Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: CMAMZq4+A6k23PQeBWaVpma+VJisghwhdljIw7a4pkI=
Subject key identifier: E2:E4:E6:86:E5:1C:82:B8:6C:5D:BD:57:83:F8:83:5A:04:9D:80:29
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 01A0C5C587C20AB314F4929B7C6E9DA1F0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 0A15
Signing time: Mon 21 Sep 2026 21:00:51 +0000
Manifest this update: Mon 21 Sep 2026 21:00:51 +0000
Manifest next update: Tue 22 Sep 2026 21:00:51 +0000
Files and hashes: 1: _T4q5Hpk4ipyTG7AMNyDdoKOT50.roa (hash: Lr+JB8T/f7L7H1ix+TlIyXnba9tt1bZ6qL8/Kz5nqFg=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: txKNtFg5qNwE1bhvHcsMqe94EXKQqMlixXSM2I3VJ/w=)
3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
4: ji5uq7lgpZme2h5LP4PpoR1KlXg.roa (hash: KpOwi/Y6b4qR3//I1ROSdvQABJ8PA4YdcglI0GCbEGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:87:c2:0a:b3:14:f4:92:9b:7c:6e:9d:a1:f0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Sep 21 21:00:51 2026 GMT
Not After : Sep 22 21:00:51 2026 GMT
Subject: CN=e2e4e686e51c82b86c5dbd5783f8835a049d8029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:1e:b3:94:ae:72:b0:03:a5:b3:22:bd:dd:
8f:c0:ce:e6:55:27:31:b6:de:38:ef:6d:01:c6:f8:
38:ff:f3:dc:a6:f2:01:ee:ad:68:48:35:6b:27:64:
30:9b:60:fa:0d:2d:cf:b4:9b:45:78:17:1b:c4:67:
38:24:26:9a:33:9e:5e:f0:a6:1e:6a:d7:46:17:37:
bb:5e:6f:88:cf:9b:51:19:c3:35:5f:d8:65:47:14:
7e:86:be:a6:06:f2:b9:8d:31:2b:68:94:7f:cf:1d:
8a:b3:2c:9b:bc:c0:3b:91:ab:0b:14:4c:ef:87:71:
d3:a7:43:1f:3d:4d:cb:d9:cc:3e:e1:88:79:94:93:
a4:c4:02:5d:4a:ee:67:b5:ce:6d:36:ce:e3:ac:2d:
40:20:7c:f2:0b:e7:47:bf:ec:da:62:69:b7:9f:13:
9b:24:81:ca:5a:fd:ba:c9:af:9d:85:a4:cc:9b:b0:
5e:a1:00:ec:14:7a:fe:ef:72:82:ff:c0:c4:75:66:
10:b0:36:38:3b:18:05:97:37:3f:81:f0:5a:09:ae:
da:6f:fa:4e:21:7c:eb:ed:bf:ca:24:6f:e0:77:e2:
69:b7:0e:b7:3e:b2:cd:da:af:dd:de:fd:e4:e1:30:
42:78:3f:89:72:af:10:de:13:b2:88:9a:2a:04:4e:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E4:E6:86:E5:1C:82:B8:6C:5D:BD:57:83:F8:83:5A:04:9D:80:29
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4c:13:af:17:b3:0c:60:ae:1d:da:72:fa:ed:09:4f:2d:10:
55:35:10:e6:ac:d8:26:7a:2c:8c:2c:65:01:47:80:83:39:2d:
e1:6b:10:d0:d1:00:70:4e:7b:97:af:90:95:cd:30:e6:03:3e:
f8:38:27:96:f3:bc:91:5a:c4:4e:38:88:36:ae:2b:70:2e:1e:
6c:bf:e0:62:c3:6b:8a:20:06:d6:39:e9:a6:9b:49:5f:b3:3d:
1d:e7:4d:af:8a:96:b4:fe:5a:0e:ab:f9:10:b4:f0:bc:31:2f:
3e:ef:7b:2c:4b:48:63:2b:f2:11:71:69:c7:a8:2e:37:90:9f:
24:04:6e:0c:ca:ed:9e:74:11:c5:c2:f2:a4:0f:85:a6:54:52:
d8:7e:c4:7c:40:a0:69:2b:6f:bc:3f:57:5d:a2:79:bd:13:1a:
db:10:49:05:43:fa:b1:36:0c:f6:ef:4c:29:e5:01:1b:ff:c4:
1a:0f:db:b0:99:4a:64:0d:c2:86:32:f8:e0:d3:ed:7e:f2:d9:
47:95:54:16:a8:a9:6b:c5:79:9e:dd:53:6d:a9:20:62:ce:60:
dc:0e:94:cd:93:03:d3:a8:62:54:45:71:f7:57:bf:18:10:01:
7b:3e:c3:7b:aa:52:dc:f9:88:9d:c1:21:1f:44:ad:4d:c3:38:
85:60:e5:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFxYfCCrMU9JKbfG6dofDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjFkNzUyOGJlNzEzYTRiYTJjYjRkYjVlNThkNjRkODgy
ZWI1NTUwHhcNMjYwOTIxMjEwMDUxWhcNMjYwOTIyMjEwMDUxWjAzMTEwLwYDVQQD
EyhlMmU0ZTY4NmU1MWM4MmI4NmM1ZGJkNTc4M2Y4ODM1YTA0OWQ4MDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc0es5SucrADpbMivd2PwM7mVScx
tt44720Bxvg4//PcpvIB7q1oSDVrJ2Qwm2D6DS3PtJtFeBcbxGc4JCaaM55e8KYe
atdGFze7Xm+Iz5tRGcM1X9hlRxR+hr6mBvK5jTEraJR/zx2KsyybvMA7kasLFEzv
h3HTp0MfPU3L2cw+4Yh5lJOkxAJdSu5ntc5tNs7jrC1AIHzyC+dHv+zaYmm3nxOb
JIHKWv26ya+dhaTMm7BeoQDsFHr+73KC/8DEdWYQsDY4OxgFlzc/gfBaCa7ab/pO
IXzr7b/KJG/gd+Jptw63PrLN2q/d3v3k4TBCeD+Jcq8Q3hOyiJoqBE5puwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLk5oblHIK4bF29V4P4g1oEnYApMB8GA1UdIwQY
MBaAFHAh11KL5xOkuiy0215Y1k2ILrVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAt
OTI4MWYwZDIzZGJmLzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAtOTI4MWYwZDIzZGJm
LzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEwTrxez
DGCuHdpy+u0JTy0QVTUQ5qzYJnosjCxlAUeAgzkt4WsQ0NEAcE57l6+Qlc0w5gM+
+DgnlvO8kVrETjiINq4rcC4ebL/gYsNriiAG1jnppptJX7M9HedNr4qWtP5aDqv5
ELTwvDEvPu97LEtIYyvyEXFpx6guN5CfJARuDMrtnnQRxcLypA+FplRS2H7EfECg
aStvvD9XXaJ5vRMa2xBJBUP6sTYM9u9MKeUBG//EGg/bsJlKZA3ChjL44NPtfvLZ
R5VUFqipa8V5nt1TbakgYs5g3A6UzZMD06hiVEVx91e/GBABez7De6pS3PmIncEh
H0StTcM4hWDl5A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:56:34 2026 by rpki-client