Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: +4XdKp8A8TUxDFqfS9w/c1w7f7WPKYe4TB7Ba/eJcUU=
Subject key identifier: 78:FF:6C:BE:9B:C2:14:9F:D9:EA:1D:F4:DE:BA:1A:96:6E:84:8B:4F
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 019EC03625D3AF186C3DDF1B66B9E9AFA58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 155E
Signing time: Sat 13 Jun 2026 09:00:34 +0000
Manifest this update: Sat 13 Jun 2026 09:00:34 +0000
Manifest next update: Sun 14 Jun 2026 09:00:34 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: 0aSohvPZMXrR5lVaNHw2uRkswMSvbLQj+z6U34gE64g=)
2: t_3KExq4t288IjtqVXAOQe_Eba8.roa (hash: ChTQhqA/DHUVGryflG/Am/U8Pp4mklmr4RiBocThAjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:25:d3:af:18:6c:3d:df:1b:66:b9:e9:af:a5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Jun 13 09:00:34 2026 GMT
Not After : Jun 14 09:00:34 2026 GMT
Subject: CN=78ff6cbe9bc2149fd9ea1df4deba1a966e848b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:e8:36:97:ad:7f:b2:29:32:3d:0d:72:9b:
5d:30:d7:42:c7:e2:8f:27:0c:9a:be:90:25:be:bf:
7c:6d:6a:f5:12:e8:a7:64:96:da:1c:10:d7:23:de:
e0:43:2c:65:27:c7:13:60:e5:29:6d:b2:65:59:28:
7b:37:08:12:42:33:54:16:3d:7a:b3:72:3d:6f:b7:
25:81:67:5c:29:ef:f1:ee:10:3e:70:88:74:b8:6e:
5a:56:d4:e1:ec:f8:70:fe:ed:b6:2d:5a:24:db:ad:
88:3d:b0:a5:5f:c1:c1:f3:8d:91:52:ed:ef:4a:e9:
ae:8c:3c:68:1a:4c:b7:24:cb:19:a0:f1:1e:8b:1b:
91:4e:eb:1e:d2:10:66:4b:4b:78:0d:4f:16:ea:87:
f3:f9:f9:ed:76:c0:98:2d:18:45:25:21:95:c4:06:
2f:1d:e8:b0:c5:46:1a:e7:f2:4d:af:6a:62:c5:a7:
78:d4:c6:cd:05:4d:7e:73:af:21:45:d5:cc:97:31:
3b:bd:93:b7:13:81:08:8b:85:dc:ae:2e:de:a4:25:
5a:38:31:0a:98:da:9d:29:4c:18:5b:bc:57:ff:0f:
a7:7c:5a:c6:bb:b6:d4:70:29:2e:a5:ab:39:5a:bf:
d0:ea:36:c6:89:71:71:0a:3d:7a:ee:4c:d7:8f:00:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:6C:BE:9B:C2:14:9F:D9:EA:1D:F4:DE:BA:1A:96:6E:84:8B:4F
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:67:19:7c:9d:70:f7:df:eb:39:f1:cd:e4:ed:c9:a8:f7:43:
64:79:e6:1e:b4:48:75:d2:17:e5:60:64:0c:fd:89:3d:cf:70:
e9:f4:eb:9c:af:26:39:a7:b9:af:77:93:34:85:fc:66:0f:ac:
37:63:8f:d2:b6:3f:03:61:1b:55:ee:33:d6:2b:c0:a8:4c:90:
ea:71:dc:ba:0b:46:80:70:3e:20:55:2e:2c:4b:c2:a3:3a:1b:
27:53:e2:7e:25:c5:f8:ee:98:55:f9:43:10:ac:57:7d:73:8b:
46:28:aa:dd:ab:7b:b0:bb:e4:cd:0d:ca:f2:65:92:cf:bf:5e:
d6:46:fa:c5:55:dc:d4:03:90:ee:af:f4:13:78:e9:21:2c:72:
ae:5c:27:28:ae:9d:25:84:d3:97:11:a9:12:ac:a4:1a:46:25:
44:28:4e:2f:eb:52:e4:5b:05:89:c7:8c:e3:a0:f2:f6:cb:ba:
05:76:64:80:37:23:d9:14:76:5c:50:23:c3:15:53:ec:ce:92:
a5:64:14:2c:2c:10:62:70:ef:8e:69:9c:c1:a1:86:42:46:3d:
17:33:51:aa:80:39:79:02:57:6d:37:5b:93:d2:be:a3:d0:f2:
a9:7b:d2:4b:26:a9:1f:7c:db:8f:99:d1:0d:4b:cb:5f:cb:8c:
a1:6b:49:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:50 2026 by rpki-client