Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
File: aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft (raw, json)
Hash identifier: Iar2vtY0/8q8/ByYd8TFGYiF7QM8GFqgZLtTXIb1bU4=
Subject key identifier: 22:B1:CA:F2:18:1A:A1:97:A7:12:FA:05:6C:8F:2F:99:7F:4F:F5:CA
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial: 019F93FFDB15086F5A0D8BFCC1A8CC03E9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 12:00:46 +0000
Manifest this update: Fri 24 Jul 2026 12:00:46 +0000
Manifest next update: Sat 25 Jul 2026 12:00:46 +0000
Files and hashes: 1: CamWbKBf5Y3VteBO8Uc0pWfEITM.roa (hash: bZwRo4lW5e/6ZSgpxGpqz9dkfFjM0XJ3qXKXeNNuTmU=)
2: GtMCe24ngv6kwkwMfciDCRzIGbc.roa (hash: HPYG+bYgN4LrxtIhEXRuNsczF+K8PHsFJkbYTipolY0=)
3: Z6Gv7kzMWkBhlCZCxtu-CHOgLg0.roa (hash: qOPuRyys5qP4i7eLJm+jp6fsbykedjTSR4JfxXE5g4g=)
4: aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl (hash: OeS/UXBIoC1Ewh9iKHnzTm1OAak0tzhLWb3XZJHH44Q=)
5: wrOqy5HuCTVkCe5fRVTajU3ehvY.roa (hash: Fl62VKf9eEMW25X6taoDhAVNcBPYuEGUkuBrbI0k5Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:db:15:08:6f:5a:0d:8b:fc:c1:a8:cc:03:e9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
Validity
Not Before: Jul 24 12:00:46 2026 GMT
Not After : Jul 25 12:00:46 2026 GMT
Subject: CN=22b1caf2181aa197a712fa056c8f2f997f4ff5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:cd:5a:7b:54:8e:31:64:d5:98:86:53:43:
4e:e1:22:3a:7d:fe:fc:b5:64:a3:f8:d9:87:77:0d:
30:fb:52:62:90:b0:8c:e9:a6:56:5c:d1:d2:3d:7e:
b0:bd:25:ec:06:29:51:41:2d:8a:59:eb:71:ca:be:
9c:e9:fd:e9:d6:b6:92:26:17:19:d4:be:99:16:95:
cc:dd:6d:4c:66:fe:75:da:06:7b:4f:5a:2d:5d:a3:
d2:1d:c8:40:d4:19:17:09:e6:ac:a6:21:65:85:e7:
43:30:e5:ac:4b:7a:b4:83:9e:19:9a:51:a1:f6:74:
7d:e6:0e:3e:07:57:e2:da:2a:bf:1c:c4:4e:ad:06:
ff:07:f2:77:09:d1:b7:c0:84:9c:5d:0d:6a:5d:02:
15:88:ab:27:3f:ba:af:42:2f:9b:41:c2:50:03:ec:
92:63:e8:12:9d:ef:12:8e:95:23:f8:9e:ae:8a:57:
45:bc:be:83:51:3e:33:65:8a:0f:fa:de:e1:88:a7:
27:d7:f1:35:76:77:69:a1:c8:32:ec:f8:ed:00:0f:
16:97:97:7d:b5:e4:2a:39:e2:1c:92:e8:52:81:d9:
93:da:ec:21:83:8f:e6:ae:18:08:a0:1f:1f:64:6b:
c0:ba:b4:e1:7b:cd:52:32:fa:f2:4b:4a:f5:24:f7:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B1:CA:F2:18:1A:A1:97:A7:12:FA:05:6C:8F:2F:99:7F:4F:F5:CA
X509v3 Authority Key Identifier:
keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:40:f6:a6:d7:46:4c:ab:5f:47:c4:ac:2d:71:dc:22:4a:48:
e9:cb:42:8f:80:a2:8f:c6:2b:e2:85:53:db:b4:33:18:34:a5:
61:ed:4d:87:ac:1a:8c:a1:60:be:c0:2c:6e:b3:e8:cf:b2:9e:
55:b0:87:2a:9b:19:73:fb:5e:64:0b:05:a1:c5:77:88:19:87:
be:eb:fa:7a:85:a4:5a:87:3f:6c:45:38:82:74:28:f1:e5:02:
2b:34:68:53:ca:18:6e:54:44:ac:b3:c9:48:56:af:19:83:37:
b2:74:bd:aa:4e:33:9a:fe:e2:1a:6d:b4:79:45:1c:1f:54:bb:
01:0b:79:1c:2b:c6:95:21:f3:22:bb:4c:1a:d7:9b:51:ed:e6:
97:77:08:b2:94:4f:c2:28:6a:c9:ff:44:d9:25:aa:6a:76:04:
c2:fe:c3:6d:b1:2a:08:37:6b:6a:56:1b:0c:15:01:f8:ec:75:
35:f8:4e:ac:95:1e:d7:e8:93:81:9f:db:7e:cb:b5:1e:e7:6b:
3f:a9:7c:2c:37:f0:33:ba:d1:7c:e0:e7:da:86:5e:9b:93:33:
63:26:75:da:05:82:67:1c:23:7c:c4:68:98:5b:59:27:6a:f5:
e8:3c:77:e3:9b:82:a6:92:f9:2b:a0:26:eb:81:24:f2:e1:c6:
a1:00:2a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:36 2026 by rpki-client