Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: 9A/y7vf6Bp07yodUOdRr9v6NC1cy3JjqTRWc1bfrGCQ=
Subject key identifier: 49:F8:D8:0B:04:AA:B1:13:D1:CD:AE:19:B6:48:F3:85:58:10:76:65
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 01A0C47CA5281B624CF366EA164BFC17D43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 15:01:37 +0000
Manifest this update: Mon 21 Sep 2026 15:01:37 +0000
Manifest next update: Tue 22 Sep 2026 15:01:37 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: D6AgOapJctPwcZWq+WJGroirwsNzD6tUaklqnwgwM5A=)
2: KYwuzPdQcxFtvMJ482Z-no0-rlI.roa (hash: WFv3oIQNO2UW+gImEV96V10XtC3ybgEz6IBrXZKDplc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:a5:28:1b:62:4c:f3:66:ea:16:4b:fc:17:d4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Sep 21 15:01:37 2026 GMT
Not After : Sep 22 15:01:37 2026 GMT
Subject: CN=49f8d80b04aab113d1cdae19b648f38558107665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:7a:1b:e5:6c:fd:cb:35:66:1b:13:10:0e:
5c:e9:87:30:54:24:05:54:b8:f8:4d:f5:56:24:20:
af:c3:3a:a8:68:c5:8f:cc:09:69:19:c2:55:b0:a9:
19:9f:25:f7:7c:b1:55:4f:6f:e3:57:82:00:89:aa:
63:0e:71:5e:db:19:39:0a:28:64:34:e4:a8:cf:7b:
ef:d2:17:e2:d9:d7:17:f6:d8:a7:b4:3f:e3:30:5a:
f9:c8:f9:98:ef:5a:6b:9f:c0:75:2f:c8:a0:a1:74:
d0:c2:35:f0:48:f6:6f:6e:1b:8b:20:cd:b6:4f:38:
8d:c1:05:d6:45:45:76:15:39:08:8c:20:1b:16:6d:
1d:8d:e0:a3:5f:0c:7b:99:e8:00:3a:ae:f2:76:28:
4f:9b:5f:b8:69:7f:ce:a8:45:3f:c6:fd:37:33:fc:
c9:81:02:34:e2:59:d9:b6:3a:53:f3:f6:73:1a:1b:
68:e1:d5:76:2b:3d:d9:4a:69:12:41:ca:76:a4:c5:
37:37:73:9f:42:2e:e3:82:07:43:17:87:1e:d6:8e:
1d:9c:f3:72:33:95:29:f4:3d:40:df:f5:15:8f:4d:
14:ef:a4:cb:83:b2:22:ed:e1:67:14:0b:45:f0:4b:
9d:db:c4:8e:6a:ff:61:f3:23:3f:a7:45:69:34:05:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F8:D8:0B:04:AA:B1:13:D1:CD:AE:19:B6:48:F3:85:58:10:76:65
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:79:b4:57:ce:06:df:39:31:44:b1:5b:80:ce:74:88:99:df:
f8:39:54:25:6b:0a:fc:18:bc:57:e8:8c:dd:3b:41:08:96:06:
c4:ab:f6:af:5b:32:03:ec:b3:99:ce:89:04:49:30:ba:c2:a7:
f0:07:5b:09:ca:98:bd:5c:a7:e3:5a:a5:51:4b:6d:74:8f:5b:
cd:0b:6b:8f:c2:f7:de:c9:14:37:40:43:50:3c:10:5a:2e:fe:
58:17:a2:06:26:1c:87:88:20:f4:60:1d:e0:f6:f2:34:5a:3c:
c3:58:b9:4c:45:e6:48:db:68:36:5c:48:b6:b3:41:0f:42:4b:
72:d5:a0:3e:40:78:b8:6e:4d:56:7c:85:ef:89:ae:0a:f7:2a:
6e:d0:46:ea:0f:e3:60:03:75:c0:56:7f:38:97:1b:e2:f0:78:
16:b6:4d:44:ca:b9:1a:f1:56:fd:3d:98:5e:73:11:e7:72:57:
9c:74:f1:9f:d3:ea:89:60:99:a3:97:53:93:83:81:57:58:f0:
c6:13:85:5f:0f:52:6f:b5:db:99:bd:ab:61:44:34:65:74:f8:
75:51:c8:14:10:b9:8d:5e:f5:67:96:4d:d1:a9:aa:34:56:4c:
41:a0:b2:e9:e2:b3:bd:c4:e4:0a:2a:e7:96:57:15:f5:38:56:
44:f5:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:01:27 2026 by rpki-client