Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: B7zKXEexyEXC9fQpId+C74yB0/aFfV8sjHNe62UFbaQ=
Subject key identifier: 74:23:B5:D4:45:26:1E:24:81:F4:DF:D8:3C:AE:54:19:E5:9F:7F:A7
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 01A13E25F5E085D4858A01A1E9122EAB4D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 06:00:37 +0000
Manifest this update: Thu 15 Oct 2026 06:00:37 +0000
Manifest next update: Fri 16 Oct 2026 06:00:37 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: 1+JitB+7mylzGk3z9e5ek49gaOz4SPC4spIlSJCm3/c=)
2: KYwuzPdQcxFtvMJ482Z-no0-rlI.roa (hash: WFv3oIQNO2UW+gImEV96V10XtC3ybgEz6IBrXZKDplc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:f5:e0:85:d4:85:8a:01:a1:e9:12:2e:ab:4d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: Oct 15 06:00:37 2026 GMT
Not After : Oct 16 06:00:37 2026 GMT
Subject: CN=7423b5d445261e2481f4dfd83cae5419e59f7fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:73:5b:bb:44:f7:6d:42:87:13:df:9d:45:
09:3e:af:b9:7d:2d:ba:bc:10:49:d8:f6:52:3a:e5:
75:44:0b:d5:22:ce:d1:ba:43:f8:57:e2:b1:4d:64:
05:38:60:ff:fe:d1:a0:e1:a7:35:56:97:5b:34:bc:
d6:62:71:1f:85:cc:c7:b8:a6:00:19:e7:a6:d6:97:
f0:de:79:7f:0d:1b:50:3e:77:98:3a:22:fa:17:65:
9b:b0:b0:88:fe:3b:7f:ba:be:92:a4:27:60:f7:a7:
4e:ee:5a:32:96:56:35:87:5c:7e:10:a9:3c:90:c1:
c8:f3:1b:51:06:d3:fc:a7:9e:96:6f:37:c2:e6:81:
b6:7f:12:ec:70:81:28:aa:9e:3a:c8:86:00:ca:93:
d5:cd:8b:93:33:0c:58:da:7f:46:ee:cd:4d:e1:3e:
d3:bc:fd:8e:90:b4:fb:97:7c:32:dd:4c:81:97:e3:
6d:1e:61:82:3e:ea:a9:67:9a:7e:0d:12:59:52:7f:
6b:0e:28:92:a1:9e:43:a5:3e:d4:b8:6d:a5:10:0b:
29:d7:98:d6:06:fd:d4:c6:c5:29:d7:49:65:20:94:
0e:4b:db:13:62:c0:13:ae:59:ff:7d:20:43:30:af:
a6:2f:f0:39:7c:9c:77:93:f4:0d:d3:9a:ee:11:62:
eb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:23:B5:D4:45:26:1E:24:81:F4:DF:D8:3C:AE:54:19:E5:9F:7F:A7
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:62:95:e7:d1:cd:06:b5:e2:bf:ea:ed:d6:5d:3f:60:48:0e:
57:47:47:83:93:70:2f:e9:41:1c:52:88:ef:34:93:a1:a4:a2:
02:aa:1c:60:97:c7:a4:b2:62:4a:04:4a:55:36:c3:e3:33:48:
9b:07:f6:2c:f0:1b:e5:33:64:68:53:e4:6c:b2:5c:33:4c:7e:
8d:29:76:3b:61:3d:f0:ed:3f:64:ae:df:c2:21:24:e7:2f:8e:
b5:a8:0e:aa:55:a9:f4:b3:c2:03:ad:fd:77:ff:24:28:37:56:
97:65:a5:ba:e5:a1:6a:32:6a:b1:7b:f6:4f:3d:0e:15:0c:2d:
d1:f2:27:e0:c3:d9:18:e2:4a:51:22:6a:67:ec:ba:49:d3:fa:
49:99:36:46:5f:ed:be:d9:e5:6b:17:e3:41:5e:6b:42:56:27:
33:0a:b5:88:94:47:29:12:54:1d:97:ee:90:27:6a:27:09:de:
cd:0b:84:c6:91:7e:b6:5e:f5:1e:5f:c9:cd:f5:4c:8a:5d:cf:
e2:ff:7d:fe:f3:4a:f8:ac:bd:b4:71:1f:c0:c9:9a:d1:d5:ea:
b7:18:0a:18:f5:f1:ef:b6:8c:b0:74:3d:fc:65:75:98:cd:c7:
01:9b:9d:41:4f:ad:66:f1:34:03:fd:8c:d2:64:80:23:50:ad:
1b:e6:93:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JfXghdSFigGh6RIuq02SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Mjg1NDczYzk3OGNhNTFjZTU0NjlhYTRhZWRjYTE2NDQ1
YmQ2NTIwHhcNMjYxMDE1MDYwMDM3WhcNMjYxMDE2MDYwMDM3WjAzMTEwLwYDVQQD
Eyg3NDIzYjVkNDQ1MjYxZTI0ODFmNGRmZDgzY2FlNTQxOWU1OWY3ZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0odzW7tE921ChxPfnUUJPq+5fS26
vBBJ2PZSOuV1RAvVIs7RukP4V+KxTWQFOGD//tGg4ac1VpdbNLzWYnEfhczHuKYA
Geem1pfw3nl/DRtQPneYOiL6F2WbsLCI/jt/ur6SpCdg96dO7loyllY1h1x+EKk8
kMHI8xtRBtP8p56WbzfC5oG2fxLscIEoqp46yIYAypPVzYuTMwxY2n9G7s1N4T7T
vP2OkLT7l3wy3UyBl+NtHmGCPuqpZ5p+DRJZUn9rDiiSoZ5DpT7UuG2lEAsp15jW
Bv3UxsUp10llIJQOS9sTYsATrln/fSBDMK+mL/A5fJx3k/QN05ruEWLraQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQjtdRFJh4kgfTf2DyuVBnln3+nMB8GA1UdIwQY
MBaAFAgoVHPJeMpRzlRpqkrtyhZEW9ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4Zjgt
OGUzMDBlZmQxM2JjLzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4ZjgtOGUzMDBlZmQxM2Jj
LzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGKV59HN
BrXiv+rt1l0/YEgOV0dHg5NwL+lBHFKI7zSToaSiAqocYJfHpLJiSgRKVTbD4zNI
mwf2LPAb5TNkaFPkbLJcM0x+jSl2O2E98O0/ZK7fwiEk5y+OtagOqlWp9LPCA639
d/8kKDdWl2WluuWhajJqsXv2Tz0OFQwt0fIn4MPZGOJKUSJqZ+y6SdP6SZk2Rl/t
vtnlaxfjQV5rQlYnMwq1iJRHKRJUHZfukCdqJwnezQuExpF+tl71Hl/JzfVMil3P
4v99/vNK+Ky9tHEfwMma0dXqtxgKGPXx77aMsHQ9/GV1mM3HAZudQU+tZvE0A/2M
0mSAI1CtG+aTjQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:55 2026 by rpki-client