Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier: lQhUEBM9pxrGZ7Umkf5We3p9ut7c6titWYeJBumLmaQ=
Subject key identifier: 50:2A:2D:E4:0E:07:56:A3:A6:0F:4D:B9:5A:13:8B:2C:94:3D:06:73
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 019CA9B38A76CA792CFDF59F5BFCB498D7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number: 1585
Signing time: Sun 01 Mar 2026 14:00:41 +0000
Manifest this update: Sun 01 Mar 2026 14:00:41 +0000
Manifest next update: Mon 02 Mar 2026 14:00:41 +0000
Files and hashes: 1: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: MWFTmaCVtS7mtMFk8d1kk+AZOKvj1pgJEqCsqy7yX74=)
3: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
4: ZUC7Id2Okv2eHSSZdTBUkg-VCng.roa (hash: /lduSjfq1UA9xfg3a0WqS2j8mYLYGsas2BzQFm6I+Kk=)
5: iMMDQPxmEunva-6qW_k1RXMrqUw.roa (hash: DVv/oLi42dPU7BobBX5SMJzy6a3Iz8NREOdCrON/nfA=)
6: mEdwgIPRh23OxSoHlQNJuRMghjc.roa (hash: F8DBsuD0LXSZtLRp2HPMhvbe4OQSD53Wc5fBou6rnO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:8a:76:ca:79:2c:fd:f5:9f:5b:fc:b4:98:d7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Mar 1 14:00:41 2026 GMT
Not After : Mar 2 14:00:41 2026 GMT
Subject: CN=502a2de40e0756a3a60f4db95a138b2c943d0673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:e5:9d:c7:c4:d5:19:1e:a7:1b:5c:74:ad:
1f:ad:68:a5:dc:7a:f3:df:99:14:94:cc:09:cb:d6:
44:35:35:d8:90:0a:79:7d:69:18:6e:0f:6c:4d:4d:
00:5e:47:be:1d:44:9e:84:60:77:38:ca:f2:11:b3:
25:11:f0:59:bd:43:19:0b:a4:c4:53:54:88:2c:a5:
aa:b6:8c:0f:85:52:7d:50:44:d2:e3:1c:e8:02:34:
90:2e:9b:aa:15:bf:56:be:0f:5a:00:2e:62:c7:e6:
5c:8d:28:b4:50:30:8c:ba:27:80:b5:a2:5b:0c:38:
b7:c3:a0:c0:14:03:96:81:cc:c0:6b:7c:2d:59:df:
8f:9a:92:11:d3:08:81:f2:ac:98:fe:c1:e1:3d:0a:
7d:5e:71:e7:73:41:9c:69:9f:36:02:82:e6:07:ce:
be:e6:17:75:ad:c1:ed:80:9f:65:1b:1e:c6:d5:2d:
ee:ad:93:e0:4a:02:30:b9:56:ed:3d:25:11:b5:69:
9d:56:a6:92:ad:89:0e:54:0f:75:db:84:f9:dc:7e:
1c:a8:00:b5:3f:7f:c5:2a:50:35:ba:f0:b7:c4:c9:
35:e0:f4:27:99:09:fe:b9:0a:20:ac:92:eb:bf:00:
88:f8:95:9e:b5:00:74:3d:be:8f:71:29:5b:f0:ad:
dc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2A:2D:E4:0E:07:56:A3:A6:0F:4D:B9:5A:13:8B:2C:94:3D:06:73
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ba:b8:55:1e:15:d0:54:e9:25:bd:c9:b3:f7:c8:e5:d6:eb:
16:a6:6c:bd:02:f8:11:b4:dd:a6:8c:d0:27:4e:04:d0:e7:fb:
02:17:f4:d4:a4:d5:81:7d:fd:e9:1d:10:07:5c:aa:af:23:26:
a8:ff:8c:ff:f0:14:05:ab:f8:18:d2:f1:9f:2a:22:47:bc:02:
3f:b0:bd:7e:f3:6b:00:64:ee:af:c4:c9:01:8d:bb:aa:be:90:
a0:92:0c:d2:a6:41:a2:1d:03:d3:b8:1c:30:48:7f:f1:b8:60:
d6:d7:f5:74:a6:23:5d:fd:bf:07:cc:a7:d3:48:a3:69:c3:1a:
22:6a:0b:5c:df:60:a2:10:46:48:3f:ac:cc:76:5e:42:e3:78:
fa:d2:2a:f5:fa:57:37:51:f3:96:92:ad:b4:14:3a:dd:fc:66:
c9:10:74:0b:51:fe:11:d3:e1:2e:cf:ca:2a:c5:20:03:78:b7:
ed:49:25:7d:07:35:aa:07:09:f2:0f:a8:5c:bc:00:74:ff:0a:
43:ba:98:49:6f:12:54:ad:1a:31:03:a8:79:64:2c:02:a4:6a:
39:fe:06:6a:07:a1:e2:60:71:8d:81:05:87:5d:02:57:5c:a8:
1b:b1:dc:4f:ab:b9:dd:97:7b:85:bb:db:7b:df:2b:19:77:40:
dd:61:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:22:04 2026 by rpki-client