Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
File: cHl9sHv21Fl6wtyL40-JKYAI8s0.mft (raw, json)
Hash identifier: d5fnqZDqqF3EtVfTb+7Xi81tmqoR0BXKOHDivZw3nSc=
Subject key identifier: 90:25:8C:B4:F9:C5:C0:D1:D3:33:BD:3C:07:AC:3D:4E:7E:A6:3C:22
Authority key identifier: 70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD
Certificate issuer: /CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
Certificate serial: 01A175F080CD893195FEFB67D17E280FDBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
Manifest number: 1AC7
Signing time: Mon 26 Oct 2026 02:00:58 +0000
Manifest this update: Mon 26 Oct 2026 02:00:58 +0000
Manifest next update: Tue 27 Oct 2026 02:00:58 +0000
Files and hashes: 1: cAt58g0xkrFHt9-N3ZykhWH0ReM.roa (hash: zJIgtJYw+ptpKpZht1FAofTALod8Sw1aXf2YLrLjs1s=)
2: cHl9sHv21Fl6wtyL40-JKYAI8s0.crl (hash: FITCJ/FLciN9r0efgqm+IZTM6Q8i8duRsb6FFxvJJ34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:80:cd:89:31:95:fe:fb:67:d1:7e:28:0f:db:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
Validity
Not Before: Oct 26 02:00:58 2026 GMT
Not After : Oct 27 02:00:58 2026 GMT
Subject: CN=90258cb4f9c5c0d1d333bd3c07ac3d4e7ea63c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:83:34:4c:c3:e5:11:a6:0a:e7:bf:f7:99:
d2:8f:a5:25:78:3e:be:e8:11:48:7b:1b:e6:77:9f:
31:fb:3b:6f:97:74:ec:ca:c9:5e:aa:0c:b7:4e:b2:
24:be:1b:f8:bc:f3:39:3f:ab:1d:ba:57:b7:cd:cb:
4e:34:e1:97:f9:06:5f:2e:af:b0:42:6a:3f:e4:93:
33:f4:cd:2c:db:44:1e:8d:8a:32:ed:28:1a:86:af:
96:32:3f:f7:f4:dd:10:73:f8:cb:1a:a2:bd:9f:76:
a7:51:4c:68:a0:f3:b2:82:02:d6:e5:d0:fb:be:6c:
e3:5d:81:03:04:e3:7c:f7:e5:ec:22:84:94:52:d2:
74:b6:53:05:18:24:1f:14:ae:6e:0a:d8:c0:84:99:
76:be:db:9b:dd:b7:85:4a:7d:3c:db:13:7e:08:9a:
db:29:9c:16:42:58:01:4f:b8:da:f1:52:f1:e1:c7:
0d:1c:7f:60:db:93:61:a1:b7:62:cf:10:02:be:8f:
a6:5b:5f:50:b4:5d:6b:d0:43:a0:09:8e:0f:20:22:
0f:73:72:3c:08:a4:1c:18:21:fa:91:34:c2:6f:ee:
05:b7:4e:04:cb:e1:97:33:26:d6:a6:f0:29:b3:5e:
68:79:72:a4:db:8a:43:e2:ff:5a:c6:cf:b4:27:9c:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:25:8C:B4:F9:C5:C0:D1:D3:33:BD:3C:07:AC:3D:4E:7E:A6:3C:22
X509v3 Authority Key Identifier:
keyid:70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:01:da:5e:69:3e:0c:63:e1:a6:58:a9:f8:d6:5a:1c:70:56:
dd:33:24:4a:c0:d4:64:db:5d:06:f6:37:40:17:ee:7c:11:47:
