Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: G51mtja6dp03+taQtZfmeUDrFPYHoaHFptnclq32gjQ=
Subject key identifier: 80:34:00:9A:30:BB:D7:36:13:D6:4C:BA:CB:F2:90:78:37:AF:DA:60
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019CC9AD3B310BBE8BA03F7E9EBE1BD81145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 0803
Signing time: Sat 07 Mar 2026 19:01:39 +0000
Manifest this update: Sat 07 Mar 2026 19:01:39 +0000
Manifest next update: Sun 08 Mar 2026 19:01:39 +0000
Files and hashes: 1: LcJySuGogAooQWq-3hWvNHJeetU.roa (hash: dRN2fRRBzV718qeTbblsq2rKV/3Uopvdasw9bsddc/8=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: AXkJoAyfp8MIHbQYSfv0zLFYg7gNPHuXpq7vvNdZHkI=)
3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
4: mFP33uF3PX5de0GTrDSXj3VjZpI.roa (hash: CFmZK9ey8xSTrafeBY50GdfpXWi1FvgYxRAo4AhgjPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ad:3b:31:0b:be:8b:a0:3f:7e:9e:be:1b:d8:11:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Mar 7 19:01:39 2026 GMT
Not After : Mar 8 19:01:39 2026 GMT
Subject: CN=8034009a30bbd73613d64cbacbf2907837afda60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:27:78:7d:17:b2:23:9a:5c:21:33:5d:67:3f:
fe:37:ff:32:bd:b2:48:a8:b6:a7:22:fb:2e:32:75:
a9:6c:21:c9:93:9f:40:51:71:fb:e6:37:11:12:04:
05:57:ad:2a:6f:45:82:d8:f4:66:97:28:63:ec:c7:
7c:c6:f2:38:38:26:44:39:cc:e8:4e:7b:f0:72:28:
3e:92:a9:42:31:64:05:cc:70:40:d4:5e:0e:0e:40:
ba:9b:d7:20:f2:49:19:64:76:68:00:e2:90:ef:42:
55:53:f9:d7:b7:f1:a9:9d:bb:58:61:ed:dd:5b:dd:
b3:fc:36:87:ff:60:04:69:a5:86:61:80:14:b6:ec:
f7:4d:9a:b0:87:eb:1f:73:49:8b:17:09:e5:55:6a:
48:35:dc:38:33:35:6d:49:08:1d:f0:86:e2:ac:fb:
d2:a6:20:81:e6:7d:d2:42:d8:e8:34:61:0a:8f:95:
2c:46:ec:dd:d8:c8:4b:b6:7a:d9:96:08:82:6e:be:
e2:96:6f:fe:46:46:63:b6:f0:23:e2:d4:ec:2f:50:
45:ab:0d:87:a8:fa:bc:52:b4:d8:6b:f5:94:1b:33:
c0:bd:45:44:3d:11:90:51:00:76:85:23:19:45:7f:
87:14:fe:e9:1b:f8:87:55:0c:5c:95:21:12:54:9a:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:34:00:9A:30:BB:D7:36:13:D6:4C:BA:CB:F2:90:78:37:AF:DA:60
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f3:fb:c1:3b:d3:54:74:0b:f8:05:8c:93:39:a2:51:a0:21:
e3:a1:32:4a:d0:fe:27:f6:50:01:24:73:8f:60:3e:f9:31:9e:
b7:eb:d3:c8:a3:57:26:80:54:45:99:63:88:3c:17:ab:ee:94:
91:ec:9d:62:95:28:95:c9:96:f2:54:b5:3b:33:ea:8f:61:5a:
7c:93:e8:a9:f9:66:41:ea:be:da:05:59:b9:9b:26:0a:98:45:
94:e0:bb:46:30:17:69:5b:ab:75:ea:7b:05:b8:09:ba:11:1a:
14:69:a6:eb:92:b6:cc:32:5b:19:5a:1c:29:e9:66:94:fb:e9:
4f:29:d2:d5:74:56:f2:23:19:ab:65:b7:a8:e0:b9:88:81:35:
b6:98:73:45:7f:14:59:c9:29:67:79:43:b4:39:29:d0:7b:2f:
d5:cb:f8:43:14:60:57:a4:77:6f:e0:99:42:17:7f:b8:93:8c:
87:53:67:d9:22:43:7d:f6:3e:f4:aa:00:4c:89:63:e6:be:4e:
6f:f9:20:25:0d:fd:1b:21:93:81:1d:f9:44:4f:be:27:fa:e1:
11:e0:de:85:9a:53:94:af:d2:7a:8a:2c:06:92:41:88:d3:b6:
d5:80:53:3d:a8:f2:ef:0b:e3:d5:3f:e3:16:57:76:2f:f5:6d:
3a:3b:a5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:31:20 2026 by rpki-client