Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: 3HuzIKH6UVxjsEok5gW8VKE/bq7dEWUNIG7vsT9NekU=
Subject key identifier: 11:74:EA:78:2F:B2:EB:18:4D:2E:50:73:30:86:B5:BE:B9:F7:0F:1F
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019DB1A14E7A973FB9626233C19D2EA1100B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 087C
Signing time: Tue 21 Apr 2026 20:00:31 +0000
Manifest this update: Tue 21 Apr 2026 20:00:31 +0000
Manifest next update: Wed 22 Apr 2026 20:00:31 +0000
Files and hashes: 1: KoHLJNQuOcHspjZQJtsgwfHF3m4.roa (hash: Pm229i2zgzIKXvQ6Hz77HG6vbpEhWAQEJXW3BVSV54E=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: 5jflG6FOXd1QPdWsRKuFBbYWXE+ybLm4amMyZq9sCgA=)
3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:a1:4e:7a:97:3f:b9:62:62:33:c1:9d:2e:a1:10:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Apr 21 20:00:31 2026 GMT
Not After : Apr 22 20:00:31 2026 GMT
Subject: CN=1174ea782fb2eb184d2e50733086b5beb9f70f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:3a:b0:a6:b7:f9:f6:4e:34:51:7e:ac:0d:
66:db:ee:42:46:ea:42:42:ac:1f:de:26:bd:58:12:
20:78:f2:e6:87:52:7a:9f:19:ba:52:50:c4:11:46:
72:1a:9c:fc:98:22:f7:15:85:ce:94:09:7a:a3:5d:
3a:05:4c:cf:1c:02:9f:0b:51:a4:a8:40:9c:dd:03:
7f:ee:12:c5:23:32:87:6e:7f:22:3c:36:ab:53:74:
b1:78:59:6f:69:d4:51:80:aa:dc:67:22:98:c4:53:
01:90:fc:32:f9:40:cd:48:78:be:be:74:c7:7c:90:
69:a4:47:79:f5:d0:b6:65:c3:d9:44:f9:af:42:83:
a5:27:c6:2a:c7:58:cc:96:89:67:09:17:70:75:5e:
94:59:bb:f8:8a:be:46:34:1d:4c:7a:9c:69:5d:86:
09:3c:2c:80:ed:bc:58:d1:17:c5:0b:72:56:51:e4:
f7:56:d2:7d:c3:20:37:e7:85:ee:0d:3b:68:00:46:
97:8a:65:a0:76:43:2e:f5:62:a4:a6:65:59:a3:39:
80:68:92:29:10:b6:b6:36:df:08:a5:1a:81:de:65:
e6:ac:64:22:7e:ed:a2:bd:49:49:7f:65:59:20:08:
eb:18:c7:2d:4d:5d:3f:33:93:04:1a:0b:3d:88:eb:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:74:EA:78:2F:B2:EB:18:4D:2E:50:73:30:86:B5:BE:B9:F7:0F:1F
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6c:37:6c:38:8c:41:7b:05:7c:2d:90:59:ca:f4:ea:92:0c:
c7:75:23:97:b5:39:78:5a:cc:3a:d8:46:ac:ca:23:0f:58:c2:
56:65:c1:47:63:90:3c:fb:87:af:2c:6a:06:0f:0c:5b:7e:a7:
c7:4d:1a:2e:07:e5:5e:d9:87:32:42:31:97:e8:f1:79:38:46:
74:f4:5b:61:93:62:c5:68:e4:ed:d5:d9:6b:4a:3c:86:a2:73:
11:95:85:4b:25:93:a0:0c:1f:7e:73:07:b5:95:1b:96:55:63:
f6:fb:be:da:4e:61:8b:3c:9a:0f:2a:dd:1e:36:be:a9:7f:e7:
60:6c:d3:72:38:b3:3b:a9:4e:6b:0a:98:12:cf:de:77:d8:c7:
92:d5:8f:08:1c:70:a7:e5:34:c9:80:f2:69:45:49:87:67:14:
f8:97:d0:8b:9b:d4:19:b7:a3:95:b2:58:b6:6e:df:fb:6f:b9:
20:3e:24:da:e3:07:74:27:ad:b9:75:28:64:49:a7:fb:0d:bf:
77:42:54:cb:74:81:90:1c:e4:98:c0:bc:2e:af:79:69:cf:ec:
8a:a8:88:35:12:f8:c0:ff:a5:14:e8:45:a5:9b:bc:5a:98:d2:
f6:5b:aa:bd:9e:67:ba:76:8b:46:84:fb:1c:57:67:97:ce:75:
5c:6c:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:21:26 2026 by rpki-client