Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier: RFWo+Z562d3NILwqFrMM0OikAbLW0nmBU4112hGHIrw=
Subject key identifier: 42:0C:3D:7E:43:F5:0E:DE:19:4F:8B:7D:DE:AD:E2:82:C8:40:6E:30
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 019DA48AE1CDDB92F479348D4D16C02292C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number: 1607
Signing time: Sun 19 Apr 2026 07:00:58 +0000
Manifest this update: Sun 19 Apr 2026 07:00:58 +0000
Manifest next update: Mon 20 Apr 2026 07:00:58 +0000
Files and hashes: 1: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: zCJU5Zw4MqEHjslKD7yg11RTQ44IQK9PgnLSDg2TQP4=)
3: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
4: ZUC7Id2Okv2eHSSZdTBUkg-VCng.roa (hash: /lduSjfq1UA9xfg3a0WqS2j8mYLYGsas2BzQFm6I+Kk=)
5: mEdwgIPRh23OxSoHlQNJuRMghjc.roa (hash: F8DBsuD0LXSZtLRp2HPMhvbe4OQSD53Wc5fBou6rnO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:e1:cd:db:92:f4:79:34:8d:4d:16:c0:22:92:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Apr 19 07:00:58 2026 GMT
Not After : Apr 20 07:00:58 2026 GMT
Subject: CN=420c3d7e43f50ede194f8b7ddeade282c8406e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:60:21:76:1f:42:ac:38:0a:cb:00:d7:31:
ac:71:ea:a5:ed:e3:ce:5f:69:b6:1f:80:1c:81:a3:
39:9b:24:78:10:72:39:ea:e1:61:62:4b:8d:51:8c:
9f:6f:7d:66:cb:87:bc:89:b5:77:34:43:c4:ac:b9:
9b:dc:e3:ba:15:86:ef:a8:fe:20:6c:ed:4e:81:dc:
e7:25:50:e9:71:bf:30:6b:c0:41:a7:c6:1c:7a:c8:
36:2e:5c:20:fa:58:c7:c4:01:ea:47:7a:d5:b8:ec:
d2:f0:d4:4c:61:c1:37:15:51:1d:d0:c2:dc:f8:0c:
da:b9:e9:6b:16:86:b6:4e:f9:06:ff:df:71:3e:ec:
57:01:2a:00:89:15:da:aa:4c:7a:7c:52:8c:96:a0:
4b:a7:38:4b:c3:b7:24:70:54:36:c0:d8:b6:8e:3a:
ca:95:53:07:ac:96:6b:8c:ae:7a:4b:37:36:26:7c:
0b:62:24:8f:e8:51:ba:f5:b2:06:62:87:d5:d3:f4:
a0:4f:80:06:71:a7:28:58:e6:ee:44:b3:7f:be:2e:
ad:ff:28:5c:a8:e3:2c:76:5c:d7:9a:1f:f8:2f:f7:
7a:14:7e:66:35:26:c9:92:2c:01:41:32:16:c6:a6:
30:e1:a2:92:bb:67:d2:84:59:9c:2d:a7:14:94:9c:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0C:3D:7E:43:F5:0E:DE:19:4F:8B:7D:DE:AD:E2:82:C8:40:6E:30
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4f:8d:8b:b8:a9:9a:12:d5:9d:6f:81:4e:01:50:31:05:07:
3c:a1:4a:f0:a9:bd:44:b0:ba:32:78:41:36:e3:65:1a:37:56:
9a:2a:37:33:d9:6c:73:c7:1a:a7:8a:3f:92:4e:4e:8f:70:ab:
3a:17:e9:22:6a:2f:46:f7:41:83:dc:89:67:9c:65:56:e7:8d:
b5:a3:f0:48:c3:8d:ce:4d:d2:d4:d8:2b:60:38:8b:ad:28:04:
24:1f:8c:0f:f6:1c:70:90:6e:8a:bb:30:61:00:6f:fc:1f:f5:
83:24:81:3a:73:69:4c:1e:be:c4:ca:67:eb:8f:c0:fe:55:82:
d7:17:0d:8a:d4:e7:d6:bd:7b:98:1e:8f:cb:80:a1:0e:bb:0b:
a3:88:bd:2d:f0:1a:79:bf:7a:01:e0:d4:63:ce:e7:02:46:97:
f5:e0:34:b2:bf:c7:0f:fd:52:03:64:e0:fa:2d:da:c5:f8:30:
47:25:08:ea:e8:86:06:cd:86:74:22:79:48:e1:a1:fb:54:e9:
e2:b7:67:fd:28:3a:dd:e8:a8:83:92:04:dd:e3:fe:1c:04:be:
bd:71:ea:bd:3e:a1:c8:1e:84:88:1a:54:06:8d:f9:75:f3:76:
b2:9b:11:2a:c1:d3:e5:10:42:72:eb:57:a9:63:2e:27:44:ee:
2f:f4:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:14 2026 by rpki-client