Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: C/+F/XRNl1v7xfSxoSd9gWhepGZhCQxq/gys5DW0VjY=
Subject key identifier: 6A:28:AF:D5:49:6B:D3:AE:92:24:EB:D8:F4:74:CA:A5:2D:9B:F5:E4
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 01A0D7CC5CEC88A2B6E2B346686AE4E2EBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 09:01:29 +0000
Manifest this update: Fri 25 Sep 2026 09:01:29 +0000
Manifest next update: Sat 26 Sep 2026 09:01:29 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: o6OJth5crjrgwtJaAXqkehRPQzKYL85oSL6IO2A/ZKc=)
2: KYwuzPdQcxFtvMJ482Z-no0-rlI.roa (hash: WFv3oIQNO2UW+gImEV96V10XtC3ybgEz6IBrXZKDplc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:5c:ec:88:a2:b6:e2:b3:46:68:6a:e4:e2:eb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Sep 25 09:01:29 2026 GMT
Not After : Sep 26 09:01:29 2026 GMT
Subject: CN=6a28afd5496bd3ae9224ebd8f474caa52d9bf5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:fa:eb:42:c5:c3:bd:a9:e7:10:38:8a:3a:
c8:8e:56:3e:84:81:86:e7:d9:ee:c4:62:a7:ce:24:
0c:6b:40:77:e2:89:2d:f1:25:f1:02:f2:2f:f9:f2:
ba:80:fe:66:03:88:80:b4:aa:d5:7d:90:86:22:66:
f6:a4:be:19:e1:40:93:75:e1:73:ad:c8:95:63:a6:
fb:b5:06:2a:86:bb:53:90:53:85:57:bb:97:4e:90:
14:f4:d8:b7:80:2a:42:6a:0f:1e:07:3a:c4:4e:0a:
a9:f5:1f:4b:65:1b:48:80:c2:dd:15:1f:11:0b:59:
53:4e:8c:e7:4a:01:4f:e9:97:bb:27:28:8e:7d:cd:
f9:91:b9:fd:4e:33:50:d0:b8:84:0c:80:02:00:27:
43:82:c3:da:1a:7c:1d:aa:7c:8a:92:88:9f:d7:e6:
10:71:19:bf:6b:73:c7:83:5c:1f:ad:50:64:fd:c8:
a0:0f:98:72:8b:79:42:e7:0b:ec:43:c5:08:87:fd:
e4:9f:24:3b:6c:52:b3:24:e0:a0:e6:d0:fd:c6:93:
43:62:5b:10:d9:ee:98:16:09:bc:c7:ad:ab:70:1a:
24:b0:f5:9f:89:68:f4:aa:66:d2:f7:ef:4c:cb:da:
e8:d1:e8:fc:e4:39:36:90:8b:9b:03:f9:27:53:a5:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:28:AF:D5:49:6B:D3:AE:92:24:EB:D8:F4:74:CA:A5:2D:9B:F5:E4
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bd:f5:0e:73:2b:36:98:60:78:e1:8c:3a:33:e0:c7:36:50:
92:96:fa:50:bb:d0:77:38:ac:5f:6e:23:86:e3:61:07:54:5c:
50:f1:ab:e3:46:95:52:ec:61:a4:6c:0d:6b:7b:ce:76:92:52:
4a:4c:99:f2:05:bb:bc:9d:8a:7c:30:d8:27:02:a3:db:f4:25:
99:3a:96:ab:9c:a1:6c:d0:11:5e:c4:a6:a0:8d:d5:0e:50:11:
43:db:f1:94:67:5d:20:f9:f3:c1:91:be:0d:d5:c3:7f:40:e6:
07:0e:c0:cc:78:14:ee:32:11:12:2a:59:93:7b:01:fe:26:80:
32:5c:eb:61:a3:48:a9:00:fa:a9:a9:6a:0b:76:bc:2e:7b:ab:
ce:ba:9d:a0:48:47:5c:99:8e:68:fd:6e:2b:aa:d0:2b:a0:e1:
3d:b5:aa:86:52:a8:f3:58:84:f5:54:b8:f2:15:73:2f:cd:64:
0c:b2:d2:c3:75:c3:7a:87:05:ca:5c:9c:0f:8b:6b:56:9c:56:
7f:00:45:e3:91:0e:69:fa:55:3d:61:ba:30:03:f2:5a:42:8f:
bb:17:c2:ea:89:00:4c:52:72:4d:64:d8:84:2e:bf:68:a8:f1:
8c:23:13:35:16:79:f7:c8:16:71:dd:42:a4:6b:8f:37:f4:7d:
37:6e:0b:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzFzsiKK24rNGaGrk4uv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Mjg1NDczYzk3OGNhNTFjZTU0NjlhYTRhZWRjYTE2NDQ1
YmQ2NTIwHhcNMjYwOTI1MDkwMTI5WhcNMjYwOTI2MDkwMTI5WjAzMTEwLwYDVQQD
Eyg2YTI4YWZkNTQ5NmJkM2FlOTIyNGViZDhmNDc0Y2FhNTJkOWJmNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso/660LFw72p5xA4ijrIjlY+hIGG
59nuxGKnziQMa0B34okt8SXxAvIv+fK6gP5mA4iAtKrVfZCGImb2pL4Z4UCTdeFz
rciVY6b7tQYqhrtTkFOFV7uXTpAU9Ni3gCpCag8eBzrETgqp9R9LZRtIgMLdFR8R
C1lTToznSgFP6Ze7JyiOfc35kbn9TjNQ0LiEDIACACdDgsPaGnwdqnyKkoif1+YQ
cRm/a3PHg1wfrVBk/cigD5hyi3lC5wvsQ8UIh/3knyQ7bFKzJOCg5tD9xpNDYlsQ
2e6YFgm8x62rcBoksPWfiWj0qmbS9+9My9ro0ej85Dk2kIubA/knU6X8gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoor9VJa9OukiTr2PR0yqUtm/XkMB8GA1UdIwQY
MBaAFAgoVHPJeMpRzlRpqkrtyhZEW9ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4Zjgt
OGUzMDBlZmQxM2JjLzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4ZjgtOGUzMDBlZmQxM2Jj
LzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARL31DnMr
NphgeOGMOjPgxzZQkpb6ULvQdzisX24jhuNhB1RcUPGr40aVUuxhpGwNa3vOdpJS
SkyZ8gW7vJ2KfDDYJwKj2/QlmTqWq5yhbNARXsSmoI3VDlARQ9vxlGddIPnzwZG+
DdXDf0DmBw7AzHgU7jIREipZk3sB/iaAMlzrYaNIqQD6qalqC3a8LnurzrqdoEhH
XJmOaP1uK6rQK6DhPbWqhlKo81iE9VS48hVzL81kDLLSw3XDeocFylycD4trVpxW
fwBF45EOafpVPWG6MAPyWkKPuxfC6okATFJyTWTYhC6/aKjxjCMTNRZ598gWcd1C
pGuPN/R9N24L9g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:19:53 2026 by rpki-client