Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: Xeyowzj35m6+kdYumJDCXdIfg5Mlmv50z5M9AYU2+Kw=
Subject key identifier: 4C:2F:1B:13:22:BC:9A:08:46:B5:7A:B7:69:9A:57:F4:8F:81:B6:33
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 019D33085F046A6CC6B6098FF8A798320AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 188E
Signing time: Sat 28 Mar 2026 06:01:19 +0000
Manifest this update: Sat 28 Mar 2026 06:01:19 +0000
Manifest next update: Sun 29 Mar 2026 06:01:19 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: 21cTniusUUB7lKI12mFZ0W4jfWFr9PhNWeh59Ur8TKo=)
2: KYwuzPdQcxFtvMJ482Z-no0-rlI.roa (hash: WFv3oIQNO2UW+gImEV96V10XtC3ybgEz6IBrXZKDplc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:5f:04:6a:6c:c6:b6:09:8f:f8:a7:98:32:0a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Mar 28 06:01:19 2026 GMT
Not After : Mar 29 06:01:19 2026 GMT
Subject: CN=4c2f1b1322bc9a0846b57ab7699a57f48f81b633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:6c:99:94:6e:b0:8e:94:10:d1:3f:5d:ba:
08:be:8d:c0:c4:61:59:eb:ea:16:ff:b8:fe:78:a0:
13:25:7f:e6:2c:f4:38:f0:61:30:14:2c:3f:21:02:
dd:38:12:1f:bf:9f:2b:60:7d:96:6e:2e:f1:f1:10:
ce:97:bc:70:85:df:8e:a5:45:3d:56:ab:d4:9c:1f:
a8:1a:a0:8e:ef:87:a2:1e:a1:e9:de:06:a2:31:8f:
2a:55:0b:b0:15:ad:b0:bb:fc:1d:43:19:28:a4:a7:
c0:c0:59:7e:f7:7d:90:67:fc:53:a3:72:a0:f5:e6:
b5:38:8d:8c:88:5f:3c:e5:fb:5c:fc:c3:2c:47:9f:
41:3a:fa:e4:19:db:2c:e3:98:d5:83:e7:13:ba:95:
d0:27:3b:52:2f:10:3d:e9:d0:1b:21:4e:6d:ae:78:
6f:5b:f6:76:2f:36:b8:9d:7b:e5:c4:a2:04:cb:bd:
1e:08:ef:ca:76:6e:2e:06:30:69:9e:d4:f8:1b:65:
73:f5:c8:10:df:64:df:56:86:ea:74:0b:6b:46:2e:
4a:c7:cf:c9:3f:cf:fd:15:12:2b:e8:32:9f:95:c6:
7e:a5:94:fc:ab:6a:1c:0d:a2:9f:a4:0b:8f:7e:10:
e5:bc:97:e0:23:9f:12:1a:c9:39:51:08:9b:36:ac:
b5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2F:1B:13:22:BC:9A:08:46:B5:7A:B7:69:9A:57:F4:8F:81:B6:33
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:84:86:be:a4:f9:97:c9:64:bb:d4:85:f5:7f:6e:4a:2b:a1:
39:a1:e6:75:58:39:7a:e3:55:3d:48:25:6d:8f:f1:3b:f2:5f:
0f:33:e5:dd:dd:8e:54:25:d2:eb:de:b2:47:f2:0b:9a:f4:a1:
49:cc:ca:80:d6:9e:2c:10:29:a6:fb:d2:b3:4f:cf:66:c5:ae:
f3:0d:4b:07:9b:23:1d:0f:b1:ab:7c:a8:64:73:a4:3d:b7:32:
fa:20:3f:12:47:99:6e:ae:27:0f:66:90:c1:44:0b:de:8e:ff:
31:15:85:9a:07:e4:b7:e6:82:5e:52:4d:b7:25:59:0b:28:41:
20:b0:3d:d5:af:73:78:cf:5f:6c:05:fb:a3:91:06:32:a6:f3:
34:9d:c0:d3:a1:03:f3:41:44:24:e5:e9:e2:a6:52:13:0d:cc:
92:b2:1e:c7:21:2e:26:7f:ba:76:d7:cf:2c:23:11:d1:35:1e:
dd:21:c6:fd:25:39:7a:23:ad:5b:ad:91:15:82:1f:ea:d6:c9:
67:10:8b:55:e1:37:f8:f5:ef:74:2d:17:3a:4d:66:87:78:08:
49:c7:e3:d7:11:df:29:0e:df:51:b9:fa:8b:c5:64:40:f8:73:
63:18:95:da:c4:73:0f:dc:30:ea:eb:bf:2a:7f:0d:d8:86:db:
0c:d0:ba:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:05 2026 by rpki-client