Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
File: aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft (raw, json)
Hash identifier: TZDrFgaoiiKkDtxMvgYzQdhbnK6r+r77o+sK5vtEWcE=
Subject key identifier: EB:1A:68:EF:28:FB:E7:32:3B:C6:73:D3:60:08:83:85:47:EA:41:29
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial: 019E1FED109BB00E5A1CD89B435330B6CAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 06:01:30 +0000
Manifest this update: Wed 13 May 2026 06:01:30 +0000
Manifest next update: Thu 14 May 2026 06:01:30 +0000
Files and hashes: 1: GtMCe24ngv6kwkwMfciDCRzIGbc.roa (hash: HPYG+bYgN4LrxtIhEXRuNsczF+K8PHsFJkbYTipolY0=)
2: aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl (hash: QWnz/N1eQwwboUcNIFhqJ/pSBp3xfaXCK3419+7y7b8=)
3: wrOqy5HuCTVkCe5fRVTajU3ehvY.roa (hash: Fl62VKf9eEMW25X6taoDhAVNcBPYuEGUkuBrbI0k5Pc=)
4: zu9vON3GTVdkXcFBWXM21OtK-sY.roa (hash: oRLggeMjKA/oXwnbtC/44rxG30iQYGETUOL7zYRaXxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:10:9b:b0:0e:5a:1c:d8:9b:43:53:30:b6:ca:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
Validity
Not Before: May 13 06:01:30 2026 GMT
Not After : May 14 06:01:30 2026 GMT
Subject: CN=eb1a68ef28fbe7323bc673d36008838547ea4129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:8b:5f:77:a4:81:5f:79:bc:2a:1f:d0:fc:
71:a2:29:7b:44:1b:37:c6:07:d1:f7:66:cb:d8:41:
e3:c2:60:2e:da:97:18:b1:7f:de:c3:cf:d2:36:e5:
5e:4f:49:c1:6a:13:0f:e8:f9:da:46:5e:b8:a0:75:
22:f5:0b:7e:58:d5:91:1f:3a:a8:df:a2:97:5b:bb:
41:40:19:ee:15:5d:d3:fc:83:bb:16:d9:33:c4:c6:
dc:fd:9c:e0:4c:9b:f4:41:58:ce:5e:eb:2e:63:10:
a9:07:2c:7f:69:59:29:b1:17:49:91:cc:df:a5:69:
ce:b1:94:f3:af:9e:f9:bb:6e:96:4c:b2:fc:98:a9:
19:f7:fe:90:6a:b4:47:f9:d5:f4:97:c9:fe:0c:ea:
f3:78:11:c9:34:20:bb:86:a3:05:e3:07:6c:a3:08:
94:55:de:a2:e6:9e:79:71:c5:e8:a1:df:72:38:5b:
da:f6:69:60:d2:21:86:64:a9:29:d5:78:92:25:8c:
2f:8a:7a:98:da:c5:dc:de:89:ec:ae:6a:a5:d1:fd:
62:17:41:33:66:73:dc:b3:c0:f8:70:7b:00:3b:07:
07:d3:40:3a:98:d9:07:4d:ef:a3:b2:96:01:48:73:
5c:b7:1e:c5:8f:d1:a4:17:d4:98:c7:5a:60:34:00:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1A:68:EF:28:FB:E7:32:3B:C6:73:D3:60:08:83:85:47:EA:41:29
X509v3 Authority Key Identifier:
keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c6:90:11:6a:05:f4:55:25:60:b1:b3:f2:85:0e:34:9c:b4:
1f:26:34:f9:89:7d:c5:be:94:d9:23:63:2e:6b:1e:1e:87:d1:
02:c2:b9:56:56:31:9a:e8:eb:2e:00:62:67:5b:f9:2a:97:79:
a3:3e:e0:2b:3e:d7:c6:48:64:22:7c:89:6e:c2:b5:a6:01:5f:
f6:9f:de:82:ef:f2:ee:52:d1:46:ff:0c:68:d0:0a:b4:94:20:
9c:ed:25:d6:de:1e:2a:eb:43:24:d1:f2:8a:fb:21:a2:cc:39:
d2:c0:eb:d8:52:ce:20:a2:a7:58:e1:00:44:3b:f7:67:2d:8c:
9e:6c:f5:be:48:dc:82:be:64:3c:86:04:28:1b:be:93:5a:18:
39:1e:97:3d:53:05:16:81:1b:10:b4:32:16:02:0b:1d:fa:14:
fd:82:6d:41:fa:53:fa:fe:0a:8b:0c:b9:b3:5e:ff:85:96:e4:
7e:a8:d5:25:fe:3a:2a:0c:44:ad:4d:28:7d:7f:2d:a4:e4:dd:
ff:75:08:ce:fa:00:0e:98:f0:d5:b1:0d:1e:a4:78:2c:8f:d1:
6e:b5:02:8c:1f:e6:64:af:98:63:45:8d:93:aa:92:b3:fd:d2:
86:09:d7:42:90:8d:53:28:56:70:20:62:6a:95:78:11:fa:f0:
dc:0e:1f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:36:04 2026 by rpki-client