Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: FfDlsPB5Z++LTotfk56RoYLktsM+okF+S9sJ7GWiLXI=
Subject key identifier: 8E:45:C3:16:F6:44:CF:96:22:36:2C:0D:31:98:FE:8A:38:AC:6F:07
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019D2884D6D780BEC6FBC9E73B80877F84B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 0835
Signing time: Thu 26 Mar 2026 05:01:27 +0000
Manifest this update: Thu 26 Mar 2026 05:01:27 +0000
Manifest next update: Fri 27 Mar 2026 05:01:27 +0000
Files and hashes: 1: KoHLJNQuOcHspjZQJtsgwfHF3m4.roa (hash: Pm229i2zgzIKXvQ6Hz77HG6vbpEhWAQEJXW3BVSV54E=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: 0LEsIYfLm/gz/+d0s3ZXxQGuhKoRUy9tMlI443OIGPc=)
3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d6:d7:80:be:c6:fb:c9:e7:3b:80:87:7f:84:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Mar 26 05:01:27 2026 GMT
Not After : Mar 27 05:01:27 2026 GMT
Subject: CN=8e45c316f644cf9622362c0d3198fe8a38ac6f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:6b:4d:a8:ff:84:00:b8:2b:0e:d0:af:76:
4f:86:bd:65:e4:38:e9:89:80:67:f2:1b:96:ec:20:
a2:bd:3d:6e:0c:0a:79:e3:cd:fc:b8:de:b1:8c:1a:
31:0f:d3:a7:87:0b:36:4c:d2:7d:85:4d:ac:20:37:
22:63:25:4f:0b:52:08:f1:2a:05:ce:80:35:ae:4b:
0e:be:1b:2d:81:b3:9b:4d:02:e2:22:0b:b9:13:df:
65:41:68:a2:d0:60:fc:67:c2:a1:3a:32:8b:c4:39:
4c:f3:ac:ac:90:fe:f1:67:88:8c:f4:29:73:bc:4c:
da:17:11:7f:30:60:e5:f3:c8:e4:98:0e:3b:fb:e8:
7c:e0:d0:fe:6e:08:95:80:c2:c9:af:c5:1a:72:91:
16:9c:58:69:8c:d5:3c:3f:09:8c:f1:8d:bb:bc:73:
05:36:aa:0b:30:f1:75:55:ed:46:f9:8d:2b:36:88:
1c:49:16:5b:ec:5f:ac:b6:39:6f:2e:50:f4:ec:e6:
3a:13:bc:40:8a:64:0e:fe:a4:aa:b0:23:01:80:b0:
96:83:a5:f8:c8:8d:30:55:bb:9e:20:f3:f6:d0:18:
87:36:72:04:6e:44:e0:ec:4b:a7:dd:02:17:71:7f:
ca:ff:9b:bb:8a:9c:cf:3e:fd:1c:bb:15:4e:b7:6a:
b4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:45:C3:16:F6:44:CF:96:22:36:2C:0D:31:98:FE:8A:38:AC:6F:07
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7f:b4:bb:02:f4:2b:4d:16:3e:c1:1d:46:8d:d0:ed:52:cf:
58:8c:42:2d:fe:14:3e:ca:b4:72:f5:b8:87:a9:bc:11:41:2a:
6a:dd:b9:e4:4e:59:46:b6:24:f7:f3:08:ca:46:e7:83:f3:6c:
ac:a5:55:a0:65:d2:3e:26:86:dd:72:4e:de:5d:9a:a6:e9:9e:
fc:fe:6e:94:cc:0e:72:9a:95:ef:4e:ce:13:6f:4c:58:9e:9c:
39:93:e2:8d:e7:50:72:08:19:f9:4c:4c:a3:7c:66:87:e6:7b:
3c:1e:eb:e2:6b:ba:e5:5c:b1:80:46:61:05:22:9c:73:68:27:
1a:b9:d7:6a:02:99:0e:0e:42:c6:b4:48:19:f5:e1:fa:58:53:
e7:c5:bd:c0:13:a9:9e:38:ba:09:db:a7:00:7a:5e:15:16:4b:
b0:6f:78:16:b3:ee:5f:05:cf:59:e8:66:fd:05:55:fe:58:9f:
c2:c8:87:2f:04:ec:4f:15:a5:18:e3:5a:68:3e:9d:10:42:88:
fc:80:93:df:dd:97:5a:07:4b:5c:14:c6:c5:47:e8:90:73:7c:
11:a4:5d:7e:a1:da:9c:b9:e3:5d:47:b6:f9:44:b0:12:99:9c:
66:ee:a9:e1:fb:63:63:9f:12:ea:51:c0:31:0a:14:90:ff:87:
8e:e4:c6:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohNbXgL7G+8nnO4CHf4S1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjFkNzUyOGJlNzEzYTRiYTJjYjRkYjVlNThkNjRkODgy
ZWI1NTUwHhcNMjYwMzI2MDUwMTI3WhcNMjYwMzI3MDUwMTI3WjAzMTEwLwYDVQQD
Eyg4ZTQ1YzMxNmY2NDRjZjk2MjIzNjJjMGQzMTk4ZmU4YTM4YWM2ZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PxrTaj/hAC4Kw7Qr3ZPhr1l5Djp
iYBn8huW7CCivT1uDAp54838uN6xjBoxD9Onhws2TNJ9hU2sIDciYyVPC1II8SoF
zoA1rksOvhstgbObTQLiIgu5E99lQWii0GD8Z8KhOjKLxDlM86yskP7xZ4iM9Clz
vEzaFxF/MGDl88jkmA47++h84ND+bgiVgMLJr8UacpEWnFhpjNU8PwmM8Y27vHMF
NqoLMPF1Ve1G+Y0rNogcSRZb7F+stjlvLlD07OY6E7xAimQO/qSqsCMBgLCWg6X4
yI0wVbueIPP20BiHNnIEbkTg7Eun3QIXcX/K/5u7ipzPPv0cuxVOt2q0+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5Fwxb2RM+WIjYsDTGY/oo4rG8HMB8GA1UdIwQY
MBaAFHAh11KL5xOkuiy0215Y1k2ILrVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAt
OTI4MWYwZDIzZGJmLzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAtOTI4MWYwZDIzZGJm
LzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApX+0uwL0
K00WPsEdRo3Q7VLPWIxCLf4UPsq0cvW4h6m8EUEqat255E5ZRrYk9/MIykbng/Ns
rKVVoGXSPiaG3XJO3l2apume/P5ulMwOcpqV707OE29MWJ6cOZPijedQcggZ+UxM
o3xmh+Z7PB7r4mu65VyxgEZhBSKcc2gnGrnXagKZDg5CxrRIGfXh+lhT58W9wBOp
nji6CdunAHpeFRZLsG94FrPuXwXPWehm/QVV/lifwsiHLwTsTxWlGONaaD6dEEKI
/ICT392XWgdLXBTGxUfokHN8EaRdfqHanLnjXUe2+USwEpmcZu6p4ftjY58S6lHA
MQoUkP+HjuTG4w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:50 2026 by rpki-client