Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: Jn+e2gsS3xeRNf9zTtcU6rrPLJRQByR98n3YJE1I1Pg=
Subject key identifier: FE:DC:E7:5F:61:A0:17:62:43:A1:14:C7:B7:74:20:23:ED:57:9D:F1
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 019E1BD93A7B8B93FF36C49D957136918E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 133B
Signing time: Tue 12 May 2026 11:01:21 +0000
Manifest this update: Tue 12 May 2026 11:01:21 +0000
Manifest next update: Wed 13 May 2026 11:01:21 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: qFqh3fO68O16pG7Q4jRH/4wv3a1BO5KdeHCd31aA0Vk=)
2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:3a:7b:8b:93:ff:36:c4:9d:95:71:36:91:8e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: May 12 11:01:21 2026 GMT
Not After : May 13 11:01:21 2026 GMT
Subject: CN=fedce75f61a0176243a114c7b7742023ed579df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9d:f1:33:d2:84:4e:6e:98:37:c7:37:1d:48:
7c:67:f6:6d:77:3a:f0:b3:a4:e3:9b:2c:b6:37:fc:
e6:bb:64:97:3d:c5:d4:8e:9f:92:66:c2:0a:d1:b0:
8d:2c:8c:ae:b8:f6:f0:ee:77:0e:d2:20:46:32:17:
48:7a:50:52:8d:36:7b:62:27:18:d7:83:07:78:ef:
0f:17:9f:74:ad:1b:1c:0a:03:7e:01:80:c3:7a:4b:
7f:b5:ec:0e:ea:ea:5a:19:3b:3f:eb:e0:85:b2:56:
f0:c3:eb:c9:46:fc:54:e2:22:a5:27:a9:d3:58:17:
84:41:96:eb:f6:d5:b7:cb:1e:9b:8e:d6:b9:b5:4a:
ca:92:f8:19:40:07:97:59:a2:4a:59:23:36:e1:e2:
23:6e:10:db:70:79:de:80:50:0a:e3:32:78:68:7b:
80:e6:14:35:1c:51:89:a6:de:93:f7:fe:dc:1e:68:
a7:37:01:e1:f1:a5:e1:15:9e:a2:64:8c:72:22:b1:
76:66:68:97:1d:79:fa:09:24:04:9b:8a:05:04:4b:
db:2e:94:0e:e2:b7:18:b6:b1:6e:b4:9f:fa:02:55:
2e:13:d0:02:2f:1d:8c:1e:ce:2b:b4:ab:c9:b9:28:
e5:50:84:c2:65:51:fd:aa:6c:c7:d1:d5:25:a1:61:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DC:E7:5F:61:A0:17:62:43:A1:14:C7:B7:74:20:23:ED:57:9D:F1
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:32:2c:6c:49:df:84:26:fb:14:a5:b8:a4:8c:97:aa:07:77:
79:91:9b:d4:4f:06:bc:c5:5a:db:6f:f9:0d:b2:e2:7f:79:b9:
50:a6:25:17:f3:54:3d:1e:78:f7:0c:05:e5:82:ce:f7:8b:d0:
8a:e1:32:e9:a4:38:ba:40:6a:74:0b:4a:05:b4:ea:82:a9:39:
ea:ba:11:48:97:a9:7f:d1:ed:c3:b7:7e:e4:e6:af:2e:e9:0c:
22:9b:36:a4:0c:b3:fa:36:1d:87:9d:b3:75:27:79:5e:50:c6:
80:3d:aa:e6:d7:64:38:4a:f7:06:e2:fd:8b:ff:51:b2:61:d1:
71:d6:35:09:6e:cb:1d:58:9a:d7:0b:80:4c:d8:86:17:ee:ef:
85:a4:65:3a:76:9a:8f:b5:5f:e8:00:9c:dd:f7:cc:a7:04:5a:
d3:26:9a:5b:08:33:2a:2c:0a:e4:78:3f:85:9d:94:9a:70:7b:
46:0a:98:a1:7e:ec:6f:20:38:03:1c:6d:15:b4:75:54:d2:ab:
27:3d:80:b4:34:92:e4:fa:95:69:ee:c5:d6:2f:b5:b0:52:67:
77:20:b8:83:99:7f:47:39:5c:16:3d:ef:98:28:44:a0:a3:03:
bc:6b:d0:a9:77:15:e2:39:3b:db:12:7e:70:a1:20:54:36:5f:
44:e4:60:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:47 2026 by rpki-client