Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: aSFuZDPRP0DqOF6H5LLvAgFXkyT5gZwLPrlMkX64PKM=
Subject key identifier: 26:B2:68:25:91:A5:D3:65:94:D2:FA:36:23:BE:54:BA:41:03:7A:D2
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 019FA9E2BAEE9D5B22BB8ECA90ECBB83715C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 15D7
Signing time: Tue 28 Jul 2026 18:00:36 +0000
Manifest this update: Tue 28 Jul 2026 18:00:36 +0000
Manifest next update: Wed 29 Jul 2026 18:00:36 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: WKMB28jIo8maaRKyGgTgBrc4MY/adU4iQFu/79jCmWY=)
2: t_3KExq4t288IjtqVXAOQe_Eba8.roa (hash: ChTQhqA/DHUVGryflG/Am/U8Pp4mklmr4RiBocThAjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ba:ee:9d:5b:22:bb:8e:ca:90:ec:bb:83:71:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Jul 28 18:00:36 2026 GMT
Not After : Jul 29 18:00:36 2026 GMT
Subject: CN=26b2682591a5d36594d2fa3623be54ba41037ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:dd:50:a5:e3:fc:1a:1d:4e:d2:aa:bd:e1:
32:af:f0:b8:3f:00:0d:e8:26:92:23:e8:f1:4c:21:
ef:a2:59:23:23:c5:39:e7:a8:e9:d9:cd:ce:fe:7c:
08:6e:c4:6d:16:da:fc:87:d0:86:5e:1d:32:79:3a:
17:7e:a9:5e:fb:53:44:a4:8d:56:b3:32:46:24:6f:
7e:22:e5:6c:c3:91:3a:96:6e:ef:c5:8d:9e:41:79:
a8:cc:69:f9:e2:70:93:91:89:bd:b9:8e:33:f3:42:
e4:e8:6e:a5:a0:e9:e0:62:ba:3a:ed:41:50:90:b2:
b6:bc:31:65:81:c5:12:54:49:cd:bb:41:e5:a9:95:
67:06:ba:b0:d0:6e:d4:4a:ac:1e:1a:18:64:1e:ba:
28:09:4d:8a:7c:fd:ab:7a:48:fc:b7:0a:42:6e:be:
bf:d7:c9:b2:4d:8f:b1:13:38:67:d3:3d:c0:ff:a0:
d7:68:50:eb:fa:13:b3:78:31:de:ad:33:a6:86:67:
81:2b:b4:44:68:c6:76:b7:c6:fe:74:97:40:38:60:
21:d7:79:c9:16:4e:41:e1:ff:7e:74:a3:07:6e:77:
ec:38:2e:f7:70:72:c8:88:01:ca:3b:be:27:35:a4:
f2:83:e0:b0:57:79:12:4e:50:72:c0:08:6d:60:e4:
2e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:68:25:91:A5:D3:65:94:D2:FA:36:23:BE:54:BA:41:03:7A:D2
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b6:35:2d:ec:33:05:77:3b:4d:b7:2d:a4:61:37:36:39:96:
99:d2:21:fa:b4:09:8e:d3:75:5c:54:2d:15:d0:43:4a:c6:e9:
ed:ec:75:32:9b:01:21:0c:b5:23:bf:c9:90:26:4b:d5:bd:fd:
8a:7f:49:c2:6b:64:70:35:4c:af:d5:3f:9b:6e:b8:b6:6b:e3:
a3:bc:58:6d:17:d4:6e:ee:04:85:2e:71:1f:40:3c:a6:d9:99:
2d:83:e3:71:3d:05:e7:7c:e2:a5:1c:ed:2a:89:e2:6e:12:d1:
ab:39:4c:17:70:e8:0e:28:81:2e:56:e5:2d:de:09:61:46:d5:
5c:6e:8d:d2:24:3b:e4:67:63:21:8c:35:e9:a9:33:79:b5:6c:
a2:f0:31:03:5f:a0:44:fa:be:15:42:14:bb:75:db:ee:19:e3:
79:39:85:7c:dc:0d:58:c5:15:b5:21:ea:68:43:98:74:0a:73:
8a:89:ab:31:4d:9b:47:ad:9b:80:1a:a0:e9:6d:2e:ac:b3:48:
de:37:9b:9a:a4:f1:5e:ff:9f:4b:ff:a3:9e:47:1c:6c:4c:ba:
c3:61:82:d5:0b:e2:5a:b0:f0:1c:54:9f:10:5e:a5:4f:0c:c5:
ea:57:d5:dd:fe:73:82:cc:18:ae:a8:24:95:a4:86:e4:0b:dc:
50:cd:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:48 2026 by rpki-client