Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: LUSXlfPjd8YtMPrDCoqucGQFT7ZTpbRXRLdwTb/U6Q0=
Subject key identifier: 14:90:7E:8D:EF:45:46:AE:B0:40:1B:84:4D:31:4E:FC:F1:A5:12:C0
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 01A06EDE8522679A42548D36D8C344AA98D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 163D
Signing time: Sat 05 Sep 2026 00:01:11 +0000
Manifest this update: Sat 05 Sep 2026 00:01:11 +0000
Manifest next update: Sun 06 Sep 2026 00:01:11 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: s4eVZEWHbEwB8h5npc0cyOpMWNfEwqkmXU7YwPMctzY=)
2: t_3KExq4t288IjtqVXAOQe_Eba8.roa (hash: ChTQhqA/DHUVGryflG/Am/U8Pp4mklmr4RiBocThAjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:85:22:67:9a:42:54:8d:36:d8:c3:44:aa:98:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Sep 5 00:01:11 2026 GMT
Not After : Sep 6 00:01:11 2026 GMT
Subject: CN=14907e8def4546aeb0401b844d314efcf1a512c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:03:d5:54:cd:44:be:38:0e:7f:18:f3:64:
fc:d1:05:9b:ff:4a:98:68:bb:76:b6:bb:b7:90:1a:
31:b5:47:48:8f:5a:cf:84:7e:56:09:ce:e4:b5:73:
97:82:cb:64:a6:8b:60:b9:63:5a:6c:5b:43:ab:13:
73:cb:2a:f8:7d:26:b9:8c:47:cb:1d:f0:cb:aa:07:
2b:9c:38:ca:a1:10:c9:35:3b:66:61:bf:ea:a7:92:
4f:db:69:b3:5d:1a:99:1d:48:78:6b:3b:67:45:88:
58:96:8f:76:57:a0:65:15:f1:93:40:2a:70:94:81:
e6:7b:10:5c:01:b2:ed:2b:be:b0:59:8b:f0:5c:e0:
79:81:b5:25:e7:e7:e5:f1:5f:ba:83:d6:55:84:46:
09:07:72:11:96:9c:d2:57:10:79:3a:84:79:ce:cc:
8b:54:bd:e4:57:d9:33:3e:97:a1:7b:d9:ae:7d:64:
49:a3:7f:8c:a1:d6:b8:39:b1:7f:ad:a5:a6:08:6c:
41:6f:3e:a2:66:db:c9:13:27:6d:9d:4f:53:cd:6c:
d2:10:73:64:3a:3b:39:84:8b:6d:21:fa:45:08:da:
8e:38:fb:93:8e:e0:fd:e4:a7:bb:2f:2f:c7:c7:b4:
a9:48:9a:f8:2e:68:01:8f:43:8f:c9:b1:ce:d4:71:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:90:7E:8D:EF:45:46:AE:B0:40:1B:84:4D:31:4E:FC:F1:A5:12:C0
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ac:bf:30:b3:2f:f8:40:b5:43:ba:58:3d:b8:2f:46:11:f9:
4e:bf:b9:56:d3:af:ca:c9:66:bb:6e:30:67:48:2f:3f:e7:49:
cb:35:0c:44:be:27:33:8b:d3:32:be:7d:db:e0:7f:8b:4c:23:
93:29:c9:4e:6d:73:7a:26:bc:86:91:25:e9:8e:48:b0:da:7e:
cc:f0:df:eb:9d:fe:9c:06:50:dd:d2:bc:21:d4:19:32:e5:c1:
77:c1:04:cc:8d:ae:dd:01:43:72:55:33:0b:88:d3:31:df:0e:
81:9a:e4:f3:35:c4:9d:ec:fa:98:f4:4a:b9:e8:17:5f:96:51:
09:91:63:ad:8a:f4:af:7a:3e:db:62:23:78:d4:d7:fb:1a:5f:
08:cf:a1:39:47:6a:15:c6:13:af:61:74:ad:a6:58:70:0f:cf:
e6:a6:2d:47:8f:d5:5f:24:52:7a:9c:4d:85:0b:94:58:25:cf:
2c:a8:08:2d:9e:ce:c7:0e:6d:76:0e:c9:0e:0d:ae:ac:48:5d:
d2:1f:f7:f8:64:5e:00:8f:64:49:af:31:b3:f1:db:ac:71:ac:
f3:b3:99:70:cc:c2:9a:83:8d:91:1a:01:da:e4:56:d8:4e:e9:
98:01:64:e4:32:a0:c2:72:8b:31:c0:4a:3e:55:08:6d:2d:03:
b0:ee:5d:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBu3oUiZ5pCVI022MNEqpjZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDFmMWY4YjQxZDc0ZjdkODY2YjFlNWFkZmQxOGFmZTIw
MjcxMDgwHhcNMjYwOTA1MDAwMTExWhcNMjYwOTA2MDAwMTExWjAzMTEwLwYDVQQD
EygxNDkwN2U4ZGVmNDU0NmFlYjA0MDFiODQ0ZDMxNGVmY2YxYTUxMmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaID1VTNRL44Dn8Y82T80QWb/0qY
aLt2tru3kBoxtUdIj1rPhH5WCc7ktXOXgstkpotguWNabFtDqxNzyyr4fSa5jEfL
HfDLqgcrnDjKoRDJNTtmYb/qp5JP22mzXRqZHUh4aztnRYhYlo92V6BlFfGTQCpw
lIHmexBcAbLtK76wWYvwXOB5gbUl5+fl8V+6g9ZVhEYJB3IRlpzSVxB5OoR5zsyL
VL3kV9kzPpehe9mufWRJo3+Moda4ObF/raWmCGxBbz6iZtvJEydtnU9TzWzSEHNk
Ojs5hIttIfpFCNqOOPuTjuD95Ke7Ly/Hx7SpSJr4LmgBj0OPybHO1HEQswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSQfo3vRUausEAbhE0xTvzxpRLAMB8GA1UdIwQY
MBaAFAjR8fi0HXT32Gax5a39GK/iAnEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yOWMwMTUtZDc0Ny00ZmM3LTkzMmIt
ZGY1Y2I5ZjBlM2E0LzEvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8yOWMwMTUtZDc0Ny00ZmM3LTkzMmItZGY1Y2I5ZjBlM2E0
LzEvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6y/MLMv
+EC1Q7pYPbgvRhH5Tr+5VtOvyslmu24wZ0gvP+dJyzUMRL4nM4vTMr592+B/i0wj
kynJTm1zeia8hpEl6Y5IsNp+zPDf653+nAZQ3dK8IdQZMuXBd8EEzI2u3QFDclUz
C4jTMd8OgZrk8zXEnez6mPRKuegXX5ZRCZFjrYr0r3o+22IjeNTX+xpfCM+hOUdq
FcYTr2F0raZYcA/P5qYtR4/VXyRSepxNhQuUWCXPLKgILZ7Oxw5tdg7JDg2urEhd
0h/3+GReAI9kSa8xs/HbrHGs87OZcMzCmoONkRoB2uRW2E7pmAFk5DKgwnKLMcBK
PlUIbS0DsO5dhQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:56:51 2026 by rpki-client