Manifest
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
File: yqgF26w2R0m5sRVZCrbvD5cM29g.mft (raw, json)
Hash identifier: DNcKXAno03KRefKYnx1ZWpg6A2cvyAoQW7nAnbRXjGA=
Subject key identifier: CF:75:C7:49:EB:96:45:5C:6E:8F:F8:70:1B:EB:1F:96:4F:79:F1:B4
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 028156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
Manifest number: 027CEF
Signing time: Tue 28 Jul 2026 23:34:22 +0000
Manifest this update: Tue 28 Jul 2026 23:34:22 +0000
Manifest next update: Wed 29 Jul 2026 05:34:22 +0000
Files and hashes: 1: 24uSj6d9yFEzM1IYGdo__5uEBPY.roa (hash: DtxL/u87fjMOKyBnV7+iNV5ne3q1D1b7KSFLOhOujhk=)
2: 76ulW5E_Ouq5QH7w6qX0alj5iCI.roa (hash: d1qGMKtUsjUMEDWDnRPl3zPlpudm8N/87VkBLfd43PE=)
3: K50pgQSImphHNKd0Lg4zifkaeO8.roa (hash: g6A5tjXW84ZMd2EypgbUP00UDVLKSdlKoHeuHXY+Ui0=)
4: W-IMAJK6gZWEHMYOULhP9_ElGmM.roa (hash: HW4MRenjbhn3vr4e6Nx/2er8+/BuCz7rE7yZ4fpwkjY=)
5: XUJQ4tgdREjYop786R0p_wdeyeI.cer (hash: 6CDHVFEB61WPyl8mj8ft8AAOWQ8MdJcdCjtOBW5NDk0=)
6: cr114rq1dvV_dmNbCgm_LXj6xuw.roa (hash: IBttgiHBF/xEY/rMd/XWkktJNAoKMfPI5Bw4pFPcJa0=)
7: voibVdC3Nzl9dcSfSFuFj6mK0R8.cer (hash: OTfadI49KyLiaOmBwaW1IfcyhDTe7YRgpTt5JU9f79o=)
8: yqgF26w2R0m5sRVZCrbvD5cM29g.crl (hash: x44XD+fQUW6fnx+TcSnteisZWfO5/9fKqNUk/07QoXw=)
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164182 (0x28156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Jul 28 23:34:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=CF75C749EB96455C6E8FF8701BEB1F964F79F1B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:e7:56:e4:87:73:15:f5:a4:ce:2f:9f:82:
4d:05:06:8f:6d:ed:a7:7f:0f:18:17:92:fc:48:6f:
25:35:65:08:a6:60:1d:5e:b5:7f:d7:3a:cc:29:41:
ae:4f:9e:19:a1:13:13:26:a9:fa:09:1e:f6:63:6b:
b2:d7:32:e4:b0:fe:81:17:8f:c9:e7:a6:6d:fe:ec:
0d:44:60:51:6c:b3:c9:bf:ac:0f:e1:31:76:a0:2d:
42:08:a9:f7:31:fc:a7:21:ad:96:4f:6c:02:91:46:
80:3f:0a:43:de:37:dc:90:a1:c4:be:20:02:d1:5d:
50:e3:7e:02:15:98:a1:e3:cf:9a:fc:e8:31:ea:e4:
7e:8d:9c:c0:6f:5a:5c:cb:18:8a:c7:e3:b4:da:b5:
e3:9c:f5:e4:ee:40:f6:16:03:04:cb:0c:5b:cc:29:
39:d4:a3:4a:a7:8a:52:13:6e:72:05:f1:79:f5:80:
12:3d:1e:49:07:bb:ae:48:f2:49:7c:bf:7c:97:63:
0a:df:40:cd:34:0a:97:12:ba:27:85:1b:84:2c:99:
b5:34:07:88:91:2c:09:47:06:33:34:cf:15:1b:09:
36:7e:bf:97:92:95:8d:5e:b9:c1:50:1a:c0:05:a0:
87:8d:37:3c:13:42:18:2d:62:d6:26:40:64:a5:a2:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:C7:49:EB:96:45:5C:6E:8F:F8:70:1B:EB:1F:96:4F:79:F1:B4
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:7f:f8:6d:d3:f7:ab:6e:d0:9d:dc:7a:54:91:be:b8:6a:76:
11:a0:3a:ab:81:0a:d3:54:17:ef:81:5c:14:2d:9a:91:9d:a3:
cf:de:3b:6e:53:42:f4:20:98:97:8d:86:16:13:27:cb:9f:0a:
b5:31:fc:ad:13:57:5a:ca:31:c7:78:84:2d:68:62:94:68:2b:
22:0a:b8:01:f9:af:f8:46:a8:31:c3:31:a8:bd:7c:d3:58:bb:
5e:b8:88:e9:77:d3:89:c8:d2:e9:78:79:8e:e9:25:41:44:84:
00:26:f5:06:00:18:f7:12:9c:10:9c:59:58:09:89:43:70:bd:
3c:42:29:8f:de:d7:21:4d:bb:91:4d:4a:04:7e:b8:c5:e7:43:
bf:30:de:c2:dc:20:48:65:0b:63:5f:5c:ca:2c:54:b8:aa:d4:
21:f9:54:da:5c:4b:23:f2:c8:b7:1c:be:5f:80:0d:fb:c7:f3:
a7:16:2b:e9:25:37:ae:d6:b0:da:cc:a7:15:aa:5c:c7:58:25:
b6:5b:d4:93:79:31:66:4f:8b:fa:7a:10:e4:91:e8:ac:ba:4b:
55:30:3d:e6:50:8f:0b:d9:36:86:23:f3:17:e2:f4:5c:56:56:
06:ac:12:89:a7:0f:dd:57:e6:56:eb:0a:d3:5f:1e:dd:e1:bf:
f3:e1:b2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:59 2026 by rpki-client