Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: YX95ZJ//0BwM0GeJ/S/9VGxW1cUHqShpMplREs++NQw=
Subject key identifier: 67:EF:D5:9D:C2:88:5C:03:68:C6:A6:BE:C5:FE:55:5D:FA:6D:97:13
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 019F8ED958522E6B982F64D3A28C032DC8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 15C9
Signing time: Thu 23 Jul 2026 12:00:36 +0000
Manifest this update: Thu 23 Jul 2026 12:00:36 +0000
Manifest next update: Fri 24 Jul 2026 12:00:36 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: WoAJnf/fBzGQBGScne+R2tZiuTdawAQkP7hKCQCWvdo=)
2: t_3KExq4t288IjtqVXAOQe_Eba8.roa (hash: ChTQhqA/DHUVGryflG/Am/U8Pp4mklmr4RiBocThAjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:58:52:2e:6b:98:2f:64:d3:a2:8c:03:2d:c8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Jul 23 12:00:36 2026 GMT
Not After : Jul 24 12:00:36 2026 GMT
Subject: CN=67efd59dc2885c0368c6a6bec5fe555dfa6d9713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:85:1d:cb:29:b1:2f:98:2d:de:6d:55:2b:48:
c7:01:2d:37:be:77:73:9a:b4:86:39:36:28:03:7d:
1d:85:cf:3a:a4:53:1a:9b:2f:9c:da:a4:71:80:b0:
dc:aa:71:e7:d7:29:fc:cb:9f:b7:3d:95:9c:70:1e:
0a:9c:20:d5:08:c5:46:a2:fa:f5:3d:66:31:ec:1b:
cf:2e:77:49:0c:40:e6:27:23:82:31:31:58:98:6d:
f8:a3:cf:94:6c:79:69:18:52:a6:53:d4:4c:10:1b:
19:db:b7:d6:87:b4:40:a1:13:32:c9:f6:79:e3:1a:
a4:d8:f6:90:b6:cb:44:01:65:b5:bb:74:67:6c:86:
9c:e5:1b:6b:09:53:b3:3c:33:09:6b:30:2e:b1:e9:
ac:9c:7b:6d:a9:fc:09:85:1a:21:d2:dc:b0:dc:4e:
c2:96:3a:1f:7e:af:b7:0d:da:96:a9:08:fc:66:0c:
81:9f:1d:b9:2f:2f:1b:5b:c0:fc:54:80:04:74:64:
64:e8:98:fc:75:72:b0:3f:dc:04:20:ed:9c:d5:ad:
79:51:65:b6:81:c3:f1:68:d2:ba:38:c2:34:20:3b:
b0:df:b8:4f:99:28:0c:dc:07:d1:c3:8e:96:7f:cf:
6b:6c:25:65:8e:b4:1d:2e:07:6f:ad:8c:d6:aa:45:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EF:D5:9D:C2:88:5C:03:68:C6:A6:BE:C5:FE:55:5D:FA:6D:97:13
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:11:f4:19:62:0b:a1:5d:e9:e2:be:ca:04:f4:16:bc:ff:91:
16:a3:f1:b4:23:d9:29:21:f4:1b:0e:d8:34:d7:c7:0a:71:7f:
33:7f:de:5c:94:2c:6e:c2:36:84:8b:68:14:50:04:b9:3d:6f:
49:e9:1e:92:cb:23:d7:8a:04:86:16:78:66:91:2d:3d:6a:85:
f8:a2:3e:fa:4e:5d:96:c1:3d:e8:cc:e8:3e:0a:cb:ef:11:da:
a6:6f:9d:ea:72:9f:c0:56:13:fb:8a:50:5f:fd:e2:a5:ee:9b:
75:89:c4:8e:c0:83:76:9b:c8:86:d5:76:f7:20:87:e2:3b:2a:
82:23:94:27:00:0f:58:ab:84:eb:df:db:23:6e:f6:46:09:97:
7f:bb:b8:a4:6c:95:e7:9f:5e:c4:24:45:a7:f2:ce:79:bb:a8:
56:1f:8d:c8:8c:d7:cf:95:3a:9b:6b:cd:ea:24:30:c6:17:f9:
ee:cc:fb:d9:81:80:9d:ed:5e:77:56:f3:2e:35:b8:42:47:56:
f1:ac:4d:dd:bc:41:76:7f:29:71:fa:15:c0:e1:4a:55:f1:f9:
89:6e:c6:f8:c5:d4:4a:b7:ed:21:0e:0b:14:fe:ce:ad:78:c5:
c6:26:c6:f5:74:16:c9:8f:bc:84:ab:f6:77:6a:bc:d5:85:19:
b9:77:46:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2VhSLmuYL2TToowDLcizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDFmMWY4YjQxZDc0ZjdkODY2YjFlNWFkZmQxOGFmZTIw
MjcxMDgwHhcNMjYwNzIzMTIwMDM2WhcNMjYwNzI0MTIwMDM2WjAzMTEwLwYDVQQD
Eyg2N2VmZDU5ZGMyODg1YzAzNjhjNmE2YmVjNWZlNTU1ZGZhNmQ5NzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34UdyymxL5gt3m1VK0jHAS03vndz
mrSGOTYoA30dhc86pFMamy+c2qRxgLDcqnHn1yn8y5+3PZWccB4KnCDVCMVGovr1
PWYx7BvPLndJDEDmJyOCMTFYmG34o8+UbHlpGFKmU9RMEBsZ27fWh7RAoRMyyfZ5
4xqk2PaQtstEAWW1u3RnbIac5RtrCVOzPDMJazAusemsnHttqfwJhRoh0tyw3E7C
ljoffq+3DdqWqQj8ZgyBnx25Ly8bW8D8VIAEdGRk6Jj8dXKwP9wEIO2c1a15UWW2
gcPxaNK6OMI0IDuw37hPmSgM3AfRw46Wf89rbCVljrQdLgdvrYzWqkX1ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfv1Z3CiFwDaMamvsX+VV36bZcTMB8GA1UdIwQY
MBaAFAjR8fi0HXT32Gax5a39GK/iAnEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yOWMwMTUtZDc0Ny00ZmM3LTkzMmIt
ZGY1Y2I5ZjBlM2E0LzEvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8yOWMwMTUtZDc0Ny00ZmM3LTkzMmItZGY1Y2I5ZjBlM2E0
LzEvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURH0GWIL
oV3p4r7KBPQWvP+RFqPxtCPZKSH0Gw7YNNfHCnF/M3/eXJQsbsI2hItoFFAEuT1v
Sekekssj14oEhhZ4ZpEtPWqF+KI++k5dlsE96MzoPgrL7xHapm+d6nKfwFYT+4pQ
X/3ipe6bdYnEjsCDdpvIhtV29yCH4jsqgiOUJwAPWKuE69/bI272RgmXf7u4pGyV
559exCRFp/LOebuoVh+NyIzXz5U6m2vN6iQwxhf57sz72YGAne1ed1bzLjW4QkdW
8axN3bxBdn8pcfoVwOFKVfH5iW7G+MXUSrftIQ4LFP7OrXjFxibG9XQWyY+8hKv2
d2q81YUZuXdG5g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:53 2026 by rpki-client