Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: 2QUGIyB/3WVx2ctGoBY2RjgPrgt/AynwpPxy19KNZVs=
Subject key identifier: 4C:A7:EC:7A:D2:6A:C3:53:C6:EF:0E:17:C6:03:BF:17:71:92:35:7F
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 019D9A74B74B653350CB0810609F03BB68AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 12F8
Signing time: Fri 17 Apr 2026 08:00:33 +0000
Manifest this update: Fri 17 Apr 2026 08:00:33 +0000
Manifest next update: Sat 18 Apr 2026 08:00:33 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: cW9XYsBk6ml6I5iU3bGzyocT1Ol6ljrNRCeZY9gH0NI=)
2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b7:4b:65:33:50:cb:08:10:60:9f:03:bb:68:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Apr 17 08:00:33 2026 GMT
Not After : Apr 18 08:00:33 2026 GMT
Subject: CN=4ca7ec7ad26ac353c6ef0e17c603bf177192357f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:2c:4a:9d:0c:8f:a7:df:4f:85:b6:00:81:
0b:9f:89:88:3c:0f:ff:06:c7:60:bd:ae:bd:2b:0f:
7b:b9:51:3d:92:c5:e8:0c:bb:1d:6b:47:3a:d7:ea:
8a:11:97:48:31:31:39:d7:79:14:6f:a0:37:c9:24:
92:46:a1:95:b8:7f:a7:40:69:f1:a4:3d:3a:32:a5:
66:6e:55:4f:41:f0:26:6e:01:b9:b5:e9:42:56:9f:
9a:15:b0:86:1c:04:1d:4f:9e:93:67:af:8b:0a:cf:
65:ad:3a:a9:26:22:32:d9:7f:db:5f:d6:ab:3d:5c:
11:c4:d2:d8:b4:d3:a0:d4:ed:79:fd:9f:9f:d0:42:
05:fb:35:d8:3e:b9:42:02:69:31:24:23:5d:01:a6:
10:4b:46:3f:ee:2c:67:c5:ff:0d:51:6d:3b:ff:6e:
5d:04:c4:63:07:f3:b7:59:f9:9d:ed:17:e9:51:6f:
62:80:00:8a:70:07:2b:1d:e4:d3:b3:f8:53:68:30:
08:b1:db:4e:98:87:a3:d8:2c:31:e6:e2:4e:c7:5b:
6a:e9:3a:0e:72:85:5e:1d:96:2b:52:d7:61:e5:49:
da:72:65:5d:2b:20:31:86:2f:54:46:e2:91:ca:6a:
5c:e0:d4:aa:77:13:a4:8e:7e:9e:cd:df:84:65:d2:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A7:EC:7A:D2:6A:C3:53:C6:EF:0E:17:C6:03:BF:17:71:92:35:7F
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7d:f7:a1:a4:b4:33:fc:91:b6:e9:55:69:ca:55:1e:8f:90:
4b:35:22:ee:f7:8d:8d:16:7c:14:62:bc:65:09:1a:0d:d9:13:
a4:50:42:b9:13:cc:29:b1:51:31:1b:61:41:42:df:dd:3c:6e:
ba:7e:b8:0e:9c:b5:38:5f:94:c3:e6:e5:a1:50:73:13:48:33:
19:26:9c:3d:f8:96:71:e7:d5:ff:ad:eb:41:b5:27:f7:11:e0:
38:8d:1b:f6:17:e6:ce:c2:11:29:05:ee:1e:60:7b:0d:1c:71:
14:90:29:8d:57:a9:4b:50:9b:6f:4a:d3:ab:17:dc:be:24:a2:
51:5c:bf:d7:36:9f:6e:09:38:7e:41:23:5d:1f:2f:27:f1:fd:
01:3c:6c:be:cd:7f:8d:96:91:b3:77:14:d8:f6:0b:d5:eb:48:
d2:07:01:7d:97:1d:a7:46:b8:91:47:fa:00:48:f5:f8:69:58:
31:9e:e5:03:0c:fc:be:d5:7b:88:f5:4e:51:56:d9:34:0b:2f:
69:93:20:a4:be:e1:08:49:91:0e:84:25:4e:9e:8f:26:f7:d6:
ab:0d:22:e6:d7:aa:69:59:75:fe:b1:66:a3:64:7d:4d:ed:3b:
d4:0a:26:92:6e:61:99:3c:51:49:67:64:73:5a:a4:5a:f2:f2:
9c:4b:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:18 2026 by rpki-client