Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: D7h78BLBG0t804TthCvTlGoOcyWNEmLMcnIyHVTCJCY=
Subject key identifier: 9D:46:32:CF:27:00:51:53:1A:C3:93:2F:9C:6B:BB:6C:B6:CF:F5:9F
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 019D99626EE9C2FA2B38E2A5516A1ABA1756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:58 +0000
Manifest this update: Fri 17 Apr 2026 03:00:58 +0000
Manifest next update: Sat 18 Apr 2026 03:00:58 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: WYynlLu83ijxh8+fTIzLBBg0JP0d4D5qgEHmBI2USY8=)
2: KYwuzPdQcxFtvMJ482Z-no0-rlI.roa (hash: WFv3oIQNO2UW+gImEV96V10XtC3ybgEz6IBrXZKDplc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:6e:e9:c2:fa:2b:38:e2:a5:51:6a:1a:ba:17:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Apr 17 03:00:58 2026 GMT
Not After : Apr 18 03:00:58 2026 GMT
Subject: CN=9d4632cf270051531ac3932f9c6bbb6cb6cff59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:cb:22:48:08:dc:22:17:56:b0:f1:08:24:
f0:04:d3:73:cc:a3:34:a2:f0:d5:0c:e5:53:a7:57:
0f:9a:a3:20:f2:b6:a2:d0:f1:d4:cc:6c:23:95:b7:
1b:7c:97:49:a5:85:04:99:36:9c:6e:c6:cd:89:83:
86:da:67:a3:87:57:00:28:23:89:1b:3a:82:ca:55:
89:79:f3:84:2a:d4:86:f7:79:27:6d:4e:9e:5d:13:
f7:36:24:18:4c:dc:22:6b:70:8c:f5:f5:a6:35:34:
c8:e3:77:e9:94:4b:0a:14:75:e1:89:74:16:7c:66:
4d:17:c2:42:ec:1f:e1:21:98:b7:39:37:a1:11:87:
1d:d7:3a:6f:f9:6f:1c:9c:8a:8e:68:de:ab:75:fc:
c0:cb:77:6c:21:ab:c1:78:f1:1d:de:1c:15:99:02:
87:1b:39:72:c5:d3:bd:d0:80:aa:a0:3a:f2:d0:72:
bc:6e:5d:34:19:d2:b4:6a:95:53:5c:ba:a1:f8:a0:
9e:ac:88:39:90:b5:ea:e6:4e:22:74:c2:8f:8b:d8:
ad:c9:eb:50:62:ba:b5:5d:b1:4c:4e:f8:e8:c9:05:
e7:05:00:68:7c:1b:82:b4:b3:a5:88:92:47:0f:8c:
ea:8e:30:bf:a2:5d:9b:e5:7b:ba:9a:94:3d:b0:ae:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:46:32:CF:27:00:51:53:1A:C3:93:2F:9C:6B:BB:6C:B6:CF:F5:9F
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:68:8d:40:8b:70:c5:67:70:b7:27:de:dd:79:9f:c0:ec:98:
c2:03:8d:4f:91:81:e2:7f:4e:2b:88:80:eb:4c:db:a9:3f:b6:
0d:50:86:e3:30:e6:10:cf:84:64:18:a1:cf:1d:55:d0:e7:df:
fc:1d:e7:20:ac:17:45:c7:21:7e:c5:44:0e:26:71:70:e2:f8:
9f:1b:a5:2b:8e:16:0d:c2:ed:ec:af:9f:d2:ca:51:5c:55:42:
bf:00:d9:a3:1f:50:5f:60:20:b2:ed:0c:b0:41:77:b0:fc:03:
d5:e1:15:fc:40:58:80:26:cd:76:67:c9:a7:9d:8b:e4:39:23:
0b:9c:3a:e0:61:12:37:bb:11:c6:92:40:9f:36:6a:0b:2d:30:
da:f7:60:bf:4a:21:d8:ae:17:c6:30:e1:de:3a:39:98:35:19:
f7:71:25:c4:ff:6b:a2:8e:be:dd:57:32:ab:c3:fe:92:3a:a5:
1e:40:2c:1d:11:fd:77:5f:b8:52:ce:ab:50:93:9a:b6:60:c1:
25:f6:83:a6:9e:0f:03:af:b6:b9:85:99:ed:94:a4:3d:4d:8d:
39:e1:b8:80:0d:bf:a8:0e:59:e3:93:03:ec:65:fc:ce:0d:f6:
26:31:e3:72:53:70:d0:3d:74:cc:31:11:8f:8f:6a:97:7b:9a:
4e:51:c4:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYm7pwvorOOKlUWoauhdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Mjg1NDczYzk3OGNhNTFjZTU0NjlhYTRhZWRjYTE2NDQ1
YmQ2NTIwHhcNMjYwNDE3MDMwMDU4WhcNMjYwNDE4MDMwMDU4WjAzMTEwLwYDVQQD
Eyg5ZDQ2MzJjZjI3MDA1MTUzMWFjMzkzMmY5YzZiYmI2Y2I2Y2ZmNTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNTLIkgI3CIXVrDxCCTwBNNzzKM0
ovDVDOVTp1cPmqMg8rai0PHUzGwjlbcbfJdJpYUEmTacbsbNiYOG2mejh1cAKCOJ
GzqCylWJefOEKtSG93knbU6eXRP3NiQYTNwia3CM9fWmNTTI43fplEsKFHXhiXQW
fGZNF8JC7B/hIZi3OTehEYcd1zpv+W8cnIqOaN6rdfzAy3dsIavBePEd3hwVmQKH
GzlyxdO90ICqoDry0HK8bl00GdK0apVTXLqh+KCerIg5kLXq5k4idMKPi9ityetQ
Yrq1XbFMTvjoyQXnBQBofBuCtLOliJJHD4zqjjC/ol2b5Xu6mpQ9sK6mUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1GMs8nAFFTGsOTL5xru2y2z/WfMB8GA1UdIwQY
MBaAFAgoVHPJeMpRzlRpqkrtyhZEW9ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4Zjgt
OGUzMDBlZmQxM2JjLzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4ZjgtOGUzMDBlZmQxM2Jj
LzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGiNQItw
xWdwtyfe3XmfwOyYwgONT5GB4n9OK4iA60zbqT+2DVCG4zDmEM+EZBihzx1V0Off
/B3nIKwXRcchfsVEDiZxcOL4nxulK44WDcLt7K+f0spRXFVCvwDZox9QX2Agsu0M
sEF3sPwD1eEV/EBYgCbNdmfJp52L5DkjC5w64GESN7sRxpJAnzZqCy0w2vdgv0oh
2K4XxjDh3jo5mDUZ93ElxP9roo6+3Vcyq8P+kjqlHkAsHRH9d1+4Us6rUJOatmDB
JfaDpp4PA6+2uYWZ7ZSkPU2NOeG4gA2/qA5Z45MD7GX8zg32JjHjclNw0D10zDER
j49ql3uaTlHEkA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:10 2026 by rpki-client