6:8c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
Validity
Not Before: Jul 29 01:00:59 2026 GMT
Not After : Jul 30 01:00:59 2026 GMT
Subject: CN=c784c234ecee292e6d05addb88754757a21b0354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:dd:dc:18:05:23:ec:55:1b:84:47:9f:22:
66:03:da:29:10:ba:70:41:5b:d8:95:8c:29:21:f8:
02:f5:10:dd:e2:db:73:15:61:07:f4:77:9f:83:2f:
1d:98:6f:c9:ba:30:b3:99:15:4e:84:7d:c5:a8:f0:
ad:97:e6:3b:9f:78:2d:39:70:79:c0:01:b1:c5:39:
cf:fb:30:61:ad:a7:4b:a3:7c:76:b9:a5:19:d1:bb:
d2:3c:79:cf:69:9f:ae:7d:16:c5:d9:4e:7c:12:74:
87:6e:33:60:d3:ef:bd:7e:fa:21:9c:dc:0c:1c:bf:
90:ab:dc:5c:f0:09:07:8e:73:c5:91:7a:22:32:58:
84:3c:ed:83:1a:b6:4a:06:f6:a2:ce:80:7a:a9:87:
39:a0:b3:e9:6c:5e:83:26:51:bf:6a:55:df:d3:21:
7d:50:34:53:f7:42:f4:10:5f:fa:79:77:44:bd:2d:
95:b2:ac:c6:f0:6b:1f:b7:37:70:0d:ce:3b:ac:77:
83:04:9d:ee:d9:0a:bf:d0:32:ee:89:4e:17:f5:4e:
99:e2:9a:10:70:9b:d6:01:ea:9b:51:11:1f:e4:02:
7d:eb:80:c4:13:ad:0a:4b:24:57:fd:a8:19:11:68:
d7:47:e4:62:a7:ec:d5:73:e4:8c:12:cd:13:85:d7:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:C2:34:EC:EE:29:2E:6D:05:AD:DB:88:75:47:57:A2:1B:03:54
X509v3 Authority Key Identifier:
keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fe:89:81:40:6f:7d:22:3f:5a:4e:d3:fe:a5:d7:ec:54:ec:
fe:8e:a7:1a:6d:f0:a0:33:b1:c1:1c:62:93:4c:05:af:56:03:
a1:78:47:bd:78:4d:78:88:85:32:74:6f:4b:1e:71:88:e5:68:
80:8d:ea:fe:92:37:de:2a:a4:53:1d:5f:cd:fb:b1:11:5a:5d:
b3:6a:48:cd:82:60:4b:ea:15:f5:e1:0e:33:d3:95:62:b1:01:
e6:7b:94:3f:57:14:a9:57:a3:69:5f:7e:b3:5b:0d:9f:98:46:
df:6f:dc:73:22:75:b6:b7:cd:66:5f:15:e1:56:e3:f3:a9:93:
44:49:68:3d:1f:9e:15:fa:40:9c:c5:73:d4:8c:b4:7a:f9:d2:
4e:ee:dc:8b:63:42:32:60:26:1c:a8:e6:08:b9:34:53:96:b6:
0a:2f:92:d4:6e:b9:01:49:e4:98:19:82:80:f5:52:2c:14:6a:
0f:6d:41:d7:1c:3a:a8:b8:80:29:d9:5b:be:58:c3:e3:94:2c:
23:42:aa:6c:0d:39:c4:72:69:1c:f3:27:0e:3b:99:43:c2:17:
1b:8f:8f:77:38:3d:88:90:36:6a:3e:0c:fa:21:99:24:7d:90:
f1:29:1e:07:63:c4:fa:ab:52:1c:1e:a3:da:28:41:ee:73:6f:
0c:0b:2c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:37:01 2026 by rpki-client