Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: ORBjMBvhrvI25hF8aimRpVkM8LGw6fvuk6vRj1wKFH0=
Subject key identifier: 5C:A8:90:21:25:09:5B:48:EB:B9:50:E9:D2:5F:A6:B4:0B:12:CA:75
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 01A0C58E1041013C723C3281629DBB10DC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 149C
Signing time: Mon 21 Sep 2026 20:00:16 +0000
Manifest this update: Mon 21 Sep 2026 20:00:16 +0000
Manifest next update: Tue 22 Sep 2026 20:00:16 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: xovt+i5Pmk1uSd1cVpMlUchPOgbXIPdOwpCjEn3gpok=)
2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:10:41:01:3c:72:3c:32:81:62:9d:bb:10:dc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Sep 21 20:00:16 2026 GMT
Not After : Sep 22 20:00:16 2026 GMT
Subject: CN=5ca8902125095b48ebb950e9d25fa6b40b12ca75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:0e:e1:dd:0a:df:3b:c8:34:17:be:f6:d5:
04:8b:d2:7f:ba:4e:3b:b6:04:b9:c8:90:d2:39:e2:
13:fe:70:bb:35:88:40:c1:b7:a2:52:81:10:11:7f:
e3:70:b7:5c:6f:e8:43:47:d3:8c:69:9d:e8:6e:c7:
fa:f1:d5:b1:e0:31:b0:05:e8:55:84:d9:8e:33:8a:
8f:09:f6:a0:49:07:db:2b:47:94:d0:46:44:3b:39:
8f:3a:95:ce:4c:1c:9c:2f:2d:c6:24:6a:5e:4d:00:
43:f5:90:56:1a:85:c4:b3:27:04:3f:06:10:33:9b:
3c:7f:38:d8:ea:a3:47:73:b2:87:75:d4:b8:b5:08:
19:fb:95:55:7c:81:cf:02:71:e8:b2:ae:6c:ac:6c:
50:fa:fd:5c:7f:5d:d4:cc:8f:17:55:1e:ce:e5:a8:
45:b1:3f:a6:42:08:81:23:a4:19:90:5d:4b:47:c0:
e8:a6:10:9e:11:cb:25:9e:10:a5:0b:3c:84:37:88:
e6:7a:4b:ec:8b:94:1d:85:70:0f:c8:03:8a:e7:e6:
7e:e8:91:a1:fb:2b:36:df:66:a3:8f:5c:80:9a:74:
96:a1:84:b4:40:89:07:fd:09:61:a2:23:32:57:2a:
00:f8:ba:04:d5:bb:df:e4:58:fd:69:ad:b4:6e:22:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A8:90:21:25:09:5B:48:EB:B9:50:E9:D2:5F:A6:B4:0B:12:CA:75
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2c:5c:25:db:32:73:35:31:03:be:02:63:98:30:4b:cf:f1:
9e:67:d3:75:a4:6c:e5:67:2a:52:c3:69:62:b0:44:57:0c:f2:
4d:d9:9b:9d:4c:33:f8:4d:08:bc:3a:9f:02:c8:57:fe:d5:23:
26:43:65:50:1b:5f:8e:41:8d:a6:bb:df:6d:3f:97:bc:76:42:
9b:d5:9e:67:7f:77:78:49:df:09:39:ca:1f:c8:52:e0:67:86:
3f:37:f1:d9:db:47:8e:3a:63:93:3f:15:77:88:07:72:8b:18:
99:40:f4:39:99:37:a3:7f:17:81:a7:c1:31:11:e2:cc:d0:3d:
b0:90:28:44:fc:34:73:03:8a:15:c7:bd:0f:aa:5f:fa:9d:22:
7b:f4:75:75:00:ac:06:73:5e:bc:8f:c1:b0:86:13:7d:17:81:
dd:88:af:ea:14:84:0e:4c:2f:43:ff:5f:e8:5b:29:06:68:fb:
8a:c2:47:6b:c6:2b:7e:7d:33:29:a5:9b:29:fe:40:d3:41:b5:
d1:cd:43:c8:cc:ca:8b:3e:27:0e:35:5e:d8:b3:a4:4a:7d:ca:
88:ba:85:e3:a2:cb:d4:2d:be:aa:b4:6b:ec:02:38:26:31:80:
bf:ee:f2:6c:9e:89:a2:e3:45:e1:47:17:7a:ab:fc:d7:45:53:
69:51:57:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:58:16 2026 by rpki-client