Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: dKPpgs2UImqiSmFk+57Ml69vHVHDGPW8i9f4Pzex+CM=
Subject key identifier: DA:19:E1:88:AA:87:0E:FD:9F:88:B8:A6:69:B2:FE:FF:B0:25:C6:83
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 01A0D538FA469008555F87B544E8914535DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 0A1D
Signing time: Thu 24 Sep 2026 21:01:16 +0000
Manifest this update: Thu 24 Sep 2026 21:01:16 +0000
Manifest next update: Fri 25 Sep 2026 21:01:16 +0000
Files and hashes: 1: _T4q5Hpk4ipyTG7AMNyDdoKOT50.roa (hash: Lr+JB8T/f7L7H1ix+TlIyXnba9tt1bZ6qL8/Kz5nqFg=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: S711aPwFWfLbmPZ9OqsnW6wd2KuJVwaBbkqzl8jrVkM=)
3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
4: ji5uq7lgpZme2h5LP4PpoR1KlXg.roa (hash: KpOwi/Y6b4qR3//I1ROSdvQABJ8PA4YdcglI0GCbEGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:fa:46:90:08:55:5f:87:b5:44:e8:91:45:35:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Sep 24 21:01:16 2026 GMT
Not After : Sep 25 21:01:16 2026 GMT
Subject: CN=da19e188aa870efd9f88b8a669b2feffb025c683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:66:b8:f7:2e:6a:d5:8b:8e:63:33:7d:4d:
29:da:d0:90:be:5a:62:84:88:17:6a:64:fc:ba:d3:
6a:c5:d3:84:28:a6:ee:d7:a8:b5:61:1a:a4:6a:42:
9c:12:a6:64:c6:f0:8e:ce:47:27:42:25:e3:d9:94:
38:f8:3a:c5:6f:6d:78:34:f0:97:e4:f8:7d:71:0a:
28:27:7b:ff:44:9e:87:ae:12:3e:72:b0:01:93:e7:
bd:2d:d2:8a:e0:2c:1c:d0:c7:0a:e2:be:19:20:81:
dc:ba:f8:b5:37:35:89:da:fd:85:7c:7a:19:84:11:
36:9b:1d:5b:ac:d9:ba:93:47:13:5e:ba:5a:e4:7c:
92:24:57:d2:5f:2e:71:97:2a:d9:c6:de:be:f3:ce:
6e:09:71:0a:0d:07:cd:54:f8:a8:84:5c:3a:b7:8e:
95:26:23:e3:7c:6a:e3:53:a2:01:c5:f8:0a:47:3e:
43:1b:6c:59:c5:5f:6f:94:63:f8:30:9e:8f:cc:07:
da:02:da:ba:ba:01:ca:36:d8:67:08:45:69:0f:e2:
f6:63:1b:38:bf:b3:ef:e0:f9:b5:10:0f:79:b2:22:
68:eb:59:00:80:56:0b:98:3c:98:1a:41:f2:3f:74:
1f:c0:03:13:01:70:52:18:42:85:45:d0:d0:6c:e6:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:19:E1:88:AA:87:0E:FD:9F:88:B8:A6:69:B2:FE:FF:B0:25:C6:83
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:95:de:df:2d:b6:2b:93:f6:7c:2b:3c:25:38:19:01:ff:fe:
44:17:64:49:6a:da:67:de:2d:58:9e:27:ca:f9:43:02:66:58:
d4:3e:e3:2f:48:ae:99:62:f1:fd:82:c4:35:bc:48:f1:9a:0d:
82:ff:d8:c9:11:78:28:e3:29:b5:72:df:c5:9c:7b:7c:71:f5:
d9:c3:ee:60:f9:89:77:c0:3e:20:15:ae:5e:cc:8e:3e:ba:85:
bb:16:c7:47:48:46:5e:22:b8:44:3f:5c:6d:2a:6a:38:b9:a9:
6b:a6:c1:2d:24:df:49:ea:b5:be:ab:1f:f3:31:18:cd:09:fe:
f8:0a:d1:db:d0:8f:cf:c6:9a:f4:27:7d:5b:95:99:0d:c0:21:
c2:06:38:d8:7b:dd:4f:0a:4a:c5:09:41:61:c7:9d:52:8c:75:
44:a6:c3:0d:ba:4d:68:c2:37:03:1e:58:bb:f0:25:c9:9d:3c:
29:9b:fe:ce:99:cc:72:00:81:57:f7:0f:d1:cb:b9:4e:78:f1:
24:58:54:cb:40:c9:47:55:08:e5:5f:2c:24:8d:5b:91:1c:4d:
df:1c:fb:9b:c5:af:61:d0:8f:0c:e7:d3:4d:72:32:b6:d9:e0:
d6:55:be:dc:94:9f:5c:1a:65:98:c2:cd:d3:c3:54:91:81:fa:
c2:7b:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:11:50 2026 by rpki-client