Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier: iPttwuu6kH83cZj3iYnZGvBi8u1yFHglSVe2BuY2Vkw=
Subject key identifier: 95:D7:51:2A:C3:F7:10:F6:D9:7B:39:CD:C7:7A:1D:30:DD:D8:5C:F7
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 01A0CCA35A16832F47CFAD769496896E452B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number: 17AA
Signing time: Wed 23 Sep 2026 05:00:52 +0000
Manifest this update: Wed 23 Sep 2026 05:00:52 +0000
Manifest next update: Thu 24 Sep 2026 05:00:52 +0000
Files and hashes: 1: 1LR-EYBL03Uq9iiIomYFwjWbVgU.roa (hash: 8mf/H4W1UbLR+6XAVwkASsjfups8wwQESrwcntjZRGI=)
2: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
3: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: V91uZxfRgwTKg+JPHeP+YAqq9xLUxCkJFUtn7UUbrnA=)
4: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
5: ZUC7Id2Okv2eHSSZdTBUkg-VCng.roa (hash: /lduSjfq1UA9xfg3a0WqS2j8mYLYGsas2BzQFm6I+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:5a:16:83:2f:47:cf:ad:76:94:96:89:6e:45:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Sep 23 05:00:52 2026 GMT
Not After : Sep 24 05:00:52 2026 GMT
Subject: CN=95d7512ac3f710f6d97b39cdc77a1d30ddd85cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:92:a5:05:45:df:94:7e:bd:19:1b:c0:09:
08:ea:1d:a0:48:08:45:9a:5d:89:5a:54:98:92:c5:
0a:ae:36:b3:73:ab:96:53:ef:9c:af:dd:a3:4b:53:
ce:01:f7:bd:b0:91:b1:32:ba:c2:fd:29:4a:46:a6:
e4:10:b3:67:91:04:9b:98:1d:36:52:39:21:f3:df:
81:44:6d:f4:1a:a2:f0:71:96:31:1c:f8:54:9d:9b:
86:61:57:62:b7:eb:cd:38:73:97:81:b9:0f:6f:19:
63:d9:2b:66:ff:a6:84:93:0c:07:b4:24:1d:5e:5a:
67:25:f8:3d:0b:ff:65:49:15:9c:15:c3:f6:95:e5:
44:fc:e4:56:4b:83:24:8a:d2:3b:57:1f:79:af:fe:
a4:a9:e5:69:82:ac:52:2d:bb:8e:2e:37:6d:be:a0:
15:26:9b:35:fb:ab:c5:c1:2f:fd:fa:d8:6c:27:2d:
14:7e:25:32:15:aa:13:eb:af:44:d4:db:ea:54:0a:
ce:37:ee:33:c4:d6:a4:70:3d:59:79:d9:62:ac:47:
e3:72:4b:a3:bf:59:9e:0f:c3:77:d7:b3:ec:7a:e9:
67:81:41:cc:8b:7a:62:f7:04:cf:2d:b7:46:1d:81:
6f:46:13:10:ae:fe:dc:5b:a4:1e:c8:b6:a5:b8:4c:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D7:51:2A:C3:F7:10:F6:D9:7B:39:CD:C7:7A:1D:30:DD:D8:5C:F7
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2f:b0:f8:d8:c0:5e:e3:bc:e3:9e:3c:03:02:5c:75:a7:84:
41:b8:2f:38:c4:e3:3c:fa:d3:1f:9b:c7:23:f4:b0:9d:df:c0:
b6:73:c7:1d:ff:03:4a:3a:b8:45:36:7b:0e:5a:94:01:a7:c0:
e9:21:27:0e:92:a5:6e:fa:ee:87:a7:48:dc:68:83:f8:f4:e2:
20:76:9f:4e:ed:2f:f8:10:ca:36:0c:00:ec:3d:aa:cf:b6:68:
4e:ab:38:c3:fa:7a:b0:31:63:41:fc:32:c6:cd:5d:07:a7:98:
ae:c2:b9:b0:a7:8e:0e:29:44:e8:7d:05:37:70:37:c3:7a:74:
f2:06:5b:f7:82:a6:7e:b3:ef:6f:58:e8:2e:a2:89:4e:39:3f:
cf:74:2f:f8:54:25:8a:ce:a9:cd:15:25:2b:92:e5:1f:57:e6:
bf:a5:65:c5:7d:36:5d:7b:0d:18:aa:08:2d:6f:5d:29:bc:10:
aa:8f:a2:2e:41:ea:d8:6a:33:02:fb:5f:45:02:18:9a:a8:3e:
45:e2:50:9f:cd:ab:da:3b:bb:47:3e:cc:7f:5f:87:c8:54:71:
1c:00:5a:68:53:f9:58:7e:5e:e1:82:16:d2:1a:b6:c6:1d:4c:
43:5c:22:ac:e9:81:73:30:4b:5d:6f:0c:93:02:21:d7:6f:fc:
71:6c:78:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:36:53 2026 by rpki-client