Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: 1E03q7bG7hGMgJcV2KTsCUN5D2zjXVlN0kE21ryUN5E=
Subject key identifier: C6:26:97:97:24:96:BC:EB:02:E7:89:CC:16:6C:13:5B:6D:11:18:F0
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 019CABD9A781EC0620253BACC3133B742800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:33 +0000
Manifest this update: Mon 02 Mar 2026 00:01:33 +0000
Manifest next update: Tue 03 Mar 2026 00:01:33 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: rPiNHn+cjJ2qvYXQOmC+/dSf3dniVu3skv2gqK4VvV8=)
2: KYwuzPdQcxFtvMJ482Z-no0-rlI.roa (hash: WFv3oIQNO2UW+gImEV96V10XtC3ybgEz6IBrXZKDplc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a7:81:ec:06:20:25:3b:ac:c3:13:3b:74:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Mar 2 00:01:33 2026 GMT
Not After : Mar 3 00:01:33 2026 GMT
Subject: CN=c62697972496bceb02e789cc166c135b6d1118f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:7f:aa:69:f3:14:a4:73:8e:c5:8d:ae:e3:
b4:2d:16:4c:ab:a4:f6:f6:91:58:01:0e:56:99:cb:
1f:23:62:30:8e:7c:0a:53:8c:4e:c3:37:bd:65:60:
f5:49:b6:58:9d:b3:64:2a:b0:24:70:93:10:a4:cc:
28:d1:8e:9d:3e:e1:7b:10:e3:cd:07:05:f0:20:a6:
d3:8e:b7:98:c1:0a:a4:3e:be:a9:59:b9:47:c6:cc:
a7:05:0c:bb:e0:4f:54:3a:9c:9e:3c:0e:67:94:41:
ad:1b:d7:c1:f2:5a:7d:2c:3d:1f:a4:08:7a:67:61:
d4:81:c5:36:01:56:33:dd:49:50:f9:56:bc:bf:8d:
6d:bf:8b:76:ed:fe:dd:43:58:63:59:25:d0:21:ad:
41:bf:7f:0f:b6:27:4a:76:9b:9b:27:93:b4:3a:eb:
0c:b2:50:c6:e4:e0:5b:a9:42:a4:3a:88:3c:95:22:
a0:38:6d:22:19:91:da:c2:a8:72:57:70:70:96:82:
8c:8a:7d:1a:1e:4c:dd:59:0d:14:cb:b0:fa:4c:6f:
01:66:5e:99:55:f1:8f:aa:06:e9:e6:28:6e:12:e9:
a7:3e:70:24:75:2e:5a:49:1a:3b:f9:1b:b2:56:24:
0e:03:ce:b8:6c:af:cc:84:e8:ad:6f:95:d5:b4:29:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:26:97:97:24:96:BC:EB:02:E7:89:CC:16:6C:13:5B:6D:11:18:F0
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9a:83:f7:bf:b1:4b:e4:4c:29:6b:a8:5f:8e:47:39:97:b8:
84:70:eb:91:80:7d:a8:82:f1:20:24:a1:63:4c:c9:b6:77:01:
74:f6:43:7d:ed:a8:ef:96:6c:2e:04:62:ae:8c:5a:fd:c2:f4:
b2:e9:c9:e9:98:a2:b7:d5:64:97:32:f0:3b:f5:57:f5:ec:fb:
65:24:16:4c:85:02:39:c0:1e:a5:3d:7e:db:bc:4a:54:fc:22:
24:0e:84:af:19:75:4f:27:bc:19:e1:ec:8d:6f:16:58:c2:ab:
3d:5f:62:c2:9c:fc:54:c9:a3:c3:14:ee:b3:3b:f9:f6:5b:e3:
a1:ae:80:d6:1d:8f:da:6f:b7:cc:6b:57:15:77:d9:e7:fa:9e:
42:0b:20:c6:09:f1:00:f8:a2:66:e6:0c:0c:54:51:4d:57:22:
bb:90:9e:1f:58:80:54:38:88:24:b7:ef:47:87:13:25:4f:3b:
14:25:8a:0c:9e:0e:d2:a1:d2:e7:25:1b:e8:1d:e5:2d:60:a0:
f4:36:1a:b4:ee:87:93:62:ee:80:ff:78:3b:4f:8e:de:79:72:
fb:20:6a:f4:47:bf:4a:55:87:6a:da:12:c3:e1:28:e7:9d:bd:
d5:09:66:ae:03:d9:9c:fc:3a:de:9d:b8:7e:9d:5b:ab:d9:95:
0b:19:90:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:42 2026 by rpki-client