Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: X/92joMB+l9ZgClW6raYdQ+xX9lZoHxiAD9MeJZO7FE=
Subject key identifier: C4:A4:36:2A:5F:D1:BC:C9:FF:14:70:89:CE:91:62:76:7A:04:62:86
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 01A1DD949E5EA5473E86E4B0B4037EE64EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 152D
Signing time: Sun 15 Nov 2026 05:01:06 +0000
Manifest this update: Sun 15 Nov 2026 05:01:06 +0000
Manifest next update: Mon 16 Nov 2026 05:01:06 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: fvu/p+HTbi0QXszVpFrYxskvXqpQa4H6LTxp2HrRs3o=)
2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:9e:5e:a5:47:3e:86:e4:b0:b4:03:7e:e6:4e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Nov 15 05:01:06 2026 GMT
Not After : Nov 16 05:01:06 2026 GMT
Subject: CN=c4a4362a5fd1bcc9ff147089ce9162767a046286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:8a:f6:2c:b2:d7:41:7b:71:9f:a1:df:37:
d7:d3:d8:3e:19:c5:93:59:2e:59:25:ba:56:50:a8:
f4:cf:1f:c9:fa:83:ae:54:24:da:43:08:27:17:fb:
99:1a:b0:b1:24:c5:66:40:d6:3d:a0:d1:d5:50:a1:
6b:51:b5:78:7e:0b:0b:8f:f7:eb:39:07:4a:f9:b5:
1c:2d:b1:69:34:66:08:9b:99:5e:4f:9d:64:12:68:
bc:a5:e0:ed:6d:7c:97:4a:80:2a:18:8d:7a:4d:07:
96:e4:ad:ea:63:6a:3a:12:c4:84:ab:f5:54:7c:ef:
0b:a5:e8:22:0b:98:10:6e:d9:7f:23:18:13:5f:71:
e7:19:9a:aa:90:82:d4:81:51:0f:d0:26:64:6a:94:
4f:1d:fe:d7:a2:7a:dc:22:23:47:3f:0c:0a:e9:f3:
80:fc:eb:04:2c:47:62:5a:79:39:6d:36:4a:a2:fd:
4d:b3:73:14:ff:77:17:6e:54:6f:d3:02:37:51:4d:
a8:45:62:04:3c:07:b7:1b:da:5e:d1:1a:58:dd:01:
6d:ac:ad:d4:89:8c:79:b7:36:08:f4:f6:7d:f3:1c:
dd:e3:88:ed:98:65:18:ef:68:00:04:94:72:00:dd:
6e:27:a1:2c:1c:fa:c5:23:d2:f3:42:4d:89:a5:7b:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A4:36:2A:5F:D1:BC:C9:FF:14:70:89:CE:91:62:76:7A:04:62:86
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d8:3f:5f:94:82:05:07:e9:38:c2:82:14:94:9e:a7:01:6a:
d5:0f:6d:ac:29:ee:b9:26:73:50:53:75:ee:05:52:22:d1:51:
78:d8:01:7f:b6:6c:cd:5a:43:d9:e7:2d:65:06:69:e3:e1:f6:
c2:c5:65:fb:ad:0c:c9:d0:67:70:e3:95:db:79:d7:b1:09:19:
25:28:28:e6:21:e0:7c:79:24:17:5c:e6:34:12:04:d5:f0:d1:
9a:ae:ec:d0:7c:ec:0f:55:58:8b:38:05:85:74:39:86:20:35:
12:1a:ba:c6:0c:eb:7d:0f:74:b0:7d:ca:41:2c:f8:f2:75:0e:
8d:cf:14:e7:19:a5:c2:7e:89:6e:d3:50:ec:06:eb:2c:02:88:
f6:95:f9:58:ee:3e:ca:6c:9c:0d:d9:0a:12:64:8a:fa:d9:22:
04:14:67:08:84:d5:58:63:5b:35:e0:20:c3:d0:53:ad:bb:b2:
3f:7d:ea:18:dc:9a:e1:8d:35:72:84:cc:ea:6b:7e:20:3a:de:
2c:10:83:63:ef:08:5f:33:43:2a:3b:13:76:a4:fe:97:73:cb:
93:41:f8:ac:6a:d4:81:85:f6:6f:4f:ed:54:36:f1:59:e8:4e:
bd:a7:b5:6d:0a:e6:12:0d:c4:4d:73:fa:cc:25:61:a0:6d:f9:
59:57:8a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:05:53 2026 by rpki-client