Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: Y8QWU2zeUmbRI/xp1qmc0ebjOemKVbuHrsDX66e/4DQ=
Subject key identifier: 93:A2:16:B4:68:87:45:E6:2A:9D:8C:11:9B:65:64:34:03:D8:19:B3
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 01A17582434E3C1A6CA3DB895A4AB5559FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 0A70
Signing time: Mon 26 Oct 2026 00:00:33 +0000
Manifest this update: Mon 26 Oct 2026 00:00:33 +0000
Manifest next update: Tue 27 Oct 2026 00:00:33 +0000
Files and hashes: 1: _T4q5Hpk4ipyTG7AMNyDdoKOT50.roa (hash: Lr+JB8T/f7L7H1ix+TlIyXnba9tt1bZ6qL8/Kz5nqFg=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: 7Xv4QXnRM21gipUsHE8/1Sb9WrYq7uOin1DeYngU3Ks=)
3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
4: ji5uq7lgpZme2h5LP4PpoR1KlXg.roa (hash: KpOwi/Y6b4qR3//I1ROSdvQABJ8PA4YdcglI0GCbEGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:43:4e:3c:1a:6c:a3:db:89:5a:4a:b5:55:9f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Oct 26 00:00:33 2026 GMT
Not After : Oct 27 00:00:33 2026 GMT
Subject: CN=93a216b4688745e62a9d8c119b65643403d819b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:93:ae:6c:64:3a:83:4e:62:aa:14:8e:00:
60:81:9f:7c:64:65:60:ca:6f:ec:38:5d:32:c5:80:
4a:c8:35:e9:43:67:bd:9b:9b:81:23:42:66:9b:e8:
c8:26:dd:91:01:0e:38:92:e0:15:27:1c:b9:9e:b4:
18:5c:48:1e:a3:39:5d:ac:f0:13:07:d8:cb:eb:65:
24:e9:d5:60:f5:e5:4a:27:eb:07:f4:5a:17:65:12:
cf:04:86:03:66:b7:f3:ac:87:37:67:ee:db:26:2e:
a3:23:82:ef:6b:93:e3:a9:07:35:a6:f0:5f:9d:57:
57:74:43:ae:ee:e5:eb:4b:d1:53:18:71:28:94:e6:
94:c1:44:f9:ce:9b:9d:60:b1:64:c0:65:ac:02:32:
ea:74:e9:17:30:ad:8e:ba:e9:1f:0e:0d:4c:fa:88:
d7:c5:09:2a:f2:05:c6:01:05:c7:9c:f5:eb:22:1c:
44:54:cf:ba:c1:1b:65:a8:fe:33:0c:3b:28:f8:ac:
42:e8:68:9b:0b:2b:42:80:52:90:32:21:82:2d:ce:
ab:fc:2d:e7:4d:5b:9c:b4:10:ec:96:51:08:76:82:
f8:88:d9:0a:55:4f:70:aa:14:55:11:ce:db:c2:b8:
97:b7:64:3d:f2:e3:1c:c9:38:1b:ad:fb:d2:55:d9:
ce:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A2:16:B4:68:87:45:E6:2A:9D:8C:11:9B:65:64:34:03:D8:19:B3
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:27:02:a8:77:08:bc:d8:9a:e4:81:17:d4:8b:1d:d8:a3:54:
44:fe:26:a5:0a:5a:32:76:e3:45:dd:df:96:55:1f:82:ca:c4:
22:c5:10:9f:2a:03:38:9d:4e:c8:fb:db:9d:da:37:fc:df:88:
4c:39:ab:01:13:33:bd:87:9e:ea:ba:da:df:ff:27:16:71:b0:
c1:9f:c4:2e:b5:cc:96:c5:8f:78:bf:70:44:4e:7f:44:43:a1:
96:95:40:8a:d5:59:fa:cc:1d:26:4f:d0:0b:0c:a5:f1:4b:84:
c2:01:f4:48:28:4a:69:67:a8:e2:3c:1d:e8:a9:7c:cf:a0:8f:
68:61:0f:c9:98:fd:af:f9:30:c4:94:0e:86:32:63:16:2f:d7:
46:07:2e:6b:2e:f5:82:d4:6f:ae:0b:94:cc:9b:da:92:9a:7e:
07:b2:9c:71:6e:6c:2a:52:fa:be:50:de:48:5d:bc:27:f2:eb:
76:79:c9:fc:9a:96:13:0a:3b:52:d2:24:80:f3:d8:c1:91:18:
e3:66:b0:70:51:40:23:f9:d4:54:e6:23:60:22:b4:a8:a7:5b:
88:15:09:d0:cf:d0:1f:0e:ad:f2:0b:71:06:70:c9:65:78:ef:
4d:0f:74:4e:ba:bc:f2:45:38:1f:f1:4b:64:7b:dc:75:99:c6:
d3:38:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:12:34 2026 by rpki-client