Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: MfseBhTG1lGZ5vBkJeGCbuBnz3L1uz47BAFAm0+zrEg=
Subject key identifier: 56:C8:BC:7C:5C:38:ED:38:73:FE:AD:13:A9:05:50:CC:71:34:AF:67
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 019CAB33FC1D11053254E245C33FAA70465C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 144A
Signing time: Sun 01 Mar 2026 21:00:36 +0000
Manifest this update: Sun 01 Mar 2026 21:00:36 +0000
Manifest next update: Mon 02 Mar 2026 21:00:36 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: oh4q+ZQhy6NtzOAkYE4FFi9Y4OBxUTC/SuX6axwMvPA=)
2: t_3KExq4t288IjtqVXAOQe_Eba8.roa (hash: ChTQhqA/DHUVGryflG/Am/U8Pp4mklmr4RiBocThAjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:fc:1d:11:05:32:54:e2:45:c3:3f:aa:70:46:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Mar 1 21:00:36 2026 GMT
Not After : Mar 2 21:00:36 2026 GMT
Subject: CN=56c8bc7c5c38ed3873fead13a90550cc7134af67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:d4:8c:c9:dd:ef:29:2b:82:60:1d:74:72:
88:ae:83:0a:fd:45:8e:72:76:23:56:7f:24:1b:2b:
a2:9d:bc:f9:9e:cf:f1:e6:10:2d:55:0a:81:cd:8d:
69:23:38:4c:74:1e:fb:e0:e1:14:3c:99:46:22:5e:
45:5e:63:5c:4b:81:23:88:93:e3:42:72:df:ae:f5:
e7:8a:51:6b:83:02:f1:22:6e:df:fc:c9:27:5b:86:
88:35:f1:ff:b2:45:9f:98:51:88:cd:3c:d7:40:b4:
74:ba:2f:4d:ae:16:fc:b2:be:5f:15:e5:93:5c:8b:
08:9b:70:e8:bb:2a:c2:5c:35:90:a6:7c:98:7f:aa:
ea:53:c3:cf:32:ca:42:81:3e:75:2d:5d:a9:73:74:
1c:68:da:95:51:62:d4:d0:43:c9:73:9b:ab:99:5a:
90:d0:89:a0:1c:86:5d:3d:13:9d:7c:38:46:7a:5e:
b6:2f:14:23:67:57:32:74:71:30:68:14:4d:4b:1b:
75:f9:ca:61:32:b0:72:db:28:71:5f:75:23:f8:f2:
df:00:f3:e9:dd:04:a2:88:31:24:94:fa:24:c9:86:
1e:ef:97:87:ed:66:33:1c:59:c1:ee:67:13:0e:34:
6e:71:95:8a:dd:26:78:43:10:60:4a:66:b5:ea:32:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C8:BC:7C:5C:38:ED:38:73:FE:AD:13:A9:05:50:CC:71:34:AF:67
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:67:ca:c2:4a:ac:59:74:8e:d0:ab:4a:37:3c:a6:c9:ea:96:
d2:2c:8a:d9:fa:5b:dc:58:cb:bd:c0:75:32:4d:9c:e2:78:59:
bc:d1:b8:76:08:c2:a1:53:4d:53:3e:99:41:96:1b:22:5b:ac:
54:0b:91:46:e4:ef:bd:c0:7d:d5:4b:7b:e9:a1:fb:75:4a:de:
31:10:90:a2:ea:36:47:3f:99:5b:33:cb:00:00:ef:d8:c0:3d:
59:cf:e5:ed:c1:ae:30:98:f4:f6:41:5e:6a:bf:40:7d:9d:15:
0c:41:30:35:d5:59:83:0f:83:98:fa:8f:1f:c7:cb:9b:ec:af:
ae:a3:d0:12:9c:0c:99:66:68:90:9d:99:8a:8e:1d:7a:2b:f9:
4e:01:a1:81:b4:e3:1b:35:c0:22:79:db:c6:1b:f6:9b:81:09:
d2:d1:22:45:95:09:dd:1b:38:0e:4f:41:4b:36:6d:08:c3:bf:
df:24:1b:c1:2b:ba:88:66:46:54:0a:e8:95:f7:3c:ca:b4:63:
93:ad:d1:89:d1:cf:43:59:9d:4a:3e:69:d1:82:d5:e2:c6:22:
d4:e5:7d:4e:29:f2:67:69:5e:58:e8:55:37:03:a8:47:29:34:
4a:16:8b:0e:a9:b6:90:b8:7c:22:b2:53:75:b5:8c:3b:c8:e5:
02:62:33:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:48 2026 by rpki-client