Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: RJCUvIlfA6MX8EMsJigLSFCJg5UgVelSWKkQsItc2mA=
Subject key identifier: 9B:A5:3D:AA:F6:65:F9:92:E7:E3:6B:76:5D:40:72:8D:93:21:F4:A1
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019D2696006DFAD09DE0F5C15FC3F88F61C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 0834
Signing time: Wed 25 Mar 2026 20:00:57 +0000
Manifest this update: Wed 25 Mar 2026 20:00:57 +0000
Manifest next update: Thu 26 Mar 2026 20:00:57 +0000
Files and hashes: 1: KoHLJNQuOcHspjZQJtsgwfHF3m4.roa (hash: Pm229i2zgzIKXvQ6Hz77HG6vbpEhWAQEJXW3BVSV54E=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: IbibE/WAKkp4aJTj5DbW/6dR/Dpc4ut/0xTbf3oZ+4o=)
3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:00:6d:fa:d0:9d:e0:f5:c1:5f:c3:f8:8f:61:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Mar 25 20:00:57 2026 GMT
Not After : Mar 26 20:00:57 2026 GMT
Subject: CN=9ba53daaf665f992e7e36b765d40728d9321f4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:34:78:44:04:e9:d1:1b:bc:74:e4:0e:63:
2e:77:9e:50:e1:69:66:45:bd:bc:a7:86:7a:1f:cd:
3c:2f:9a:06:58:c1:c5:59:30:f9:d4:2e:5f:d0:8f:
f2:38:73:64:c8:f1:c3:ac:04:aa:79:cd:a8:40:1c:
f5:c6:ad:fa:a1:3c:b8:4e:e2:d1:43:92:9c:44:95:
57:e4:24:99:09:17:b6:06:d1:6f:c5:de:7a:89:8d:
5e:07:05:25:09:72:5d:c7:e3:07:62:3f:51:82:0b:
fc:e7:1f:44:bd:f8:69:d4:03:f8:ed:a1:e6:ea:16:
00:c6:74:8b:6a:15:34:c7:10:c1:06:33:9a:e3:f4:
16:8a:fb:ea:76:e8:45:88:a9:1f:73:65:d2:c1:7c:
4d:c5:8c:fc:ca:95:bd:38:7c:98:8d:77:0b:fb:0a:
0d:73:d1:1f:7a:11:e5:48:cc:b2:3f:16:9f:c7:ca:
e3:26:9e:bc:f5:0b:fd:98:d9:60:80:a0:12:31:d2:
da:58:8b:15:b5:f1:1a:ce:bb:a9:82:3f:62:6e:3f:
24:20:43:5c:20:3e:c0:0d:27:53:7d:79:4c:a6:7a:
c5:87:7c:94:b7:0d:37:f1:54:e5:84:e3:82:de:4e:
64:3e:9b:04:22:c5:75:79:b7:c8:de:11:56:4a:36:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A5:3D:AA:F6:65:F9:92:E7:E3:6B:76:5D:40:72:8D:93:21:F4:A1
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c1:c3:92:f3:7b:2e:30:11:0c:d6:da:1b:a4:4f:61:13:15:
cf:e4:50:53:33:47:94:66:84:01:0f:e9:cb:32:86:bf:30:e1:
23:73:f8:c3:65:6b:ed:be:a2:5a:ec:4a:df:4e:04:7b:33:33:
3b:f8:77:16:27:97:29:72:bd:bb:17:00:fe:e4:fa:5d:41:2f:
98:1e:46:9d:c0:08:a3:ad:a6:93:bd:f4:8c:1c:a4:7e:f4:3f:
3e:9a:63:bf:7b:42:fe:c4:8a:a8:aa:25:4a:4f:fa:9b:e9:03:
c3:e3:18:b5:24:ca:29:fd:64:c1:94:23:8a:26:0c:8b:81:08:
39:e1:b1:30:34:13:39:55:67:39:d7:a0:68:83:20:45:84:04:
ea:c2:8e:a5:0a:91:a0:92:d3:1f:c3:3e:0a:c3:b4:e8:d0:ef:
c0:db:d0:35:57:81:75:0f:20:f5:dc:b9:80:15:82:ac:8e:d9:
a2:8e:19:20:6e:24:f3:5b:67:51:95:8c:7f:88:69:23:b8:23:
66:9b:61:17:5d:d1:25:98:4a:93:6b:7e:19:a7:25:c6:e4:22:
0c:42:4d:9e:0e:72:ab:a8:81:d0:d2:84:57:7d:2f:aa:34:5f:
cb:d9:d0:ad:a7:6c:e9:c5:d3:6f:86:a9:32:a8:7c:10:9a:e6:
58:11:d3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:48 2026 by rpki-client