Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: 3SGmwo7nR/1LNkSABpWhn79+BVuW82BBJ+5OrbcLGUA=
Subject key identifier: 1E:5C:77:74:42:5C:4C:C2:F0:03:52:50:AB:EE:81:AC:29:2E:5E:31
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 019E1CB49FEB936A3C771BD3C15506C12593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 15:00:59 +0000
Manifest this update: Tue 12 May 2026 15:00:59 +0000
Manifest next update: Wed 13 May 2026 15:00:59 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: EkR3ed6B1eA3FSfsyRtkFw9jwevqcH1KBAG9cpx6HDE=)
2: KYwuzPdQcxFtvMJ482Z-no0-rlI.roa (hash: WFv3oIQNO2UW+gImEV96V10XtC3ybgEz6IBrXZKDplc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:9f:eb:93:6a:3c:77:1b:d3:c1:55:06:c1:25:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: May 12 15:00:59 2026 GMT
Not After : May 13 15:00:59 2026 GMT
Subject: CN=1e5c7774425c4cc2f0035250abee81ac292e5e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:b3:64:e0:a9:58:08:25:f1:56:ec:cf:7f:
67:fe:d7:2d:c0:53:07:19:3c:ef:9e:4c:76:51:e6:
9e:1a:20:10:47:5f:e9:a3:a4:6e:f7:18:01:70:b7:
87:c7:c1:e1:31:ac:3b:c7:d7:2e:e4:b1:56:20:ba:
b9:35:ee:d7:af:50:57:86:a8:b8:0e:ea:af:76:b5:
7e:1c:63:79:39:a2:ec:ab:d4:a9:22:ac:81:20:ba:
85:71:42:3c:30:33:83:0c:84:0f:55:4c:21:c5:a7:
d2:49:6c:6a:ca:df:7f:85:62:ff:5d:f2:c4:70:b9:
5c:53:62:a9:49:2a:e3:02:85:95:4d:81:06:02:3a:
ca:5f:d5:c3:9f:9b:0e:b8:6d:b6:73:7e:3e:2c:27:
a3:e4:bd:d4:ce:33:7d:5e:08:43:42:1b:7c:fe:05:
9a:0e:83:d0:c6:5d:37:1d:c9:e1:f0:79:cb:2f:6e:
c1:12:99:71:00:e1:91:69:96:e9:2e:c4:fe:8e:91:
b4:98:ec:c8:e4:c2:62:7c:b6:b8:ad:4a:60:14:a6:
c4:09:9f:9f:d9:fa:48:6e:62:a1:f3:56:43:a1:fc:
cc:3d:9f:69:9d:1d:5e:20:2f:22:8b:8c:82:de:60:
f0:4a:38:7c:70:aa:7c:3b:67:0a:ef:36:31:6c:ff:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5C:77:74:42:5C:4C:C2:F0:03:52:50:AB:EE:81:AC:29:2E:5E:31
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8a:93:cc:e8:4f:f4:27:59:b2:2d:6d:04:93:66:11:39:33:
c7:59:1c:49:2e:9a:c3:d2:04:f4:e7:dd:ee:11:65:c3:1a:e7:
8b:74:a6:45:18:0d:39:86:28:c1:8f:b6:0c:11:71:f7:0a:85:
8f:c6:e9:85:a0:4e:19:7f:9b:49:32:89:1f:a3:4b:9e:ae:fc:
6e:1b:50:5d:ec:7f:98:17:a1:be:15:f1:19:70:34:61:7b:2c:
c0:d9:47:a1:3c:5b:e4:39:f7:a5:b3:30:69:6e:32:83:4c:cd:
05:a6:8f:a0:8e:b4:8a:ca:06:04:4c:b3:17:4b:d8:e7:f9:7a:
d5:f5:0c:56:0f:1b:c9:9e:ee:35:14:4d:ed:be:21:31:e0:dc:
47:6e:9c:40:10:07:a2:2e:c5:b1:2a:47:ad:11:5d:f9:84:ef:
6a:09:4a:7c:a0:1f:1e:ae:67:da:3f:86:e5:a9:8f:25:a1:3d:
92:16:ac:7d:3e:d4:91:d4:6a:4c:c9:81:0c:3c:3f:0a:ed:04:
fb:45:a9:0c:07:a7:bb:99:8e:aa:07:7f:a8:e4:57:0f:ae:bb:
f0:00:80:aa:76:83:31:6e:65:ec:89:9e:cd:11:55:58:99:ae:
a0:30:cd:08:e8:ac:92:04:c0:b6:5b:05:89:af:25:c8:70:34:
bb:e3:b8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:13 2026 by rpki-client