Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: BQ/0WwcECTNQt6tAvtBQ0+Dsna+Z/nb2Emk4LVvQgts=
Subject key identifier: 9C:DC:9F:9F:62:A4:84:E7:89:F3:33:AC:D4:73:00:43:7E:DC:F8:28
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 019EBEEC5AE1C6E5D3CB474E3629E7E1F9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 03:00:21 +0000
Manifest this update: Sat 13 Jun 2026 03:00:21 +0000
Manifest next update: Sun 14 Jun 2026 03:00:21 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: 30XPBTEGyyNBEpwOvKYusbZQnG/w+OyUJNYb5LXYy8U=)
2: KYwuzPdQcxFtvMJ482Z-no0-rlI.roa (hash: WFv3oIQNO2UW+gImEV96V10XtC3ybgEz6IBrXZKDplc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:5a:e1:c6:e5:d3:cb:47:4e:36:29:e7:e1:f9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Jun 13 03:00:21 2026 GMT
Not After : Jun 14 03:00:21 2026 GMT
Subject: CN=9cdc9f9f62a484e789f333acd47300437edcf828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:09:56:e8:85:f8:ea:89:de:04:9e:07:3c:
8a:3a:f6:c3:79:b6:49:ef:52:98:3c:4b:58:e9:22:
9f:79:1a:cd:d4:05:f7:0b:b2:35:3b:58:0d:24:c8:
5e:d3:a8:0f:49:99:e7:87:4c:c5:aa:f8:83:9e:d8:
c0:79:46:05:20:61:e6:70:22:30:72:b2:1c:e3:ee:
f1:51:42:e5:c5:96:6e:ea:d0:c2:d2:5f:29:30:43:
00:fc:53:45:f1:58:46:64:4d:02:d4:02:83:1c:7b:
96:70:b2:0e:7c:ec:0d:b8:62:05:d0:a9:3c:80:b1:
a0:ed:aa:82:bf:f4:24:72:8d:a5:ec:58:4b:be:2a:
e8:d0:e9:a6:8c:32:46:63:0d:ba:da:0c:f8:4f:b1:
96:2a:0b:62:a2:62:37:5e:2a:17:e8:6a:6e:85:94:
ef:c9:2c:99:89:5e:53:c3:58:b9:ac:e6:e4:21:d4:
23:28:d8:0d:b9:d7:20:f6:93:30:e8:c8:32:de:98:
c0:96:06:9f:87:23:06:a4:a5:0b:d0:6c:fe:cd:e0:
9c:89:a9:fe:21:e5:80:9f:06:57:42:ee:92:55:50:
d4:aa:30:e1:8e:99:b3:77:9c:d4:86:c3:dd:fc:2a:
26:1b:7b:c5:c5:ee:85:61:26:a4:97:0b:f0:0a:f0:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DC:9F:9F:62:A4:84:E7:89:F3:33:AC:D4:73:00:43:7E:DC:F8:28
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a6:84:d6:ab:ae:b5:18:b1:2a:42:40:f1:5a:ea:40:1d:0e:
ce:29:9e:c6:52:2b:3c:e5:1e:a4:34:fa:91:06:16:e3:2b:82:
b2:ba:8b:df:69:e6:90:a0:81:5d:29:6c:d4:c4:d7:ab:55:16:
d2:8b:1a:37:24:84:60:ff:0f:f8:01:e6:6f:6e:d2:30:f7:ac:
f7:bb:e8:82:74:ec:02:ac:82:c6:85:3e:12:83:f0:40:dc:78:
60:2e:2e:35:6a:71:98:31:6a:d5:89:b8:38:bc:cb:0a:58:c1:
6c:3a:63:8d:30:41:0f:24:af:ba:ae:4c:73:77:92:f8:1c:6a:
8f:21:68:10:f5:d3:f1:17:b6:8a:a4:13:61:6d:5b:9f:3b:1f:
92:e4:9c:f4:fd:eb:80:80:4b:61:7d:d5:68:8e:5c:38:63:2a:
37:ac:f8:e6:83:4a:c0:d2:8c:15:5a:09:9b:28:13:83:96:68:
10:d7:b1:47:51:86:aa:39:6d:95:0c:c6:11:e5:4c:98:fb:3c:
88:4b:17:52:91:f1:81:16:42:1d:fb:0e:ee:35:55:86:13:6b:
81:6a:e7:aa:62:e8:64:f1:a9:53:d4:d0:52:ab:63:5b:d6:21:
63:b5:80:a0:1b:e0:68:ee:60:58:ea:e1:5d:f4:d6:ce:f8:e9:
85:0b:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:57:42 2026 by rpki-client