Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: RRLKHWB3sTEIzI1cFsxq7VFJdTM/xS8fgOuR9Gk2rMc=
Subject key identifier: 83:47:C9:4C:39:E7:FE:42:0E:28:CF:1A:7B:40:2D:F5:2B:99:20:F3
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 01A1D9EEC3383CCD12A5A64E610FAB8B0D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 16F9
Signing time: Sat 14 Nov 2026 12:01:05 +0000
Manifest this update: Sat 14 Nov 2026 12:01:05 +0000
Manifest next update: Sun 15 Nov 2026 12:01:05 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: TjIxSHuPbA7CMFNdkOnr5QriFFgta8toCcRxk+ZFnmw=)
2: t_3KExq4t288IjtqVXAOQe_Eba8.roa (hash: ChTQhqA/DHUVGryflG/Am/U8Pp4mklmr4RiBocThAjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ee:c3:38:3c:cd:12:a5:a6:4e:61:0f:ab:8b:0d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Nov 14 12:01:05 2026 GMT
Not After : Nov 15 12:01:05 2026 GMT
Subject: CN=8347c94c39e7fe420e28cf1a7b402df52b9920f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:60:f5:1c:70:be:1f:8d:f1:18:30:c4:0f:
2d:43:5d:8f:00:1a:9e:64:46:86:b7:0b:26:34:a5:
27:04:f8:59:d8:b2:5e:6b:b3:90:a9:2d:81:f8:04:
c3:70:3b:ce:97:e0:17:98:f5:38:38:0e:61:78:ca:
05:44:b8:67:f6:b5:a6:63:e6:50:0e:33:b9:fe:0b:
a7:b8:40:5c:ed:0a:dc:57:1a:19:43:f9:ac:06:53:
4c:11:04:88:5e:4c:84:e0:12:82:8d:6c:23:d1:4b:
6e:69:47:be:e3:99:b3:9b:21:f5:e9:d5:60:cb:4d:
7b:d9:64:9e:2d:66:1c:11:09:f8:2a:d9:80:90:f9:
4c:d7:2e:f9:21:3e:ca:0d:5b:34:35:4b:cc:02:c6:
d3:ed:7e:d8:70:bb:18:9c:6d:3c:0a:fa:88:24:fd:
f0:3a:fe:a0:9b:f9:8d:89:61:fb:fa:19:b8:58:66:
a3:0c:20:03:0b:b4:26:ec:75:ef:2d:f8:c7:4e:80:
40:f5:d0:6c:73:b8:3e:6b:1d:af:fe:f2:0e:3f:2a:
1b:c1:a4:b8:23:26:a6:f4:04:42:d2:6e:e8:63:fb:
b1:cb:5c:4d:af:da:fa:ff:a9:c7:41:e0:f4:f8:24:
32:1b:6c:4b:a6:1d:96:e6:a6:9b:e3:e7:32:4a:cc:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:47:C9:4C:39:E7:FE:42:0E:28:CF:1A:7B:40:2D:F5:2B:99:20:F3
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:40:11:16:23:c5:b0:72:ba:78:92:12:02:c9:6e:cb:79:95:
7a:94:77:f3:f5:5a:9e:fd:44:9f:e1:41:4c:8e:9b:12:9b:d4:
2a:1a:70:ed:d2:36:62:40:23:7f:e4:f8:d9:3d:fa:2d:90:eb:
97:32:a5:c5:40:54:0d:76:a8:7e:00:22:c2:39:d3:2f:c5:b5:
5d:31:4a:2e:1a:91:e9:86:43:82:a2:1b:db:97:be:a0:ec:7c:
b5:d3:75:d0:b3:d3:b0:1e:c8:ac:95:16:cc:33:19:00:51:bf:
02:8b:53:0b:06:4c:dd:2e:04:12:49:54:bd:f9:b5:ec:f7:60:
68:75:83:77:b0:86:79:9f:fb:b5:fb:4b:2d:ee:c2:b8:76:37:
a1:8d:48:ef:aa:07:18:fc:a0:ad:1e:d7:40:f4:48:52:bb:8b:
88:a3:5f:c8:5f:db:41:92:fe:48:32:92:98:92:fb:08:03:0c:
95:6c:fa:2d:42:1d:18:f4:58:75:40:55:6f:01:40:75:ae:46:
75:c5:08:ed:cd:8b:ff:bf:d0:6c:0b:de:34:7f:d6:0e:bf:87:
ca:38:80:4a:82:0e:33:a4:5c:a6:56:25:be:ea:e9:43:af:0a:
26:c9:10:16:4b:cb:2a:aa:38:13:5c:fe:25:3e:16:af:8e:83:
01:7e:3e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:43:37 2026 by rpki-client