Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: e8qYvsbQ8YF8nODA0U3kZ5qvjR5RHC7uvXYrOPYer0k=
Subject key identifier: 30:A6:66:E8:D4:AB:B8:85:12:8B:B6:BF:98:22:7F:AE:D2:66:AF:94
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019CAAC6E0AF4E7D733E7606D77D8F666971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 07F3
Signing time: Sun 01 Mar 2026 19:01:25 +0000
Manifest this update: Sun 01 Mar 2026 19:01:25 +0000
Manifest next update: Mon 02 Mar 2026 19:01:25 +0000
Files and hashes: 1: LcJySuGogAooQWq-3hWvNHJeetU.roa (hash: dRN2fRRBzV718qeTbblsq2rKV/3Uopvdasw9bsddc/8=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: KwGpoRz4clVi0haB7AOtoaRI63zJoirSVutS43JQCmA=)
3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
4: mFP33uF3PX5de0GTrDSXj3VjZpI.roa (hash: CFmZK9ey8xSTrafeBY50GdfpXWi1FvgYxRAo4AhgjPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e0:af:4e:7d:73:3e:76:06:d7:7d:8f:66:69:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Mar 1 19:01:25 2026 GMT
Not After : Mar 2 19:01:25 2026 GMT
Subject: CN=30a666e8d4abb885128bb6bf98227faed266af94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:91:bd:dc:6b:cf:c9:86:29:05:22:24:d4:
57:91:42:35:bd:9c:77:e3:a4:a0:86:e6:b7:e7:0a:
0b:2b:af:d3:c0:0b:b1:8f:02:9c:bd:8c:fc:00:25:
b3:81:54:4d:23:ba:31:65:61:ae:2c:9a:8c:45:da:
be:db:8e:0f:c8:a7:1d:0b:96:57:e6:c7:80:90:67:
0c:73:a6:4a:ef:9c:c1:72:76:09:8d:92:42:10:43:
46:da:ed:eb:fb:93:94:05:3e:31:42:6b:7e:1b:fe:
fe:01:5a:bd:1b:9b:b0:61:63:17:f8:fc:23:59:39:
2a:63:f0:a8:12:2a:91:c3:ad:34:3e:39:93:04:e3:
c6:be:a0:a4:dd:3e:d1:d8:80:d7:01:88:b8:37:c0:
a1:f6:9b:99:df:61:89:13:ce:4f:75:45:95:32:56:
f9:24:13:a6:bd:96:0f:8b:32:88:2d:05:02:e4:19:
79:84:4f:56:b6:b6:83:d9:02:25:ab:90:e1:2a:5a:
57:99:d4:e6:8a:c2:5d:4f:da:fc:9e:2e:21:a1:d5:
e4:22:57:ed:6f:b4:86:85:d9:12:60:b5:f4:4d:c1:
be:e3:5a:25:b2:6f:97:6a:94:1b:1a:f7:68:91:32:
ba:d9:38:c3:0e:c5:3c:a5:e1:df:31:57:8c:c1:73:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A6:66:E8:D4:AB:B8:85:12:8B:B6:BF:98:22:7F:AE:D2:66:AF:94
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ed:da:6b:c4:23:64:18:83:72:54:61:e5:03:eb:dd:1a:c9:
fc:aa:ee:31:f0:25:cb:e8:fa:f1:db:d8:4c:1d:52:70:82:4c:
47:5c:44:58:a8:0a:5b:7b:f4:0b:1e:8e:b5:2f:42:44:b9:1b:
21:6c:40:5f:68:25:bc:07:3f:62:12:d2:b2:d9:7c:0d:02:71:
5e:0a:5e:20:69:cf:93:02:33:1e:67:30:db:5f:a7:cf:b8:d2:
f9:d4:cf:20:9c:77:aa:5c:56:a2:0b:e1:a4:ec:d6:49:c6:97:
9f:a9:e1:41:c0:dc:d5:ee:fc:45:8b:0b:d2:a8:b6:e7:9a:a5:
0f:83:6d:f6:a5:fd:24:e5:9f:a4:17:7b:d3:d0:22:49:c8:af:
73:8a:58:46:7b:c3:66:3b:87:9a:ad:62:01:8f:d3:bf:68:f9:
33:d1:c2:50:e1:7c:a0:e5:17:cd:a0:9e:c0:d6:22:c3:1b:3c:
36:5d:4e:72:0e:80:38:df:fd:37:7f:3f:5a:cb:bd:0e:87:1a:
9b:93:0b:5a:85:b0:a4:8b:11:1b:5e:a0:d8:f9:53:c0:92:69:
a3:87:ec:39:34:bd:53:2d:6e:2d:d5:cc:53:3d:e4:df:51:48:
2c:a0:73:5e:f2:f5:b7:91:1c:6f:3a:38:0f:f4:72:5d:3d:9a:
d1:9e:2c:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxuCvTn1zPnYG132PZmlxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjFkNzUyOGJlNzEzYTRiYTJjYjRkYjVlNThkNjRkODgy
ZWI1NTUwHhcNMjYwMzAxMTkwMTI1WhcNMjYwMzAyMTkwMTI1WjAzMTEwLwYDVQQD
EygzMGE2NjZlOGQ0YWJiODg1MTI4YmI2YmY5ODIyN2ZhZWQyNjZhZjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAuRvdxrz8mGKQUiJNRXkUI1vZx3
46Sghua35woLK6/TwAuxjwKcvYz8ACWzgVRNI7oxZWGuLJqMRdq+244PyKcdC5ZX
5seAkGcMc6ZK75zBcnYJjZJCEENG2u3r+5OUBT4xQmt+G/7+AVq9G5uwYWMX+Pwj
WTkqY/CoEiqRw600PjmTBOPGvqCk3T7R2IDXAYi4N8Ch9puZ32GJE85PdUWVMlb5
JBOmvZYPizKILQUC5Bl5hE9WtraD2QIlq5DhKlpXmdTmisJdT9r8ni4hodXkIlft
b7SGhdkSYLX0TcG+41olsm+XapQbGvdokTK62TjDDsU8peHfMVeMwXMvRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCmZujUq7iFEou2v5gif67SZq+UMB8GA1UdIwQY
MBaAFHAh11KL5xOkuiy0215Y1k2ILrVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAt
OTI4MWYwZDIzZGJmLzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAtOTI4MWYwZDIzZGJm
LzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+3aa8Qj
ZBiDclRh5QPr3RrJ/KruMfAly+j68dvYTB1ScIJMR1xEWKgKW3v0Cx6OtS9CRLkb
IWxAX2glvAc/YhLSstl8DQJxXgpeIGnPkwIzHmcw21+nz7jS+dTPIJx3qlxWogvh
pOzWScaXn6nhQcDc1e78RYsL0qi255qlD4Nt9qX9JOWfpBd709AiScivc4pYRnvD
ZjuHmq1iAY/Tv2j5M9HCUOF8oOUXzaCewNYiwxs8Nl1Ocg6AON/9N38/Wsu9Doca
m5MLWoWwpIsRG16g2PlTwJJpo4fsOTS9Uy1uLdXMUz3k31FILKBzXvL1t5Ecbzo4
D/RyXT2a0Z4sVg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:14 2026 by rpki-client