Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
File: cHl9sHv21Fl6wtyL40-JKYAI8s0.mft (raw, json)
Hash identifier: x0GGXkEISUAxOLY1dx+0ous3mzXQiNlw+QoiisfJbZA=
Subject key identifier: 46:72:62:0C:EF:1C:DC:DC:F3:A5:69:AF:72:79:AF:CE:38:17:FD:8B
Authority key identifier: 70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD
Certificate issuer: /CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
Certificate serial: 019F951242E18CCAAB5AB65E6F416657E86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 17:00:29 +0000
Manifest this update: Fri 24 Jul 2026 17:00:29 +0000
Manifest next update: Sat 25 Jul 2026 17:00:29 +0000
Files and hashes: 1: cAt58g0xkrFHt9-N3ZykhWH0ReM.roa (hash: zJIgtJYw+ptpKpZht1FAofTALod8Sw1aXf2YLrLjs1s=)
2: cHl9sHv21Fl6wtyL40-JKYAI8s0.crl (hash: XrFORPUvvfPgXMI8m0he1r8sVDUzn29PFB7sIpcT2iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:42:e1:8c:ca:ab:5a:b6:5e:6f:41:66:57:e8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
Validity
Not Before: Jul 24 17:00:29 2026 GMT
Not After : Jul 25 17:00:29 2026 GMT
Subject: CN=4672620cef1cdcdcf3a569af7279afce3817fd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a7:fc:be:9a:a6:7c:37:5e:d3:eb:84:97:4a:
b4:cb:9a:03:0a:57:71:0b:e0:ce:40:a7:2a:4b:d2:
b5:45:76:5f:24:af:99:c1:ec:b9:f5:df:24:91:e8:
a4:f4:48:b5:9d:2c:4b:de:b8:73:c6:16:1c:06:5a:
65:04:81:49:e3:bc:3a:90:36:c4:68:5a:d4:46:d2:
85:73:ac:b7:9c:9a:b6:0b:10:0f:bf:42:5c:8b:2b:
b4:df:01:6d:67:ab:0a:9b:7a:64:1c:58:b2:4f:bb:
b9:6e:e1:67:03:fd:c3:83:2b:16:9f:a1:80:2e:28:
e8:da:27:46:67:b8:9a:ac:51:85:07:ff:21:9c:ae:
b1:21:75:2d:7a:12:b0:d9:68:8b:d4:e9:9c:09:75:
df:90:da:03:43:39:3b:e1:7e:df:97:ec:fb:41:8f:
59:7d:f8:9e:e0:dc:d3:c0:66:65:04:b6:cf:7c:a8:
41:d3:62:b3:43:94:61:bc:56:b6:0d:6a:4f:62:71:
f5:1f:9c:cb:77:06:97:11:fd:18:56:a9:3c:b3:d0:
0f:9c:b1:2f:90:f3:26:5e:ee:24:2c:5e:79:1b:d5:
d0:3b:50:43:ff:9f:49:d2:fe:92:a8:96:3d:73:e6:
a1:b0:d6:0f:21:c2:9a:4f:dc:1a:69:40:fa:fd:6d:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:72:62:0C:EF:1C:DC:DC:F3:A5:69:AF:72:79:AF:CE:38:17:FD:8B
X509v3 Authority Key Identifier:
keyid:70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3e:62:76:30:a0:e2:ab:f4:86:18:1e:5d:ee:b9:26:43:f4:
97:3f:96:b0:5b:24:d1:04:6e:d0:05:95:88:bf:aa:19:7b:38:
f5:1b:86:f5:51:77:66:de:59:88:37:6e:5c:2c:9b:b4:3e:97:
