Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: //UPxEOG2NLduC/tarbSQVM0o5X0bUaRrmPCN2IVw64=
Subject key identifier: 0D:E7:BF:34:6F:14:10:75:9A:1E:88:B5:7E:B9:8B:08:CE:B0:7A:65
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 01A0E0CFBF714DB5EF66B3D6897EA0D378CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 1678
Signing time: Sun 27 Sep 2026 03:01:46 +0000
Manifest this update: Sun 27 Sep 2026 03:01:46 +0000
Manifest next update: Mon 28 Sep 2026 03:01:46 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: l3Y/q5D+0h/INaam5o+DL3d/GopLTB/NpFbtWE6BLw4=)
2: t_3KExq4t288IjtqVXAOQe_Eba8.roa (hash: ChTQhqA/DHUVGryflG/Am/U8Pp4mklmr4RiBocThAjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:bf:71:4d:b5:ef:66:b3:d6:89:7e:a0:d3:78:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Sep 27 03:01:46 2026 GMT
Not After : Sep 28 03:01:46 2026 GMT
Subject: CN=0de7bf346f1410759a1e88b57eb98b08ceb07a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f0:69:b2:48:55:1f:0b:28:1f:5c:d8:c6:14:
54:e2:55:ac:76:af:e7:33:53:a5:c7:58:2b:ad:d9:
20:d7:8e:ac:28:6b:77:b4:75:c1:65:04:94:71:a0:
5d:c0:fd:7b:59:03:7e:82:eb:c2:8f:d8:04:d7:eb:
4f:0f:ad:49:ee:fd:73:04:40:76:a4:82:71:0e:b4:
fd:63:0c:36:11:2b:90:f4:23:f2:4f:07:ba:d0:33:
32:fc:c3:46:71:6c:15:b7:b2:f0:c8:07:47:ef:81:
9c:19:6c:4f:4d:ba:79:0a:49:d2:ba:43:59:01:9f:
0a:2a:e5:5c:fc:72:14:af:99:c4:db:8b:8f:25:56:
4c:8d:23:b6:67:19:46:b4:8d:3c:64:a3:bd:97:97:
66:b9:0d:01:87:63:49:9c:ae:8a:6c:de:4b:73:ec:
5b:10:04:43:11:e4:7b:2c:8d:45:03:1c:38:4e:d1:
19:e1:64:c0:ee:8c:73:2c:00:fe:cc:12:11:2c:5e:
23:02:42:46:3c:c7:bd:3c:5b:6f:ce:c9:b7:22:f4:
86:13:f3:f6:87:f8:37:09:98:27:07:ed:ae:91:73:
4b:d7:59:b1:b8:ec:67:fe:b1:54:c7:68:15:4f:9a:
3a:31:13:29:76:c2:76:0d:f6:da:b8:fb:e0:ce:27:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:BF:34:6F:14:10:75:9A:1E:88:B5:7E:B9:8B:08:CE:B0:7A:65
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:42:d1:c5:30:58:31:fe:34:5a:d4:f0:00:b1:36:14:0a:c3:
02:e0:56:26:b1:1f:e2:cb:06:0d:33:f2:17:c9:60:87:53:01:
39:19:05:91:f8:c7:0c:73:8c:81:d3:9f:db:37:c2:99:94:db:
29:ad:f6:89:1d:f0:74:9a:c6:8d:26:67:ac:d2:f2:a9:26:ad:
c8:b9:30:ec:66:90:bb:1a:b1:f3:c4:e6:3d:26:f0:28:8e:76:
ae:3d:bf:4e:9b:4b:62:59:d1:be:92:1c:d8:d8:d2:ef:8a:57:
6d:e4:2d:c1:da:cc:07:a4:3f:93:8f:57:a1:3e:6a:a4:5b:0d:
85:fd:0d:97:5e:c0:4d:1d:71:df:4d:d6:6d:fb:22:5b:05:cf:
dc:cd:4c:09:fe:a2:c8:c8:e4:c0:17:98:2d:a6:2a:1b:16:f1:
31:6a:9d:04:9c:1f:61:42:a7:dc:fd:27:6d:2b:19:dd:bb:1a:
7b:21:3e:2a:05:9b:9e:af:e0:a7:ad:5e:63:d3:ee:92:a6:99:
f8:d5:ee:e7:39:d7:56:d8:2a:0b:fc:5e:ca:22:79:62:62:17:
f2:0b:16:9f:2c:fd:6a:56:fa:20:d3:ea:17:85:bc:db:fc:54:
27:eb:86:7f:2e:ec:bb:53:03:64:60:46:24:d3:1e:9d:59:7a:
7a:dd:e4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:09:30 2026 by rpki-client