Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
File: CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft (raw, json)
Hash identifier: N/xBBE+Cm+f1MKx248d1R9UiORfJRLJpfxITL0cUxgM=
Subject key identifier: 66:0E:B1:4A:9A:BD:43:86:DF:9B:82:42:0D:DB:F7:CF:A0:4E:5D:69
Authority key identifier: 08:71:19:7D:AF:A7:1A:1F:B9:16:EE:0F:D9:45:E1:C2:3A:55:D9:E7
Certificate issuer: /CN=0871197dafa71a1fb916ee0fd945e1c23a55d9e7
Certificate serial: 019FA74F8373B25E63C3826147CA54A74FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
Manifest number: 1D
Signing time: Tue 28 Jul 2026 06:00:33 +0000
Manifest this update: Tue 28 Jul 2026 06:00:33 +0000
Manifest next update: Wed 29 Jul 2026 06:00:33 +0000
Files and hashes: 1: 88EdeDABB-NjWV7m9scRSfiYFiE.asa (hash: mwR3ub0+0Dno6T1mW8HlTwvzj3E9hWCKitWBw9GKa+I=)
2: CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl (hash: Due53T91YCsnehtAHKvb4tBrgkaVHpmaOESn3MgVTH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:83:73:b2:5e:63:c3:82:61:47:ca:54:a7:4f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0871197dafa71a1fb916ee0fd945e1c23a55d9e7
Validity
Not Before: Jul 28 06:00:33 2026 GMT
Not After : Jul 29 06:00:33 2026 GMT
Subject: CN=660eb14a9abd4386df9b82420ddbf7cfa04e5d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:b4:52:9c:bd:dd:48:01:e5:96:15:ac:92:
06:a2:66:5d:f2:75:6a:36:af:64:b6:72:bb:3a:06:
c9:83:c5:9f:c2:1e:df:e7:b7:33:32:ba:3b:25:98:
34:d0:84:87:6a:b6:28:b1:d5:82:b8:ed:2f:df:aa:
00:22:bd:91:3e:0c:82:e9:b5:00:37:21:2c:b5:32:
37:1e:16:98:39:27:12:ac:d3:69:91:7b:97:1f:fd:
4a:e1:5f:70:ee:ad:63:3f:e8:b8:22:63:3d:d6:80:
fa:8b:2d:d5:08:54:4b:fd:6b:fb:c2:6c:05:67:1c:
70:93:20:85:e5:70:5e:69:98:eb:0f:79:00:01:1b:
c7:ae:11:f4:8c:7a:d1:99:8f:10:ca:c4:59:ee:91:
49:b7:21:90:c5:93:1a:81:84:53:e1:a0:64:59:9a:
46:a6:fe:50:a6:1f:06:c0:96:89:3d:68:02:41:2f:
45:e7:92:75:81:f9:1f:03:c0:36:5b:0b:8c:b4:29:
f3:d2:da:e8:a7:45:62:25:a5:5f:79:82:8d:cf:5d:
98:8b:7f:d7:6a:f2:84:e7:4d:1b:c3:cb:3a:98:6f:
c2:01:86:30:9b:e4:fd:9d:6a:26:73:0d:44:8e:f3:
15:6e:7f:4f:ec:8c:2a:9f:0a:26:5d:51:c0:8e:9b:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:B1:4A:9A:BD:43:86:DF:9B:82:42:0D:DB:F7:CF:A0:4E:5D:69
X509v3 Authority Key Identifier:
keyid:08:71:19:7D:AF:A7:1A:1F:B9:16:EE:0F:D9:45:E1:C2:3A:55:D9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fa:35:de:36:67:16:94:7d:a4:8f:19:33:f0:00:65:21:71:
47:64:2b:19:10:d7:ac:49:b1:11:fb:90:0e:9f:00:9c:56:22:
4b:76:ee:c5:9a:1c:10:a4:d5:7e:28:1d:2b:a1:70:1e:6f:53:
c8:bf:53:96:97:6c:73:05:e7:45:3a:e0:9b:a9:9c:89:0e:a3:
d5:8b:24:39:6e:8b:4a:38:90:6b:e2:ca:a3:1a:b1:1a:da:33:
51:10:af:58:8d:12:9e:5c:5a:7a:e6:6b:8b:64:85:73:66:46:
e8:2d:22:eb:ac:2b:bb:e1:2b:7d:a1:29:08:7e:4c:c2:d4:96:
2a:89:4d:01:f3:75:1c:8c:19:75:7b:f4:ee:52:4a:79:72:bd:
85:f8:40:d2:8d:b5:08:ce:3c:3c:83:67:10:aa:39:84:70:79:
0e:9f:de:76:23:21:50:fc:ab:c4:be:f1:36:e4:7c:fd:4b:72:
06:8e:46:7f:bb:c9:64:ee:20:3a:33:08:ab:93:91:61:eb:1a:
73:fa:58:e4:39:9c:3b:a3:19:3f:1d:3e:f3:d6:c1:b9:61:96:
2c:02:da:4a:89:31:ef:87:0b:ab:c0:df:f2:b6:0a:6c:6d:67:
97:d1:24:b7:a2:5c:2c:ed:24:46:72:99:fb:d5:00:3a:08:48:
15:dc:cd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:09 2026 by rpki-client