Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: mi/kypkFBfURturhPcrSe6OOXw54QbC5MUV7kYy+cOg=
Subject key identifier: DD:F4:33:44:40:99:CA:A4:A2:F2:41:2B:09:60:AE:2F:D7:AC:9D:FD
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 01A06EDE7A73007BD4BABF6D1402551F92F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 09E8
Signing time: Sat 05 Sep 2026 00:01:09 +0000
Manifest this update: Sat 05 Sep 2026 00:01:09 +0000
Manifest next update: Sun 06 Sep 2026 00:01:09 +0000
Files and hashes: 1: _T4q5Hpk4ipyTG7AMNyDdoKOT50.roa (hash: Lr+JB8T/f7L7H1ix+TlIyXnba9tt1bZ6qL8/Kz5nqFg=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: 59U9FYixLNP2QeV/+ZsXbS/J+aJ1JulwajzbCKl6Yzg=)
3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
4: ji5uq7lgpZme2h5LP4PpoR1KlXg.roa (hash: KpOwi/Y6b4qR3//I1ROSdvQABJ8PA4YdcglI0GCbEGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:7a:73:00:7b:d4:ba:bf:6d:14:02:55:1f:92:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Sep 5 00:01:09 2026 GMT
Not After : Sep 6 00:01:09 2026 GMT
Subject: CN=ddf433444099caa4a2f2412b0960ae2fd7ac9dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:f9:3a:49:ad:8a:49:aa:a9:e1:42:47:28:
e9:60:f1:e2:e0:ac:a3:3b:21:3a:96:54:33:d9:29:
46:b4:10:af:79:cc:ee:b2:12:61:cb:be:57:59:da:
74:de:fc:c9:cc:49:88:8a:71:24:04:35:61:2c:83:
07:f9:ad:53:b3:e0:cc:07:49:14:7f:46:cd:06:f0:
a1:97:0b:e1:51:b9:68:2b:03:97:77:c7:7c:bf:ca:
e1:fe:9e:ac:3b:ce:6a:b9:f5:64:37:f6:70:09:72:
e9:99:db:06:fa:22:49:42:39:67:86:a9:b9:0b:7a:
a4:01:60:10:14:72:ba:19:eb:c9:f0:93:8a:ab:89:
7a:dd:0a:b0:80:00:c8:25:bd:16:f4:1b:46:0e:2a:
6c:34:27:c8:ad:ec:95:33:3b:57:e4:e0:1d:ec:71:
a3:5f:a8:4b:39:22:1f:ea:00:0e:95:d2:3d:36:e0:
99:48:fd:8b:12:41:4c:53:06:22:4a:3c:32:4b:ad:
f6:89:54:0f:59:ac:71:27:86:95:48:82:16:9e:d3:
56:a8:9a:d4:79:26:10:65:51:6c:92:d0:a4:bd:9e:
fa:b1:f4:92:f2:47:3b:eb:86:0b:c8:f9:fc:8b:dc:
61:9f:1f:50:c9:ac:c5:89:fd:d6:61:b6:ad:0f:a8:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F4:33:44:40:99:CA:A4:A2:F2:41:2B:09:60:AE:2F:D7:AC:9D:FD
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:09:cb:81:c8:19:b0:d4:3b:b5:14:73:6a:d9:db:25:6e:99:
d8:e1:07:99:dc:fa:d6:08:0f:27:42:1c:82:78:af:c2:e1:97:
14:79:45:ce:df:1d:93:29:37:fb:f9:e4:73:fa:51:60:a4:fa:
2c:d0:86:93:72:20:48:24:15:e4:7d:8b:22:d2:40:ea:f8:44:
fb:f2:3f:41:5e:cd:35:7d:f1:c8:1c:fc:e6:84:64:ed:59:63:
94:78:f4:40:15:48:c9:a6:84:22:9c:68:d1:5b:9f:cc:6c:e7:
55:ae:61:ad:0d:db:09:3b:07:47:a7:95:0c:e3:3b:58:21:57:
92:d6:e5:68:e8:05:cd:02:98:35:7a:f7:d2:6f:a7:43:d1:6b:
0d:05:f6:f4:62:9f:35:9b:60:99:bb:85:8b:35:c8:55:64:f0:
a3:9b:e1:27:8e:06:6c:a2:2b:b0:ab:ea:48:62:81:ca:49:38:
9a:a2:26:42:96:7a:23:12:2b:84:30:15:da:28:e8:17:37:22:
f7:0c:ce:a3:6c:ce:e2:cc:2a:c0:ff:50:99:5e:89:d7:14:96:
55:4a:bd:de:cc:4e:af:1c:85:ce:f4:cf:14:0a:99:40:54:e3:
5f:fc:58:d0:4e:3a:89:cc:6f:b1:21:7f:c9:82:7d:3a:87:f1:
88:dc:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:59:57 2026 by rpki-client