Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier: NhzsmMFG/2GNZR9m7goxpb4gzxdoztobVog5PrOakk8=
Subject key identifier: 60:A4:94:E2:EF:82:56:5B:2B:BE:22:4F:73:32:EE:3B:18:09:08:67
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 01A0C4E929AF0CFBAD16224BD286601BDFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number: 17A6
Signing time: Mon 21 Sep 2026 17:00:09 +0000
Manifest this update: Mon 21 Sep 2026 17:00:09 +0000
Manifest next update: Tue 22 Sep 2026 17:00:09 +0000
Files and hashes: 1: 1LR-EYBL03Uq9iiIomYFwjWbVgU.roa (hash: 8mf/H4W1UbLR+6XAVwkASsjfups8wwQESrwcntjZRGI=)
2: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
3: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: eyaq1EeAkNJZKBS8z6QSJ9lokpKN9OzItb6QFUM5HWs=)
4: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
5: ZUC7Id2Okv2eHSSZdTBUkg-VCng.roa (hash: /lduSjfq1UA9xfg3a0WqS2j8mYLYGsas2BzQFm6I+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:29:af:0c:fb:ad:16:22:4b:d2:86:60:1b:df:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Sep 21 17:00:09 2026 GMT
Not After : Sep 22 17:00:09 2026 GMT
Subject: CN=60a494e2ef82565b2bbe224f7332ee3b18090867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:50:d7:bc:38:bd:68:9c:bb:e0:5f:14:a4:
e0:4a:27:99:56:ef:2b:96:55:4d:fc:6e:1e:03:ad:
e8:fe:ec:03:04:d9:5d:1d:6d:96:a6:19:1c:22:9b:
ed:a9:fd:e2:e4:ed:83:c1:b1:01:9b:7a:11:cf:52:
f0:ee:c0:11:2b:02:59:05:7a:27:71:80:af:7a:f6:
ed:e6:c4:af:5b:d0:b6:f6:3f:b3:5f:48:b6:30:ee:
58:60:e2:c2:b9:fb:27:ea:37:ee:f0:93:a9:96:46:
c2:31:fc:18:26:93:32:73:7a:7a:36:65:0b:d3:cd:
ed:4b:b1:dc:d4:d7:12:2d:70:2f:39:f9:9f:30:ed:
8b:45:22:9e:ff:9f:e2:30:b8:84:80:64:b1:9e:80:
8e:0c:f9:44:d8:b0:f1:9e:c9:d2:46:ef:dd:b6:24:
2e:4d:ae:0d:96:aa:bb:86:c9:2d:d4:29:f9:fc:77:
21:50:81:e5:5d:c6:e6:41:2b:cf:3d:a3:94:4a:c5:
6a:f7:a9:c4:49:92:46:b1:c2:a4:3a:65:4b:21:77:
cb:e6:ac:5d:71:29:e1:5b:ab:71:69:c8:d8:8e:63:
c4:de:f2:2a:c0:ae:a1:19:1f:80:df:ab:3a:e2:f6:
26:ec:e7:0d:24:da:a6:ff:f6:c7:54:54:0f:c4:da:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A4:94:E2:EF:82:56:5B:2B:BE:22:4F:73:32:EE:3B:18:09:08:67
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a3:c2:08:f7:dd:ac:e2:55:4f:38:47:bd:4e:30:fd:4e:14:
f6:cd:06:59:b1:6c:62:16:19:c8:a1:09:0d:a4:c0:d7:02:6c:
dc:f2:fc:55:11:2b:25:19:93:1b:73:f8:3d:15:6d:2b:11:c7:
0d:78:41:61:e6:1c:f2:74:99:cd:00:2e:b8:71:db:50:e6:2d:
6c:c4:e9:af:34:8f:41:6d:02:66:7c:34:25:8d:eb:bb:51:e8:
22:8d:b4:b5:f1:9c:50:ee:1c:d2:8b:90:2a:29:c3:c6:55:67:
b0:b0:c8:61:47:e5:dd:84:b4:6f:fc:9d:64:0b:e2:ee:a4:d5:
d8:6b:51:f3:32:3e:e3:e8:a8:c0:a5:40:76:38:b7:ba:d6:a6:
dd:eb:9e:c8:cf:e7:cf:53:7c:9e:9f:2d:e1:bb:7f:ce:c4:e5:
ad:2f:74:59:90:a5:6a:fd:d9:7d:a9:0d:e1:81:ad:ed:20:39:
5a:fc:e3:a3:90:78:5e:99:cc:e5:36:d6:e2:3b:35:5f:80:60:
64:9a:1c:54:aa:3e:2b:4c:3c:f8:47:79:37:cb:f6:44:d2:87:
65:8a:5d:64:e1:ec:b1:58:79:88:b4:66:a3:58:a5:17:4a:42:
ee:b6:4d:29:ae:d4:42:c6:02:10:25:1f:e2:63:20:a2:ca:db:
00:cf:9d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:07:35 2026 by rpki-client