Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: AZitsSqoUt3KZEI84zOUrZLgSI70gMvo0sLtq5h6gxE=
Subject key identifier: F4:3C:2A:B1:BD:E9:F9:B4:E9:58:9B:6B:15:BA:02:5B:DA:8A:B4:F5
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 019CAAFD18C3CF215342F39977FA5482F4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 127C
Signing time: Sun 01 Mar 2026 20:00:39 +0000
Manifest this update: Sun 01 Mar 2026 20:00:39 +0000
Manifest next update: Mon 02 Mar 2026 20:00:39 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: CFNExX7tyWmqXQLTAvBqN1C3JY4dehpTRceUZ9aSEQ8=)
2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:18:c3:cf:21:53:42:f3:99:77:fa:54:82:f4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Mar 1 20:00:39 2026 GMT
Not After : Mar 2 20:00:39 2026 GMT
Subject: CN=f43c2ab1bde9f9b4e9589b6b15ba025bda8ab4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:6c:37:a8:0a:19:be:c2:cc:f6:5a:f4:21:
16:79:78:53:57:cd:3c:0d:11:b3:34:5e:25:f4:9f:
7e:5c:51:05:ce:c8:a1:a9:b8:f8:b7:18:ff:5b:1d:
ad:46:ec:9d:72:90:6f:2c:1a:a7:ee:27:03:06:2f:
e0:b5:36:6d:d1:9a:08:45:ee:42:e5:45:42:95:7b:
1a:72:87:47:7b:99:ca:65:6f:83:dd:06:2f:65:ed:
31:66:bd:81:5a:fc:b2:80:b1:8a:36:16:34:89:d7:
38:17:f9:13:99:a1:a6:1b:1f:e0:55:6e:1e:c0:b0:
2e:8d:40:d4:9e:aa:73:ac:39:e7:75:ce:c1:9e:e0:
44:7c:89:4a:6c:65:45:47:26:c4:8e:4c:2d:b2:b5:
22:b0:85:4c:1e:5b:73:b2:29:1a:cc:b2:73:d1:a4:
b2:aa:dd:2d:2b:b2:bc:e2:fa:bc:e3:25:a8:f7:a7:
d9:94:79:4d:bf:12:cb:cf:6b:f8:8e:cb:cd:e4:6e:
d0:ec:4d:b5:70:bd:1f:66:af:f7:80:a7:79:a9:b4:
2e:24:33:94:50:7d:e7:bc:77:e5:bc:cf:0c:93:82:
75:ff:05:9c:b0:ee:2f:cf:7b:b9:e2:20:fc:7a:51:
b1:78:8a:3d:f5:b4:e6:4e:1b:ba:39:24:e4:af:fc:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3C:2A:B1:BD:E9:F9:B4:E9:58:9B:6B:15:BA:02:5B:DA:8A:B4:F5
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a9:71:e4:09:81:1a:bd:ca:53:c1:1e:11:a6:bd:77:91:64:
23:5d:49:90:94:7d:d2:42:a9:57:53:90:5b:79:c2:75:8a:04:
c6:87:41:07:da:98:ee:32:bd:72:84:03:a4:ef:50:f7:d4:73:
bc:b8:28:fe:77:35:5a:1d:fb:16:ab:a4:16:2e:ff:2e:ed:48:
72:5d:82:03:98:cc:2f:ab:62:e6:4b:95:0f:bf:d8:f3:fa:58:
42:f8:66:bc:02:cb:a0:4a:bd:78:4b:3f:95:20:a4:af:05:fd:
0f:eb:bf:1c:ef:df:d5:98:21:be:45:9c:80:40:9a:99:20:66:
91:c8:9b:d6:1f:ca:8c:74:b0:c1:20:0c:30:52:12:18:b6:e9:
db:ce:25:c0:7f:39:fc:c6:a3:4f:1a:a7:a5:ea:e4:2c:bd:ee:
e7:23:bd:11:92:da:c5:d5:e6:6d:9f:69:2a:02:49:df:5a:35:
7a:38:1e:03:a6:ef:cc:07:3e:59:da:8d:24:e9:a3:20:56:9c:
e3:98:47:72:ea:46:b8:1a:a7:35:43:8f:33:fc:e1:b2:7c:93:
d8:9c:f9:87:07:cc:6b:dc:10:00:1f:f1:fe:2b:00:bc:5e:7d:
2f:7e:77:db:8b:db:12:b1:b7:6e:50:92:8c:84:b1:50:19:28:
4c:ab:d0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:27 2026 by rpki-client