Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: P0r1N5bSV6MZAlwDj7oGW4kdfy6zW3DT253kr2pv/Co=
Subject key identifier: CA:99:55:F4:AB:F8:F4:09:27:C7:61:EA:93:06:D9:16:C3:76:FF:CD
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 01A0CF360B5AB2A75A0A885DD8C3E583860B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 14A1
Signing time: Wed 23 Sep 2026 17:00:20 +0000
Manifest this update: Wed 23 Sep 2026 17:00:20 +0000
Manifest next update: Thu 24 Sep 2026 17:00:20 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: 84wwUG6cb0VwMBSA96a518cPUdzh5SdxQ/ORUO+AhPk=)
2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:0b:5a:b2:a7:5a:0a:88:5d:d8:c3:e5:83:86:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Sep 23 17:00:20 2026 GMT
Not After : Sep 24 17:00:20 2026 GMT
Subject: CN=ca9955f4abf8f40927c761ea9306d916c376ffcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:d5:97:ad:c0:f9:4e:82:a9:00:91:2c:8b:
82:06:d2:0b:d4:08:5e:7b:e4:20:db:3b:91:9b:4f:
86:e4:1e:a3:f6:c3:f2:37:74:b0:60:c2:2c:90:73:
2e:a2:8b:ce:1e:f1:e6:b3:b2:b7:33:7e:a6:2c:2e:
18:4d:1a:2d:0e:fb:3f:fe:46:0b:12:66:b2:14:44:
86:f1:01:c0:7e:19:ee:1f:f0:4e:70:5f:7f:80:e3:
ba:70:a7:4b:95:b1:97:a6:5c:22:4e:0e:ac:b3:4b:
2a:d8:ba:00:6e:0d:60:6f:d7:97:9a:b0:78:32:c5:
7b:4d:cc:13:7f:71:86:68:6a:1a:02:94:77:35:7b:
4f:17:6c:52:33:e2:09:58:2a:5d:cd:c6:16:a7:82:
0e:36:be:72:ac:a3:5b:1e:91:85:c0:11:18:96:e4:
57:98:a4:f1:aa:80:d4:fe:b4:70:76:de:fb:04:1c:
5c:c7:d8:91:ee:8d:21:e5:17:fd:a8:e6:63:15:98:
7a:0b:0e:a2:b2:e3:87:cc:9c:49:42:dd:aa:53:62:
92:7a:eb:e9:0c:72:d6:c8:60:46:76:65:73:99:a4:
e3:4d:73:fd:80:ae:8d:d9:70:32:57:d0:94:80:4a:
5b:b0:55:77:3d:8a:65:65:39:bf:62:86:f9:d5:53:
57:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:99:55:F4:AB:F8:F4:09:27:C7:61:EA:93:06:D9:16:C3:76:FF:CD
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:08:fc:64:3f:6a:0d:03:23:79:aa:1a:45:aa:e7:e5:df:a6:
d8:f1:90:31:57:0b:6f:19:8e:61:75:c3:98:e3:6e:dc:5d:3b:
92:af:bb:d2:df:43:6c:07:af:29:fd:5a:9f:c4:a1:89:f9:2b:
c9:73:aa:ca:0f:5b:f1:ee:24:df:7c:c7:5a:44:14:7a:b9:1a:
1f:28:4e:e9:a7:40:1d:70:cb:aa:57:fe:ba:50:f4:00:22:91:
66:cf:38:fc:a5:51:f3:61:93:d2:ac:bf:dc:86:d7:c4:97:f0:
be:81:dd:b0:8b:e0:56:29:3d:d4:20:fc:26:60:bd:ef:18:07:
9f:bf:13:3e:ce:22:80:07:d2:10:50:1e:ec:a1:5e:1a:6a:94:
1b:f8:5a:25:54:11:de:d4:76:d0:d5:5b:f0:0b:3b:e7:d5:a7:
6e:fa:c3:77:f4:04:11:17:eb:69:ff:03:16:9f:ac:eb:f9:a2:
f2:c8:3d:9a:ba:4e:35:aa:91:9c:6b:02:d4:8f:d6:77:ae:2e:
c1:72:9c:b8:81:43:cc:3a:ed:82:bb:07:ab:40:f9:a0:7a:d4:
49:de:48:6d:d3:06:cd:10:91:9e:48:ce:ef:06:ea:95:02:c7:
0f:c9:aa:03:d3:1d:cc:10:19:60:72:1d:a9:43:59:ce:3c:ed:
83:69:a7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:40:31 2026 by rpki-client