Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: 2bpS5wmRs4ynl2kKQ54IqrcHpzjcGeUxgLOk+mXFGEw=
Subject key identifier: 7F:9B:29:ED:71:70:E3:58:B4:4D:9C:48:89:24:24:78:94:A0:C2:EC
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 01A1830751DE76A35F1EB0D0383FB84DCE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 16CC
Signing time: Wed 28 Oct 2026 15:00:57 +0000
Manifest this update: Wed 28 Oct 2026 15:00:57 +0000
Manifest next update: Thu 29 Oct 2026 15:00:57 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: A8Tw4r3Lzm+69Di5DbE6yaWdn6mYwlEHZr2LCDwf0yA=)
2: t_3KExq4t288IjtqVXAOQe_Eba8.roa (hash: ChTQhqA/DHUVGryflG/Am/U8Pp4mklmr4RiBocThAjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:51:de:76:a3:5f:1e:b0:d0:38:3f:b8:4d:ce:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Oct 28 15:00:57 2026 GMT
Not After : Oct 29 15:00:57 2026 GMT
Subject: CN=7f9b29ed7170e358b44d9c488924247894a0c2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:14:b6:f7:47:90:6f:ee:d4:aa:b2:34:63:
ab:ba:fb:18:c1:9f:36:f0:7c:94:b9:a0:93:ca:da:
1c:59:d1:0a:82:fc:6d:ed:f3:10:d0:8b:a9:76:ed:
d3:65:9d:72:5e:f4:00:c3:44:f0:7a:04:73:75:00:
3c:b5:65:24:b7:d0:fa:a5:57:c1:b5:00:d9:18:f9:
f2:dc:61:7a:fb:dd:83:a3:30:bf:3e:d9:a7:31:47:
b0:58:33:5b:23:51:ba:32:a6:17:ef:d3:56:26:be:
84:84:e6:22:96:a2:ce:ac:96:d1:1f:b2:66:56:aa:
63:ab:75:3b:7b:f1:35:4c:af:a7:af:c3:e6:9f:9a:
8a:56:f3:7a:73:e0:5b:e1:e3:eb:7b:08:ec:25:30:
1e:8a:49:05:f0:47:92:00:94:09:9d:f6:90:bb:95:
75:4d:43:98:80:2a:6b:3f:69:4e:51:24:40:39:2f:
9c:27:f4:ae:69:22:cd:12:c1:5b:1c:5c:e8:5c:7e:
82:25:f4:d8:47:e5:da:fa:57:c4:1a:ff:8d:1f:9f:
52:d6:85:76:c8:bc:4c:2c:07:0b:e7:1a:ba:c1:f0:
81:c8:28:71:0e:cc:1e:64:70:df:68:1b:bc:ce:d5:
c3:78:d3:78:50:91:21:0f:cf:dd:97:41:ab:19:a1:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9B:29:ED:71:70:E3:58:B4:4D:9C:48:89:24:24:78:94:A0:C2:EC
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c1:f3:fa:05:ab:7f:69:de:1a:a2:93:fc:1f:df:6f:98:fb:
17:1f:8f:bc:ff:fa:69:c2:c5:89:40:3e:9e:5d:59:2d:d1:c8:
55:b4:f7:b5:67:d8:02:e4:67:97:45:a5:52:66:c9:7c:05:9e:
18:19:61:3c:ce:64:0b:0b:63:a9:31:04:f5:d5:23:f9:8f:20:
3d:d9:31:41:05:65:72:3d:37:98:e5:9e:14:a6:ed:10:29:46:
ce:c5:97:3a:7e:43:ed:8e:40:e7:34:cd:19:dc:b6:86:40:dc:
c1:4d:b8:37:b9:f5:11:19:a9:1d:02:b0:55:d9:a3:39:e6:6e:
e6:8b:98:9a:ce:2e:63:e0:4c:ef:06:3c:ba:27:c4:b7:a4:71:
2d:41:3b:f4:c5:a5:06:1f:0c:cb:39:59:2d:56:98:a0:4b:de:
79:bf:a5:a7:be:dc:f5:04:a2:8d:fd:47:5b:13:0e:aa:e6:99:
27:2d:f7:98:72:3e:2e:86:fa:aa:28:74:5d:c2:e7:51:91:d0:
d3:73:e3:d8:aa:79:9f:24:c0:69:7b:96:0d:0b:eb:5d:76:60:
8f:76:96:6c:43:f1:94:df:f4:b3:fc:8a:5a:88:4d:03:5d:28:
fc:61:61:2d:1a:f1:de:a3:56:85:53:13:13:03:4b:ba:79:da:
da:e5:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:48:29 2026 by rpki-client