Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: /4B1w0Xu2C1H0a85VbkKfYiAgHP2qv1XTtTyAxzrmrs=
Subject key identifier: C8:EB:2B:55:EE:E4:78:7F:C4:4A:7B:C3:EF:67:09:07:AF:73:C8:3B
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019E9D3CA36A982380581CCB7FA70342DD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 08F6
Signing time: Sat 06 Jun 2026 14:00:57 +0000
Manifest this update: Sat 06 Jun 2026 14:00:57 +0000
Manifest next update: Sun 07 Jun 2026 14:00:57 +0000
Files and hashes: 1: KoHLJNQuOcHspjZQJtsgwfHF3m4.roa (hash: Pm229i2zgzIKXvQ6Hz77HG6vbpEhWAQEJXW3BVSV54E=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: 81vP4/jw40P/ve+NEfjGENZ/FYgWGpUv1QkVDKH+8HM=)
3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:3c:a3:6a:98:23:80:58:1c:cb:7f:a7:03:42:dd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Jun 6 14:00:57 2026 GMT
Not After : Jun 7 14:00:57 2026 GMT
Subject: CN=c8eb2b55eee4787fc44a7bc3ef670907af73c83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:d3:d8:bb:6c:fe:84:69:64:6f:f4:5d:a6:
17:ea:02:83:76:20:df:b7:7c:2f:19:f3:ca:04:4b:
0c:65:1b:c0:2a:56:6f:ca:7b:e9:3a:ab:c9:c3:16:
af:1b:89:ae:ca:9f:16:ae:b4:36:e7:e2:d2:c0:83:
ae:8f:95:33:5c:53:68:ea:a5:84:31:b3:12:3d:9e:
0d:90:1f:0d:c8:23:90:aa:e6:a1:b0:18:8c:2d:7e:
1f:6c:bb:81:ac:f2:d3:13:23:d3:d7:1b:cf:9e:5b:
8a:d3:18:ee:46:4d:40:01:0f:0f:5c:1d:e1:90:65:
de:fd:8e:eb:04:09:d9:65:70:27:06:31:a5:69:a6:
ea:5f:49:0e:65:ec:76:49:cb:e7:28:23:91:25:e4:
57:cc:77:71:99:1c:b1:24:16:83:3a:11:f9:22:4d:
2b:82:9b:26:cb:18:c4:8d:6d:38:ef:6e:63:93:bc:
3f:ac:34:e5:dd:fc:cd:41:98:a2:cf:5e:59:7b:88:
26:b7:90:92:ee:5f:b3:1d:d5:59:0a:be:14:8d:26:
d0:b1:3e:a3:8c:b0:49:97:5b:bc:af:94:b1:10:46:
2a:fc:ee:4c:3d:c9:3c:0d:c3:e8:b5:f5:59:c4:17:
4b:cf:37:96:ec:a5:90:c8:dc:f6:3d:7a:7f:c6:cb:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EB:2B:55:EE:E4:78:7F:C4:4A:7B:C3:EF:67:09:07:AF:73:C8:3B
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9e:b3:30:57:00:ba:33:b9:4b:b0:4f:57:89:e2:3d:94:1b:
59:98:3f:62:d1:16:71:18:e0:c3:52:47:9d:5c:c0:2c:dc:b4:
da:c8:da:06:cf:5e:c9:ec:84:94:b4:b5:a2:ff:1c:f5:5b:43:
af:a2:3c:d5:5d:f2:8b:48:1e:d4:c0:06:9d:da:23:b8:36:f1:
61:35:bc:58:27:69:0f:65:da:94:49:8f:d1:c4:72:d8:ac:8e:
1a:a7:d2:b1:7b:a1:3f:bf:99:ec:6e:31:fb:93:86:70:c5:31:
c9:77:f9:a3:27:3d:ef:63:52:3f:5e:8b:bf:0a:f8:e5:20:26:
7a:c4:eb:2f:a2:2e:b7:37:c3:22:6b:ec:f4:e8:66:9d:67:e6:
47:18:21:ad:98:cd:eb:11:f6:92:f3:14:69:6e:00:95:e7:79:
18:09:48:46:73:c7:8f:b8:4f:3b:ca:d9:0e:c6:b7:69:d1:96:
e4:ed:30:d3:02:83:e1:9f:ea:53:02:96:b3:29:c1:ea:3d:e1:
f0:31:ff:12:59:65:da:b9:1f:06:dd:24:85:02:b3:31:8f:0e:
7e:af:c3:c6:ef:29:3e:de:06:bb:d6:e6:71:19:de:0e:d3:5e:
f4:d2:77:5f:6f:e1:2c:08:70:81:4a:c3:7a:3e:41:25:2d:98:
ee:5c:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:05:41 2026 by rpki-client