
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: I+pmEPs90bJ3/2Kvvo/qU5r+xX8R9Xoc8tb+Cg9LjYQ=
Subject key identifier: 50:F9:82:71:95:8F:52:BC:B2:57:6C:1F:12:07:AD:1A:0C:4B:5C:EA
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 019FA8998601086C01CD091F44366A87A68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 12:01:01 +0000
Manifest this update: Tue 28 Jul 2026 12:01:01 +0000
Manifest next update: Wed 29 Jul 2026 12:01:01 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: /NPeGasKjbnTorAmfvOA9/mcNfh5NoJbVPXYWWb28wc=)
2: KYwuzPdQcxFtvMJ482Z-no0-rlI.roa (hash: WFv3oIQNO2UW+gImEV96V10XtC3ybgEz6IBrXZKDplc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:86:01:08:6c:01:cd:09:1f:44:36:6a:87:a6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Jul 28 12:01:01 2026 GMT
Not After : Jul 29 12:01:01 2026 GMT
Subject: CN=50f98271958f52bcb2576c1f1207ad1a0c4b5cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:eb:27:b9:48:62:32:e2:4e:8a:76:7f:d5:4b:
e0:65:55:18:99:c5:d0:35:26:6e:eb:2f:4a:83:7f:
99:6c:e7:42:03:10:8c:50:ff:69:4c:85:7d:30:4c:
47:7d:14:31:95:05:6f:76:40:67:1a:c4:0c:1f:05:
54:6c:7b:ba:33:d1:7c:20:0d:3c:8e:86:c0:36:fc:
e3:b2:34:ec:29:70:cf:b5:73:b7:9b:cf:e3:3b:ab:
90:24:ef:31:84:97:4c:1c:3a:09:0b:5f:c8:b8:82:
50:23:2d:15:62:79:cf:94:86:9c:40:2a:26:ab:91:
f9:5f:fe:23:5c:dc:96:d6:77:94:68:0c:08:35:a2:
f9:ea:21:12:b7:af:33:5a:01:17:2e:de:f4:e4:1d:
d7:0d:2f:6e:80:f4:b2:84:b7:8f:8d:da:30:2d:e5:
24:50:28:2e:e7:10:66:33:ed:01:2f:68:9e:ad:a8:
98:0a:dc:d3:20:84:19:19:6c:23:13:72:a5:03:c4:
75:38:8f:d6:f7:a9:76:f6:8c:c8:57:ec:cf:3e:8c:
28:18:00:de:6f:88:1c:36:68:0a:c5:16:f2:da:1f:
73:cf:f4:ac:97:9a:b2:0b:4c:f5:fe:42:b0:0b:90:
87:bf:ce:c3:d4:95:ec:57:0a:25:ec:07:08:d8:79:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F9:82:71:95:8F:52:BC:B2:57:6C:1F:12:07:AD:1A:0C:4B:5C:EA
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:19:f0:0d:6c:af:7e:22:43:da:f3:03:a8:86:c0:0a:07:23:
87:6e:75:86:bb:f2:92:84:f2:fa:b8:08:2e:5b:4a:f5:c7:8f:
30:26:fb:e3:6f:ee:54:2f:09:71:9b:d5:40:a7:2a:cc:02:57:
5f:35:4a:3d:e1:41:67:54:b4:3c:1f:3c:2f:e5:22:54:2a:d0:
b3:20:3e:23:b0:0a:61:87:3a:2f:b6:64:44:63:cb:98:b1:19:
66:38:85:70:27:5e:63:80:1b:77:25:d7:2a:27:0e:28:c4:c2:
ad:fb:fb:57:52:46:b9:f2:fd:26:21:e7:e4:66:f7:9f:3f:da:
8a:fe:9c:87:bb:80:55:b7:b9:78:38:01:d2:82:95:3c:d8:08:
b7:7e:a2:11:e1:05:25:b9:f7:41:6f:58:ff:31:44:69:9a:36:
4e:54:87:03:08:29:f3:31:ee:c7:04:c7:f4:5e:cc:89:1b:85:
b5:9d:30:62:f5:b2:38:26:be:44:4b:2c:9d:12:00:d5:f9:02:
e2:fd:52:32:94:e6:02:82:7d:a8:17:26:00:df:2f:f6:5b:cc:
02:1d:23:06:47:86:ae:7d:f7:f0:52:fb:54:bb:91:eb:c3:31:
38:3e:90:c4:b3:7f:0a:73:b6:8f:23:80:7d:40:e9:92:f4:f7:
05:9d:32:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:44 2026 by rpki-client