
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: U65za8rDMfNBFaPEe6DUGbqnIxDuzJpeEyE6OJkeqHQ=
Subject key identifier: 5A:7D:CB:36:99:5A:CB:B2:B4:5A:41:54:81:A8:2D:59:7A:AC:E6:8E
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 01A1DDCC45AE7336653B3483B618A5404FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 0AA6
Signing time: Sun 15 Nov 2026 06:01:54 +0000
Manifest this update: Sun 15 Nov 2026 06:01:54 +0000
Manifest next update: Mon 16 Nov 2026 06:01:54 +0000
Files and hashes: 1: _T4q5Hpk4ipyTG7AMNyDdoKOT50.roa (hash: Lr+JB8T/f7L7H1ix+TlIyXnba9tt1bZ6qL8/Kz5nqFg=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: FvAPzMnooFlkvfGA5ZMXRFx++i8shZpf+WvOaNtzGcA=)
3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
4: ji5uq7lgpZme2h5LP4PpoR1KlXg.roa (hash: KpOwi/Y6b4qR3//I1ROSdvQABJ8PA4YdcglI0GCbEGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:45:ae:73:36:65:3b:34:83:b6:18:a5:40:4f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Nov 15 06:01:54 2026 GMT
Not After : Nov 16 06:01:54 2026 GMT
Subject: CN=5a7dcb36995acbb2b45a415481a82d597aace68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:bf:12:82:47:95:05:be:92:61:a5:58:48:
27:38:54:d2:8b:32:e6:29:41:a2:3b:a7:9f:ae:85:
73:62:a3:63:27:81:ca:89:44:a1:87:11:7e:bd:8c:
ee:d2:9d:c4:32:7c:41:69:13:e1:f9:8b:f0:87:a4:
97:2e:94:3d:fb:d3:de:32:78:65:15:44:2d:92:1d:
c0:ac:ee:c1:14:83:89:35:fe:0e:dd:4b:2a:a9:73:
cc:9e:d3:85:ed:73:b4:8b:5c:c2:12:4b:8d:56:b5:
67:3d:4d:f6:11:64:af:54:89:9b:0c:af:14:d6:ca:
c7:7f:9e:a4:6b:d6:17:01:63:fd:91:36:20:44:a9:
bf:b7:2f:42:62:c0:45:60:b3:22:2b:c1:18:9f:44:
55:75:30:4d:9c:b6:a1:bb:ad:5e:d8:4f:3d:38:62:
06:ec:e3:e9:fb:57:9b:0f:3c:b1:35:db:45:38:54:
95:13:23:09:ab:bb:6b:e6:39:ce:1f:02:bd:df:40:
fb:2c:52:1b:99:92:1c:69:47:90:9e:15:c6:c7:cf:
76:df:c4:9f:77:7a:07:14:c0:75:ff:fe:d4:a9:e6:
5b:25:b5:e9:0c:bd:16:d9:bb:eb:74:80:b8:1e:28:
5d:6c:2f:72:fa:84:fb:e7:4b:e6:3b:96:b1:ed:2d:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7D:CB:36:99:5A:CB:B2:B4:5A:41:54:81:A8:2D:59:7A:AC:E6:8E
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5f:91:24:42:05:1f:e7:fe:4f:7e:e1:8e:04:cd:8e:2b:6a:
cc:d9:12:c0:ac:11:c3:0d:3c:e0:76:83:c5:03:ec:b4:20:d1:
f8:8c:4a:4b:44:1d:5c:9a:da:b6:5e:21:26:63:47:8e:93:ea:
77:7a:86:87:28:ac:f2:24:12:3a:b8:01:26:90:f7:b8:b1:88:
f0:23:22:3c:88:5e:5f:f9:c7:96:1a:21:c5:f6:ec:92:ee:d3:
de:4f:23:0e:ff:b3:ad:dc:03:ce:05:67:63:bf:ec:dd:d2:85:
6f:a9:89:62:c1:35:3c:ad:a3:6e:99:0d:a0:65:04:34:e1:15:
bb:70:d8:78:27:0f:c9:57:dd:11:d4:33:89:4a:32:62:2b:e5:
9e:b8:5e:64:fc:14:df:02:7f:60:a8:27:42:3f:63:bc:48:9a:
71:34:02:1a:ff:a8:d4:6f:45:06:6f:8e:26:09:a5:ec:cb:7e:
28:53:56:13:43:00:63:14:00:58:7e:63:f2:6b:51:00:7d:65:
a4:df:12:c5:c1:97:e2:a9:3f:39:1b:36:db:40:52:43:4b:3d:
c6:d7:2c:50:19:4e:6a:4c:a9:18:73:2d:67:46:c0:bf:dd:85:
9d:f8:0f:49:b7:0d:74:40:06:7e:22:f1:35:5f:2f:bb:0e:0c:
77:7a:99:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:11:19 2026 by rpki-client