
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: N339NbpD27Vf/OoTZ+Dngh2hedDLKhzCaxZ/Qa2L/uI=
Subject key identifier: B4:8C:9C:84:30:C2:F9:50:54:4D:83:0E:D9:AE:4E:4C:BE:B9:48:22
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019F8531D2AEB4DE20BD6714CDB77864696E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 096F
Signing time: Tue 21 Jul 2026 15:01:02 +0000
Manifest this update: Tue 21 Jul 2026 15:01:02 +0000
Manifest next update: Wed 22 Jul 2026 15:01:02 +0000
Files and hashes: 1: _T4q5Hpk4ipyTG7AMNyDdoKOT50.roa (hash: Lr+JB8T/f7L7H1ix+TlIyXnba9tt1bZ6qL8/Kz5nqFg=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: lwHELMLhgltp08eaNgRM1tpaNB6FVpGMMMfm8IJlFI0=)
3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
4: ji5uq7lgpZme2h5LP4PpoR1KlXg.roa (hash: KpOwi/Y6b4qR3//I1ROSdvQABJ8PA4YdcglI0GCbEGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:d2:ae:b4:de:20:bd:67:14:cd:b7:78:64:69:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Jul 21 15:01:02 2026 GMT
Not After : Jul 22 15:01:02 2026 GMT
Subject: CN=b48c9c8430c2f950544d830ed9ae4e4cbeb94822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:11:93:4f:3d:10:3b:55:8e:98:24:88:aa:02:
4d:e1:46:53:ce:26:80:ed:8f:6b:64:92:40:f2:f0:
99:82:7a:fa:82:d1:df:fb:56:61:a6:ef:ca:10:3d:
a9:89:28:45:ad:92:12:d3:7c:15:96:c8:8b:bb:9c:
7d:41:0d:75:82:b7:ff:68:72:3f:58:7b:1b:53:91:
06:d7:68:2a:02:41:0c:36:93:60:aa:db:b4:48:72:
c6:09:5a:e5:32:68:1f:99:ff:52:38:95:37:6a:98:
d2:d4:13:fc:c0:4e:bc:36:bf:dc:c7:ee:c2:e5:fa:
89:1b:e1:a3:b2:49:b1:43:d6:4c:9c:14:f9:04:75:
d4:52:10:86:78:4b:09:a7:46:6f:c8:b2:aa:d4:ee:
8b:ac:6a:3f:cd:d4:54:61:27:13:58:47:9c:68:c5:
01:22:b5:a9:5d:30:13:34:30:5d:b3:20:b4:d3:b1:
94:97:78:98:6a:38:a3:c1:4d:2b:5c:1a:29:7e:ee:
2f:57:89:97:b9:dc:61:b9:04:d9:76:0f:cc:76:09:
d5:32:e9:a7:42:4f:8c:73:56:18:15:fa:86:ae:80:
a7:8f:6c:44:97:f4:e9:ef:3f:11:7f:dc:62:ce:f0:
c2:70:f3:93:eb:e0:94:70:a2:76:f9:a5:d2:67:17:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8C:9C:84:30:C2:F9:50:54:4D:83:0E:D9:AE:4E:4C:BE:B9:48:22
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3a:35:75:51:68:25:98:77:fa:c2:48:2f:80:fa:52:04:c0:
dc:ff:c7:4c:ca:8a:67:af:ff:45:35:92:c6:0d:8a:db:f9:e1:
4c:f9:7e:ca:d7:be:a9:a9:df:18:82:33:3c:a6:40:b6:56:40:
39:2b:03:e1:4b:06:a6:30:e7:91:0c:99:b5:90:ac:e3:7e:55:
38:ba:d3:6f:e8:7a:cd:0a:11:d8:38:db:f9:45:85:ed:b0:74:
69:d0:07:be:3d:3f:6b:01:05:80:4a:f4:7a:a2:39:4b:ed:e0:
b2:9c:62:18:94:ef:e7:11:74:70:c8:c7:ee:2d:92:81:b6:f0:
16:b8:15:15:ce:dc:51:5f:73:88:0c:bf:20:c4:ce:77:c6:de:
1b:1e:08:bf:d9:78:cc:83:df:47:af:f4:a0:96:1a:ef:8f:a8:
1c:b6:72:83:8c:ef:82:bd:78:22:5f:4f:83:83:4a:bf:d9:59:
fa:2e:85:f1:2d:8a:f3:00:db:24:6d:65:03:0a:49:81:07:4f:
73:e7:4f:cc:58:8f:77:6f:74:4f:76:68:19:c9:e5:f5:77:d8:
4e:39:61:94:3b:a1:71:30:36:2c:29:77:c0:fc:93:e8:25:01:
42:18:2b:69:00:4c:ce:fe:4d:b4:82:01:1e:39:e7:bb:99:31:
55:43:c0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:28:16 2026 by rpki-client