Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: UGQS8ZvvlJ1M5uf+pUpQNRZYD0a+vW9D2MiuOKKKdUc=
Subject key identifier: 49:F0:86:DA:8D:D5:9C:3B:9E:45:5B:3D:1E:EB:2B:80:02:0F:C8:46
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 01A0C9A2680BC71FF1B251BFEF3CBF9DCE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 166C
Signing time: Tue 22 Sep 2026 15:00:58 +0000
Manifest this update: Tue 22 Sep 2026 15:00:58 +0000
Manifest next update: Wed 23 Sep 2026 15:00:58 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: c4W/XlEbcC8NlpY4jOR5Inrxro4WN4pdcqEB5Z4+7kE=)
2: t_3KExq4t288IjtqVXAOQe_Eba8.roa (hash: ChTQhqA/DHUVGryflG/Am/U8Pp4mklmr4RiBocThAjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:68:0b:c7:1f:f1:b2:51:bf:ef:3c:bf:9d:ce:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Sep 22 15:00:58 2026 GMT
Not After : Sep 23 15:00:58 2026 GMT
Subject: CN=49f086da8dd59c3b9e455b3d1eeb2b80020fc846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:27:42:db:d8:84:70:04:7c:d2:17:c8:eb:a7:
a8:1f:73:5b:ea:81:c5:9b:b7:e0:1e:d6:af:84:1e:
fa:0d:11:31:b7:37:ca:c9:cb:cb:b3:8c:72:52:13:
25:b4:23:38:19:c3:dd:40:bd:31:1b:68:e2:b1:2e:
f1:b5:90:b6:75:99:29:ca:e9:68:a1:e0:79:a4:0b:
0b:a3:55:c2:e3:59:9a:ad:da:a2:38:69:88:ce:82:
c1:11:fa:d7:7e:89:cf:5b:e5:4a:48:52:a3:a0:ac:
67:42:e1:2b:2b:e9:96:df:94:d2:5c:80:a7:3e:40:
61:c9:d5:07:6d:7f:30:61:c1:ad:fb:3e:33:66:41:
d2:d0:26:0a:df:77:1b:b1:d4:36:43:bb:c5:85:19:
3e:f6:09:ee:87:37:f7:ec:7d:64:77:a6:bd:02:d2:
73:82:9a:f3:f4:67:1f:96:ad:4e:3d:c5:0a:dc:33:
f4:9f:61:45:c7:f7:7b:80:c3:ad:4d:18:a5:41:72:
42:52:a4:8f:f4:38:7d:72:91:9d:dc:ee:a1:b4:95:
d3:7f:47:87:c1:0b:9a:39:08:74:64:c9:88:dc:39:
c0:53:8b:c2:bb:15:a4:c3:ef:10:7c:04:ee:94:19:
35:14:74:12:24:8b:77:d6:d2:53:a4:01:a5:03:29:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F0:86:DA:8D:D5:9C:3B:9E:45:5B:3D:1E:EB:2B:80:02:0F:C8:46
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cd:71:34:e5:95:96:df:c4:04:b0:46:76:89:17:b6:91:f5:
a4:21:f6:92:13:70:ea:f2:82:b3:5f:f7:78:7c:0f:0d:2e:97:
5e:f9:74:f7:47:17:43:9f:f2:e5:7b:4c:c1:e1:fa:d2:1c:8d:
18:de:0c:a1:8c:6f:44:71:88:06:df:c9:2f:8d:b6:f7:62:f3:
7f:d0:41:38:b7:0e:ef:d3:ce:13:f1:a1:57:49:83:b9:7d:01:
c4:3f:b3:33:99:18:0b:e8:ff:0a:fb:85:16:f4:a7:e8:2f:1e:
68:6f:dd:4c:bd:bd:fb:bc:17:6a:7c:ec:b0:8f:ae:f0:7b:86:
de:c4:de:96:c6:29:cf:06:45:6a:fd:fd:41:34:d7:7d:13:66:
ad:cb:40:b0:cd:37:2a:bb:5c:12:a0:d3:ae:c9:36:42:21:d3:
a1:44:d8:20:ed:44:f7:48:07:ff:9e:0c:6b:51:a3:c6:98:ae:
bc:26:d9:2d:62:89:dd:b1:68:ed:9d:fd:af:ed:1d:f7:ec:59:
18:96:0d:50:7b:61:38:27:b1:67:1f:52:86:49:0e:76:98:61:
6a:69:32:7d:e8:96:63:69:40:a3:0c:67:42:4c:f8:e0:90:44:
e7:80:50:dc:cf:19:63:43:08:b8:6d:06:0e:18:c8:01:d1:9f:
a6:15:86:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:28:15 2026 by rpki-client