28:90:0b:6c:59:de:07:8f:65:77:ce:0e:fa:c5:4d:da:ff:c0:
25:ae:50:d6:dd:58:90:57:fc:11:32:41:23:2f:c4:0b:e6:a2:
49:02:c3:3d:43:3e:d4:e0:cb:48:56:c9:1f:6f:77:c4:47:80:
ed:d3:c6:0b:9d:e5:35:3c:46:40:38:48:1d:a1:29:87:2b:5a:
1d:d4:9b:31:e5:04:46:d9:dd:67:fb:12:ce:49:a2:d0:94:67:
27:47:10:49:ec:6f:2a:c1:3f:ac:b6:de:b4:1f:07:5a:25:d7:
1c:21:af:53:de:47:e5:ce:9f:bd:a0:a5:50:f3:2b:41:05:e0:
fe:0c:2e:06:ca:ab:e5:f2:62:70:fc:99:4a:fb:b1:e7:6f:46:
b8:21:62:b1:2c:15:ed:54:c6:85:3f:d8:88:51:f1:b5:3a:0a:
8f:e9:80:3c:0e:d9:cb:94:7d:ff:68:f2:b4:fe:2c:76:53:64:
7a:fe:05:f8:a7:68:9f:c3:c4:d3:59:81:ea:04:21:79:f1:0d:
c6:74:e3:61:9e:3c:0c:d8:69:15:df:d8:bb:8a:5c:ce:77:45:
39:d4:8d:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF18IDNiTGV/vtn0X4oD9ulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNzk3ZGIwN2JmNmQ0NTk3YWMyZGM4YmUzNGY4OTI5ODAw
OGYyY2QwHhcNMjYxMDI2MDIwMDU4WhcNMjYxMDI3MDIwMDU4WjAzMTEwLwYDVQQD
Eyg5MDI1OGNiNGY5YzVjMGQxZDMzM2JkM2MwN2FjM2Q0ZTdlYTYzYzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1aDNEzD5RGmCue/95nSj6UleD6+
6BFIexvmd58x+ztvl3Tsysleqgy3TrIkvhv4vPM5P6sdule3zctONOGX+QZfLq+w
Qmo/5JMz9M0s20QejYoy7Sgahq+WMj/39N0Qc/jLGqK9n3anUUxooPOyggLW5dD7
vmzjXYEDBON89+XsIoSUUtJ0tlMFGCQfFK5uCtjAhJl2vtub3beFSn082xN+CJrb
KZwWQlgBT7ja8VLx4ccNHH9g25NhobdizxACvo+mW19QtF1r0EOgCY4PICIPc3I8
CKQcGCH6kTTCb+4Ft04Ey+GXMybWpvAps15oeXKk24pD4v9axs+0J5w7GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAljLT5xcDR0zO9PAesPU5+pjwiMB8GA1UdIwQY
MBaAFHB5fbB79tRZesLci+NPiSmACPLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0hsOXNIdjIxRmw2d3R5TDQwLUpLWUFJOHMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jMmVlN2EtY2JiNy00NzBlLWI5NjUt
OTA3ZGFhNDY0NjNiLzEvY0hsOXNIdjIxRmw2d3R5TDQwLUpLWUFJOHMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9jMmVlN2EtY2JiNy00NzBlLWI5NjUtOTA3ZGFhNDY0NjNi
LzEvY0hsOXNIdjIxRmw2d3R5TDQwLUpLWUFJOHMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQHaXmk+
DGPhplip+NZaHHBW3TMkSsDUZNtdBvY3QBfufBFHKJALbFneB49ld84O+sVN2v/A
Ja5Q1t1YkFf8ETJBIy/EC+aiSQLDPUM+1ODLSFbJH293xEeA7dPGC53lNTxGQDhI
HaEphytaHdSbMeUERtndZ/sSzkmi0JRnJ0cQSexvKsE/rLbetB8HWiXXHCGvU95H
5c6fvaClUPMrQQXg/gwuBsqr5fJicPyZSvux529GuCFisSwV7VTGhT/YiFHxtToK
j+mAPA7Zy5R9/2jytP4sdlNkev4F+Kdon8PE01mB6gQhefENxnTjYZ48DNhpFd/Y
u4pczndFOdSNlw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:27:05 2026 by rpki-client