Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: CnNQ1pvMvajoW8eKD7p4PdADoCkRuVp3hJ5O+64C9b8=
Subject key identifier: 8E:22:99:B3:8C:96:62:2D:F1:AF:46:E1:D2:8A:6A:89:65:A4:40:C8
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 019F916D667066BB0E3CC6B68AD3AFD5D16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 00:01:33 +0000
Manifest this update: Fri 24 Jul 2026 00:01:33 +0000
Manifest next update: Sat 25 Jul 2026 00:01:33 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: TV/P7g8D/7zFrepI7hKQ2NiEEEr4dFwp8lDsZAtgd4c=)
2: KYwuzPdQcxFtvMJ482Z-no0-rlI.roa (hash: WFv3oIQNO2UW+gImEV96V10XtC3ybgEz6IBrXZKDplc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:66:70:66:bb:0e:3c:c6:b6:8a:d3:af:d5:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Jul 24 00:01:33 2026 GMT
Not After : Jul 25 00:01:33 2026 GMT
Subject: CN=8e2299b38c96622df1af46e1d28a6a8965a440c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:b7:e3:7a:e3:13:e5:06:d8:11:a6:6b:82:
6a:ec:f3:34:44:94:be:01:45:69:86:69:0a:bc:64:
e4:ea:83:06:1b:70:53:de:62:32:e3:b1:d6:1b:fa:
e6:22:43:6b:de:45:45:cf:3f:30:08:8f:41:ce:82:
7d:7e:01:21:b6:80:fc:ac:d0:d8:c4:f0:c4:16:61:
3c:8b:65:25:71:26:f4:51:ab:8f:e8:91:56:98:a8:
16:58:03:19:bc:23:a5:9e:66:f3:73:d0:33:76:56:
a5:6d:a6:aa:33:57:f2:ac:4f:d4:88:1a:78:c7:e8:
a3:8f:17:54:e7:70:09:2e:61:6b:ff:32:5c:90:c0:
42:c1:55:34:c8:43:1d:8d:b1:4b:4d:13:2b:1e:37:
7d:5e:97:14:a7:41:37:1b:55:95:ae:a9:2a:e0:8b:
b9:32:9e:76:da:9e:9c:33:18:8d:1f:2c:85:1a:a2:
84:71:f0:bd:8b:86:c7:6d:dc:64:98:44:22:35:8d:
be:bb:82:8f:81:f0:6a:61:41:72:7b:77:5c:2d:a8:
f4:0f:fd:5c:7f:b3:4c:ff:f7:65:65:1c:67:17:05:
cc:a4:42:11:96:63:1c:e0:16:dd:b6:2c:d6:54:a2:
9b:ef:af:ba:9f:0b:2a:b3:f6:b2:c2:94:3e:3b:19:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:99:B3:8C:96:62:2D:F1:AF:46:E1:D2:8A:6A:89:65:A4:40:C8
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d1:f0:18:b3:96:be:dd:c2:e3:ac:c8:bc:d9:50:32:68:24:
2a:98:52:ef:ca:17:8e:d0:d2:35:76:73:43:b0:43:e3:c0:0d:
16:03:a3:88:ba:8f:73:64:f8:08:b5:db:29:31:44:63:91:a0:
32:41:20:96:a2:91:e0:9f:52:a4:40:e9:db:83:26:83:0f:6d:
d3:b2:54:76:e9:1e:ca:27:64:01:f9:e2:82:6d:ba:3f:d8:2f:
d8:7c:de:93:ac:5c:52:f4:6f:d2:87:41:76:bb:82:fb:f8:f8:
1c:56:3e:8f:80:b6:0f:0b:85:d4:de:b6:8e:c3:7b:09:9b:a6:
47:b6:a3:25:6f:b4:e5:d8:d3:b8:4e:3f:c9:29:09:92:36:50:
f5:7d:fa:0b:99:c9:ae:bb:10:ef:b9:8a:c4:95:71:96:2f:8e:
5d:25:72:21:22:70:92:38:3f:8e:bc:e5:92:35:d1:77:2f:db:
de:e7:85:5e:11:bb:60:31:c1:c6:b2:95:f2:ff:e6:25:7d:dc:
eb:4e:22:2f:d1:b8:bd:df:82:57:14:8a:3c:8f:af:a8:1d:20:
60:fa:a3:84:18:4f:60:71:c4:47:28:74:57:9b:85:55:23:b0:
98:ab:62:07:14:a4:ee:b8:51:98:e2:38:ba:2b:bd:cd:0a:64:
9f:da:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:09 2026 by rpki-client