Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: GoEVkZagYAUGK6UCiLTaaMISLwigbbLGTB+VPbwoHjc=
Subject key identifier: 9F:07:41:36:BD:BD:DF:02:32:29:2C:0C:C2:58:7B:8F:C7:05:7E:8D
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 019D2695DD571561AEF402198E7749104CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 12BC
Signing time: Wed 25 Mar 2026 20:00:48 +0000
Manifest this update: Wed 25 Mar 2026 20:00:48 +0000
Manifest next update: Thu 26 Mar 2026 20:00:48 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: un8/xCToh0nqTDWnFjFL8g9R+PT/sbsmNn86j94jq+g=)
2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:dd:57:15:61:ae:f4:02:19:8e:77:49:10:4c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Mar 25 20:00:48 2026 GMT
Not After : Mar 26 20:00:48 2026 GMT
Subject: CN=9f074136bdbddf0232292c0cc2587b8fc7057e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:5a:fe:95:6d:62:1c:79:c7:01:f0:a9:7d:
6c:b1:78:26:eb:20:4e:b8:28:43:a6:a5:ca:a5:cf:
90:d3:94:b0:f5:a7:67:83:0f:6a:91:90:06:6f:ce:
3f:fd:56:65:fb:8b:0f:70:dc:a0:51:85:68:2c:d2:
ab:bc:05:85:9f:16:5e:af:2d:48:0d:d2:e0:1c:37:
a9:dc:e3:c3:f8:a5:db:a8:37:b5:7b:20:c1:01:8e:
43:88:6b:66:9b:b2:03:8e:e7:fd:b2:99:14:38:fd:
4e:05:af:88:27:2a:5c:8a:c6:60:99:6f:d4:ed:1a:
73:bc:97:1d:83:4f:97:dc:e9:5f:c5:f0:88:8f:48:
20:db:1b:da:d8:dd:cb:57:ee:98:b5:fb:15:b8:c1:
c1:85:ab:08:46:2f:f6:90:35:9f:90:39:54:3d:f4:
d0:7b:80:28:ea:13:ac:d8:fc:6c:a1:ab:11:09:c4:
f5:4f:30:72:7a:44:5a:32:cc:93:6d:3e:1d:86:d2:
2d:69:fc:ea:c7:da:86:e7:e0:f4:8a:54:e7:bd:e9:
70:db:62:88:85:e0:8b:d4:7a:b7:1e:7f:21:c4:5b:
fe:e4:87:4d:16:1d:0d:97:f4:71:4b:da:6a:11:fb:
d8:9d:7c:9e:e9:f3:6c:1d:2f:c4:7e:26:60:e1:94:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:07:41:36:BD:BD:DF:02:32:29:2C:0C:C2:58:7B:8F:C7:05:7E:8D
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fe:2d:52:c2:c0:a9:05:e8:96:41:49:fe:6f:54:46:e3:a4:
a7:79:b4:63:4f:19:7d:37:53:db:10:b7:76:db:a6:93:3a:20:
74:f9:38:ae:90:e7:35:b9:ae:01:a9:60:9f:47:e7:da:1e:b7:
d6:61:68:d2:dc:67:77:db:5a:bb:c5:08:b8:62:34:b7:0f:1c:
8c:bc:e1:28:4f:eb:0b:5c:d9:8d:d3:e0:41:18:9c:a1:81:e8:
21:53:7b:f5:99:8a:78:f4:4d:54:c0:93:be:a3:00:d1:eb:cd:
2c:c9:d1:a6:7c:af:f7:d9:ae:c1:8c:31:56:30:07:bc:8b:de:
19:48:9f:7a:6b:3f:20:d0:c8:14:ae:8e:b0:28:16:46:ad:92:
11:dc:9a:8f:50:d2:a4:7d:e2:e3:34:31:f1:86:ed:46:b3:e7:
e6:a7:20:e9:7e:e4:07:ec:db:5a:19:3f:19:0f:76:81:82:69:
e3:b5:62:d7:c4:0c:1e:97:4d:3d:4f:c1:7b:8f:16:e1:62:a4:
c8:0e:26:63:22:9f:80:1c:1a:6d:47:ee:36:ce:95:97:5e:7b:
cf:3a:8c:b4:c7:49:4a:d4:a5:c8:3f:04:99:89:c9:75:96:e0:
84:83:5b:f4:c4:95:c5:48:91:0a:de:11:f2:7b:43:bd:12:b4:
c6:bd:6e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:51 2026 by rpki-client