Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
File: cHl9sHv21Fl6wtyL40-JKYAI8s0.mft (raw, json)
Hash identifier: NVPj/E77IAUOGvzRj/6ZG63sLGMCUtUAnwsKqD8IMx4=
Subject key identifier: B9:0F:9A:14:9A:98:9C:82:E6:B9:67:89:CC:E9:46:87:64:B7:3E:F4
Authority key identifier: 70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD
Certificate issuer: /CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
Certificate serial: 01A11D1A36F992DC23969C799F4CDCFBB22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
Manifest number: 1A99
Signing time: Thu 08 Oct 2026 20:00:19 +0000
Manifest this update: Thu 08 Oct 2026 20:00:19 +0000
Manifest next update: Fri 09 Oct 2026 20:00:19 +0000
Files and hashes: 1: cAt58g0xkrFHt9-N3ZykhWH0ReM.roa (hash: zJIgtJYw+ptpKpZht1FAofTALod8Sw1aXf2YLrLjs1s=)
2: cHl9sHv21Fl6wtyL40-JKYAI8s0.crl (hash: jhIfRky+1yGYYBCJ+17Xh1VPAeF/jifc1uB1w14hLtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:1a:36:f9:92:dc:23:96:9c:79:9f:4c:dc:fb:b2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
Validity
Not Before: Oct 8 20:00:19 2026 GMT
Not After : Oct 9 20:00:19 2026 GMT
Subject: CN=b90f9a149a989c82e6b96789cce9468764b73ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:0b:5e:b2:41:f6:0e:9a:5c:0a:90:ba:38:
d7:18:b2:c3:af:f6:66:48:f2:72:93:a8:06:82:09:
79:c7:3d:6a:b5:b8:7e:75:41:e4:4d:9f:17:a1:6e:
1a:42:f6:bb:70:b9:a4:9f:97:ab:07:a9:82:3c:fc:
52:92:c0:c5:81:2a:23:f8:bd:cb:31:1e:5d:62:84:
ea:2a:16:1b:af:8a:97:0e:ec:7c:76:a7:1b:e9:db:
75:2b:88:3e:aa:e5:d5:c5:4f:76:55:8e:37:2e:97:
03:57:14:b2:8b:4f:ea:ec:b5:07:45:32:47:b1:1f:
30:17:24:32:5e:da:d7:cb:91:71:01:03:57:32:c2:
30:de:5e:30:93:2e:55:2f:a5:b4:ea:91:8e:bb:2b:
08:64:ed:5c:37:a1:4a:bb:08:7c:07:dc:53:f3:30:
75:fa:d1:43:ce:ea:35:1f:2b:e5:6c:c2:aa:1c:41:
bf:e0:42:47:04:d5:bf:19:dd:fd:a8:04:2a:c5:22:
c4:04:4f:5e:52:9a:0e:35:26:bf:76:1e:fc:7c:16:
17:00:29:0d:57:44:93:77:6c:d7:2b:de:a1:1e:96:
b7:c4:f9:ae:12:d8:71:9b:5d:78:82:3f:ff:99:4a:
08:6a:7f:ca:ab:22:fd:fa:bd:b9:6f:c9:b7:e2:4a:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:9A:14:9A:98:9C:82:E6:B9:67:89:CC:E9:46:87:64:B7:3E:F4
X509v3 Authority Key Identifier:
keyid:70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e0:dd:2e:16:f4:e2:b6:14:9a:f9:e1:43:a8:59:00:ab:c6:
57:8f:a2:79:8b:68:b6:f9:e4:dd:6c:09:6a:53:f1:03:a1:06:
c2:2e:ce:95:cf:c4:62:48:7d:f6:93:44:61:96:e4:e6:b7:f9:
15:75:ec:74:c2:e3:b4:c4:86:0d:f2:8a:4a:61:9e:6d:7e:75:
26:65:88:d4:bf:c8:31:66:54:bc:d2:ae:ba:46:02:5e:ef:7b:
d5:3e:e8:a6:26:e1:57:30:e8:58:d1:3a:0e:90:c0:0f:53:57:
36:fb:fe:75:f7:96:36:37:e4:25:65:a8:05:51:ff:38:6c:35:
11:82:d2:e6:9a:8c:17:86:94:30:f8:0a:8f:37:8a:94:dc:a3:
1c:dd:0a:dd:c0:c1:35:54:cc:1f:69:48:bb:47:d8:09:71:2d:
67:1d:ce:26:7b:8b:7a:aa:11:a4:12:61:8c:7b:5a:1b:0e:8b:
cd:35:48:31:00:86:ea:01:80:8d:62:09:3d:d7:27:b9:a7:00:
fa:ff:d8:4c:78:25:58:64:8e:6b:7d:89:35:74:0c:c9:70:85:
f0:b5:db:cb:17:a5:0f:90:3f:d8:20:5f:69:c5:69:28:62:bc:
73:9c:bc:94:ef:1e:b1:9c:7d:29:0a:e7:75:ba:ef:e9:46:20:
a5:c6:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:26:18 2026 by rpki-client