Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: DqGEag7btTaCaJPlWQcmLU4R1mnsvpRtJMAtTOxzjxM=
Subject key identifier: 71:E1:20:F1:50:3C:D2:F9:5C:B9:88:64:39:D7:A9:E7:5C:72:52:C2
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 019F90914DF56BEE50B2D0F8580EB5C318D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 13FC
Signing time: Thu 23 Jul 2026 20:01:09 +0000
Manifest this update: Thu 23 Jul 2026 20:01:09 +0000
Manifest next update: Fri 24 Jul 2026 20:01:09 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: qCee1HjAn9qlBGwVJG8HOUtxxtBYAmCcelFVJ0jdrgs=)
2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:4d:f5:6b:ee:50:b2:d0:f8:58:0e:b5:c3:18:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Jul 23 20:01:09 2026 GMT
Not After : Jul 24 20:01:09 2026 GMT
Subject: CN=71e120f1503cd2f95cb9886439d7a9e75c7252c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:b7:89:42:23:68:98:c1:f7:8f:6b:0c:46:
49:d8:9f:c9:07:4e:4b:ea:0f:1e:77:2f:e6:39:5f:
d6:6a:d4:be:10:da:c5:36:85:e7:24:b5:a0:61:96:
ab:a6:0c:46:17:96:29:a7:74:1b:2e:1d:15:b3:81:
72:29:51:46:ff:9a:89:02:bc:6b:45:22:00:0c:28:
0a:4c:51:82:23:c9:c2:98:0b:77:2b:34:cb:1f:8f:
68:1b:a9:dd:91:31:ba:fd:64:b3:f7:48:b4:ab:76:
08:de:5c:4e:54:14:a0:38:e4:8f:50:c3:fe:f4:cd:
e6:8a:55:ec:06:f3:81:55:0a:b7:c1:88:01:e7:00:
5f:fa:ec:86:dd:b1:7b:5c:47:3c:5b:b0:14:1c:74:
58:9f:fa:28:e0:d1:24:1b:a5:9a:bb:37:20:02:df:
45:16:29:a0:c4:88:67:cf:c1:00:9d:41:75:c6:bc:
72:ff:91:ce:16:7a:ba:99:71:60:4a:9f:93:f7:92:
bd:74:fd:a6:29:68:13:90:11:a2:b2:6d:1f:5e:34:
87:6a:13:a0:d3:f5:45:ba:64:b2:5f:c8:05:bc:e3:
5e:61:8d:80:a6:e8:8e:36:da:b1:75:8f:16:d5:d3:
25:e3:0b:17:82:94:7a:1e:87:53:7b:30:ad:d3:b3:
88:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E1:20:F1:50:3C:D2:F9:5C:B9:88:64:39:D7:A9:E7:5C:72:52:C2
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:94:ad:d8:1a:1c:33:51:eb:fc:1b:34:be:19:c6:36:6b:56:
cf:c7:31:00:af:3b:ed:bc:37:6b:c1:f0:0a:c8:76:22:4e:16:
9b:81:95:46:73:11:97:db:08:a3:28:be:f1:c5:5d:9c:7d:5d:
31:fd:bd:e4:d7:09:c4:f0:a5:ea:9f:5a:50:42:25:a3:63:f1:
a4:26:6b:19:cc:d1:0d:e8:ff:07:65:e9:4c:1d:e0:bb:c2:b4:
fa:74:b3:3a:95:17:30:7d:88:52:a2:e3:a5:5a:5c:7a:44:2f:
9c:8f:58:24:b1:b6:9f:96:59:03:e0:6b:b4:bc:18:b0:22:7d:
e6:be:8f:f3:73:9a:9b:3d:f2:95:f5:fb:b6:d2:88:82:42:c9:
9d:d1:57:c5:ab:3c:ef:35:26:cf:50:69:21:29:e7:77:1b:d3:
11:fb:90:3a:ae:d0:ac:0a:54:f1:e0:1e:e9:2f:01:53:e1:86:
14:93:4d:e1:72:28:de:22:ee:76:ba:03:99:6b:69:9f:32:2f:
69:80:93:a4:94:a2:0d:ea:fa:63:1c:1c:e2:1e:08:ed:01:9f:
10:5d:33:14:20:dc:84:47:44:71:f7:99:ca:ea:cb:ae:1c:1d:
10:25:82:59:c6:0a:9d:63:be:71:c5:78:93:51:12:7a:90:46:
70:87:ba:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:24 2026 by rpki-client