Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
File: CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft (raw, json)
Hash identifier: 06aZ9MlkRCC5hO96VXlwSh0vik2wDfqAzGebhRUItZ8=
Subject key identifier: 8F:8D:09:B6:3A:AB:8D:11:62:13:B6:ED:EC:C9:6A:B4:68:BE:21:8C
Authority key identifier: 08:71:19:7D:AF:A7:1A:1F:B9:16:EE:0F:D9:45:E1:C2:3A:55:D9:E7
Certificate issuer: /CN=0871197dafa71a1fb916ee0fd945e1c23a55d9e7
Certificate serial: 01A0C70E711533A87FA287F8F1869C8447E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
Manifest number: B2
Signing time: Tue 22 Sep 2026 03:00:07 +0000
Manifest this update: Tue 22 Sep 2026 03:00:07 +0000
Manifest next update: Wed 23 Sep 2026 03:00:07 +0000
Files and hashes: 1: 88EdeDABB-NjWV7m9scRSfiYFiE.asa (hash: mwR3ub0+0Dno6T1mW8HlTwvzj3E9hWCKitWBw9GKa+I=)
2: CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl (hash: ofwMFdhXBToODBjjROQhuRMfm+Ye3zMVor02o/BsVkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:71:15:33:a8:7f:a2:87:f8:f1:86:9c:84:47:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0871197dafa71a1fb916ee0fd945e1c23a55d9e7
Validity
Not Before: Sep 22 03:00:07 2026 GMT
Not After : Sep 23 03:00:07 2026 GMT
Subject: CN=8f8d09b63aab8d116213b6edecc96ab468be218c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:e0:4d:97:e1:ce:d8:97:5a:24:c7:bd:c5:
3e:79:9b:0a:d2:2e:70:23:9f:54:db:98:45:e0:f8:
44:ba:32:4f:a6:eb:19:9e:9d:0d:d5:7b:20:10:23:
e8:6d:88:fe:5e:e2:5b:61:4a:b5:58:1d:1e:76:02:
ef:85:9d:6e:e3:33:18:1c:be:99:8e:3d:8b:02:e8:
87:42:aa:f3:97:19:7d:7d:b2:10:fd:28:22:11:f6:
a5:a0:d6:6e:74:9f:49:2c:14:d9:3a:77:f8:84:1e:
e0:aa:46:f4:95:e9:37:eb:fa:c6:be:a5:65:c9:90:
f4:7b:30:b0:89:0c:8c:60:71:5c:f5:cc:67:03:39:
04:c5:50:12:da:6c:23:47:7c:e3:b5:22:5c:61:eb:
39:83:28:ff:a4:f2:dd:3b:83:5e:dc:04:57:a5:ce:
fd:d3:35:de:49:64:50:84:ef:77:20:2f:9c:98:2a:
0f:04:a5:f6:21:a7:0b:65:ec:b0:1a:40:c6:30:12:
a5:e1:c4:ac:09:04:0b:3c:80:ce:a0:84:74:88:03:
78:3c:6e:f3:4b:eb:38:a5:09:c1:10:61:47:78:fd:
34:52:db:50:c7:0a:1b:0f:2f:fd:62:30:45:0d:23:
74:1b:1e:a7:b9:12:9c:36:b2:6c:fc:11:d8:5c:6b:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8D:09:B6:3A:AB:8D:11:62:13:B6:ED:EC:C9:6A:B4:68:BE:21:8C
X509v3 Authority Key Identifier:
keyid:08:71:19:7D:AF:A7:1A:1F:B9:16:EE:0F:D9:45:E1:C2:3A:55:D9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:53:0d:3d:b0:a8:6d:87:e4:14:c2:f1:21:81:17:12:eb:c3:
df:f5:52:35:de:12:21:d1:e9:f1:a3:15:d6:f1:96:fd:24:49:
8d:8a:c3:5a:6a:6b:b0:e5:29:2d:d7:85:c7:a2:6e:6d:35:d4:
16:32:df:e3:78:31:5c:64:7f:fc:d4:f9:b1:99:10:2a:d9:a2:
e7:64:4b:9b:84:80:fc:43:d1:97:e3:60:71:7d:29:4a:34:48:
7f:70:c1:14:34:53:1b:e2:2e:72:a0:98:67:be:3a:96:eb:d9:
91:70:bc:90:08:6d:5c:2d:da:9f:a8:f5:33:b2:c3:f8:4a:80:
38:4c:cf:b9:8d:6e:40:94:81:fa:5d:6e:36:44:38:41:df:29:
89:f7:f2:06:db:66:b0:b1:63:2c:55:6f:75:42:a6:8d:1d:70:
2f:6c:b5:89:62:06:26:9e:14:50:14:09:c7:2a:00:ea:20:28:
e2:8e:21:d2:5e:1b:13:42:aa:59:80:7a:82:15:31:88:9a:b9:
87:af:64:7b:a8:fc:e0:45:61:0a:aa:3c:a7:5f:4f:05:67:66:
85:14:f8:55:8c:6a:35:43:d6:ec:7a:7a:1b:40:f3:2f:f8:03:
f7:e2:c6:4e:41:85:d6:9a:bb:90:cf:ea:8a:70:ea:f2:fb:05:
8b:ae:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:50:41 2026 by rpki-client