03:4e:38:a0:94:46:59:33:d6:1c:82:cd:74:1b:9d:47:21:0e:
d6:5e:0b:d3:0a:35:ef:a8:15:35:1a:72:28:9b:d4:63:6c:b8:
26:a5:f8:b1:e1:65:a7:24:e4:d2:58:d5:c8:bb:9e:8a:58:b7:
42:bf:c4:a4:ce:4c:7b:dd:03:f4:f3:c1:34:5b:5b:5a:df:f5:
a1:ae:69:e7:ef:3c:12:9e:ff:37:dd:b2:90:33:dd:6e:f9:6e:
1d:9c:2a:81:a2:1a:35:95:62:fb:e1:8c:57:f5:8b:d5:53:a7:
dd:a5:c4:2d:ac:3f:64:b3:5a:bc:44:4a:9c:ef:cd:fc:0d:08:
6f:16:ed:c4:23:bb:de:a4:98:90:c9:39:32:82:00:12:23:ff:
85:f5:f7:1c:ec:ef:2f:ee:c6:bc:c2:da:6f:33:aa:d5:32:4d:
95:75:c0:47:82:32:bc:17:53:b1:d0:ed:51:e1:11:fb:c7:61:
58:f1:53:e4:b4:f2:c6:1d:0d:b3:b5:9e:96:ca:77:90:26:9c:
b7:15:6b:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEkLhjMqrWrZeb0FmV+hrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNzk3ZGIwN2JmNmQ0NTk3YWMyZGM4YmUzNGY4OTI5ODAw
OGYyY2QwHhcNMjYwNzI0MTcwMDI5WhcNMjYwNzI1MTcwMDI5WjAzMTEwLwYDVQQD
Eyg0NjcyNjIwY2VmMWNkY2RjZjNhNTY5YWY3Mjc5YWZjZTM4MTdmZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6af8vpqmfDde0+uEl0q0y5oDCldx
C+DOQKcqS9K1RXZfJK+Zwey59d8kkeik9Ei1nSxL3rhzxhYcBlplBIFJ47w6kDbE
aFrURtKFc6y3nJq2CxAPv0Jciyu03wFtZ6sKm3pkHFiyT7u5buFnA/3DgysWn6GA
Lijo2idGZ7iarFGFB/8hnK6xIXUtehKw2WiL1OmcCXXfkNoDQzk74X7fl+z7QY9Z
ffie4NzTwGZlBLbPfKhB02KzQ5RhvFa2DWpPYnH1H5zLdwaXEf0YVqk8s9APnLEv
kPMmXu4kLF55G9XQO1BD/59J0v6SqJY9c+ahsNYPIcKaT9waaUD6/W3gPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZyYgzvHNzc86Vpr3J5r844F/2LMB8GA1UdIwQY
MBaAFHB5fbB79tRZesLci+NPiSmACPLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0hsOXNIdjIxRmw2d3R5TDQwLUpLWUFJOHMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jMmVlN2EtY2JiNy00NzBlLWI5NjUt
OTA3ZGFhNDY0NjNiLzEvY0hsOXNIdjIxRmw2d3R5TDQwLUpLWUFJOHMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9jMmVlN2EtY2JiNy00NzBlLWI5NjUtOTA3ZGFhNDY0NjNi
LzEvY0hsOXNIdjIxRmw2d3R5TDQwLUpLWUFJOHMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHj5idjCg
4qv0hhgeXe65JkP0lz+WsFsk0QRu0AWViL+qGXs49RuG9VF3Zt5ZiDduXCybtD6X
A044oJRGWTPWHILNdBudRyEO1l4L0wo176gVNRpyKJvUY2y4JqX4seFlpyTk0ljV
yLueili3Qr/EpM5Me90D9PPBNFtbWt/1oa5p5+88Ep7/N92ykDPdbvluHZwqgaIa
NZVi++GMV/WL1VOn3aXELaw/ZLNavERKnO/N/A0IbxbtxCO73qSYkMk5MoIAEiP/
hfX3HOzvL+7GvMLabzOq1TJNlXXAR4IyvBdTsdDtUeER+8dhWPFT5LTyxh0Ns7We
lsp3kCactxVrlg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:14:35 2026 by rpki-client