Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: K0uAcJvCubkPkU8IFhJYoeS/KgK7W0xdGJwk8wPoOz8=
Subject key identifier: 4B:56:5F:63:23:5C:A9:F7:40:C7:91:D3:10:17:30:BF:19:D3:89:DC
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019EBFFFA6B3D13E489C998915CFB5BAA0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 0908
Signing time: Sat 13 Jun 2026 08:01:02 +0000
Manifest this update: Sat 13 Jun 2026 08:01:02 +0000
Manifest next update: Sun 14 Jun 2026 08:01:02 +0000
Files and hashes: 1: KoHLJNQuOcHspjZQJtsgwfHF3m4.roa (hash: Pm229i2zgzIKXvQ6Hz77HG6vbpEhWAQEJXW3BVSV54E=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: WQcqS4bbHye7MILuCtvY0Rl0rQnnKh8VdFNbvyu0cL0=)
3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:a6:b3:d1:3e:48:9c:99:89:15:cf:b5:ba:a0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Jun 13 08:01:02 2026 GMT
Not After : Jun 14 08:01:02 2026 GMT
Subject: CN=4b565f63235ca9f740c791d3101730bf19d389dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:8e:fe:08:1e:ec:c5:cc:6e:ec:ab:01:0e:
1d:c2:9a:07:0f:77:9c:f1:23:cd:cc:74:9b:61:bc:
e2:22:d9:29:da:44:34:4e:5d:0a:4d:11:3e:9e:29:
a4:c0:cb:64:5b:31:3f:3d:ab:15:ee:ea:99:45:cd:
7e:53:77:9d:ec:94:e1:c3:37:bb:74:f4:f5:3a:e6:
9a:6d:f0:ce:23:e0:c2:d4:fb:cd:47:f0:0b:f6:57:
6a:46:ec:72:c2:43:66:95:c9:0c:d8:84:48:3d:53:
6d:6c:65:cc:93:23:04:ce:61:49:be:a9:95:40:1a:
c9:5a:89:d2:1c:f9:80:3a:ec:6a:34:26:cd:7b:53:
c9:c3:83:fc:89:f3:93:39:6f:b8:68:de:ab:d0:96:
9a:08:34:1a:ba:59:2e:a3:4e:1d:02:05:63:27:78:
a5:76:47:1d:35:df:36:90:75:31:22:9a:e4:9b:2f:
1b:d6:9a:5a:e7:d1:af:c6:1c:44:7c:40:ec:f4:36:
12:10:e8:03:11:e0:ae:9d:37:ca:44:8d:73:7d:29:
e7:e2:3c:f3:f9:85:6e:dd:99:2d:4c:31:3c:7a:47:
2d:fc:84:2f:85:e5:be:f0:cf:b1:f5:45:d6:3a:93:
d3:2f:57:56:4d:d0:51:60:b3:52:8f:14:42:0b:66:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:56:5F:63:23:5C:A9:F7:40:C7:91:D3:10:17:30:BF:19:D3:89:DC
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4b:c1:c8:ee:97:cb:e8:a9:d2:cc:cf:ec:de:9e:bf:07:f4:
5b:5d:69:15:00:e4:75:ef:09:bf:aa:3b:84:4a:95:0b:c0:96:
b7:9e:8d:72:7c:09:8c:71:6c:66:a3:34:e5:9f:ef:61:0c:91:
4e:cf:cb:7e:d8:34:99:d4:62:1f:de:08:f5:79:f0:bd:33:07:
39:73:07:58:8d:3e:d4:a5:ad:4b:13:ec:a1:81:61:1e:43:bf:
dc:19:0a:8a:68:a1:ce:78:35:cb:49:92:13:86:07:dc:6f:c8:
2d:3c:66:40:51:79:a5:43:7a:69:f2:b9:c7:3a:8a:43:cb:0c:
fc:a2:69:ce:d2:d4:9c:56:7e:65:be:a3:e9:8c:c7:79:fa:81:
20:d3:20:7d:d9:7b:84:ce:df:da:76:f2:b6:99:85:1a:a6:7f:
62:ac:13:c1:ce:f3:f9:ca:6b:d4:81:b2:79:c1:42:a8:d0:9c:
67:96:6f:5d:7e:62:2c:f7:6d:df:d6:9e:95:55:a1:16:0e:57:
7f:e3:6a:3b:0c:95:e6:b6:52:21:9f:00:5a:37:df:8a:2a:0e:
b1:1b:d7:cd:41:46:eb:22:1c:f3:43:d9:d4:6e:0e:87:c4:e6:
80:a3:04:f9:2b:82:09:6e:69:bd:e0:5f:6a:86:83:79:f2:28:
38:6d:07:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:30 2026 by rpki-client