Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: cCdp/iARNvF5uV3zrYI5PR8IlSIT0L4s8ekjz3EnKAo=
Subject key identifier: C4:47:09:9B:C1:39:19:47:BB:15:A7:E4:6B:02:EE:06:41:43:94:8C
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 01A0CF363A5D2BA91E94816EB65BF4258335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 15EE
Signing time: Wed 23 Sep 2026 17:00:32 +0000
Manifest this update: Wed 23 Sep 2026 17:00:32 +0000
Manifest next update: Thu 24 Sep 2026 17:00:32 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: G71xKaWS832zATj4aJhoUHETyByi9nsOat/ssY1QMik=)
2: lraVilWlpRwJwEb3HMYRqrG9ypE.roa (hash: rxQGW+9bYJxaygOsVFP4v6AJEoysywtUM+KMY7B4r/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:3a:5d:2b:a9:1e:94:81:6e:b6:5b:f4:25:83:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: Sep 23 17:00:32 2026 GMT
Not After : Sep 24 17:00:32 2026 GMT
Subject: CN=c447099bc1391947bb15a7e46b02ee064143948c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:d5:f6:81:85:27:75:ef:f9:fd:5f:f9:ce:
2d:de:47:7c:5b:c2:0d:49:9f:2e:eb:98:2c:5a:e3:
fe:c5:61:7e:0a:3c:1c:f8:a9:a6:24:e8:3f:01:34:
b5:d1:94:c0:cf:75:b2:1e:26:fd:07:44:f0:a0:be:
f8:f3:43:c7:5f:53:75:a1:c5:36:76:5c:dd:71:30:
e0:cf:5a:6b:e9:ee:10:5f:34:8c:e9:d9:c5:05:8e:
95:7e:85:93:3b:10:b6:01:e3:33:39:f4:c7:72:bb:
22:db:d8:28:79:52:65:bb:b4:d2:ad:51:a2:6a:05:
de:11:c7:14:a7:f5:f3:f3:67:dc:e8:94:23:fc:1a:
cb:8b:15:29:15:3c:94:cb:6b:b6:84:03:92:2e:6a:
8e:51:ed:34:b5:62:a8:2e:f5:44:a1:cd:2e:2a:a9:
83:e4:a2:ab:cc:6a:d4:5d:b0:41:33:e0:de:8a:0a:
6a:45:24:67:aa:19:15:31:bf:b7:e9:3b:9e:98:1c:
b1:79:ea:9a:0d:7a:de:09:3e:b6:a2:94:28:bf:a7:
e5:f3:b5:98:58:b9:2d:3a:fa:7d:0f:aa:ca:e5:19:
7f:5e:44:60:ea:b0:ca:e7:a3:ee:94:40:db:34:fd:
80:8f:3f:78:d3:1a:c9:8a:8a:d8:3f:f4:3b:5b:d1:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:47:09:9B:C1:39:19:47:BB:15:A7:E4:6B:02:EE:06:41:43:94:8C
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:de:77:12:7a:9f:32:76:a4:51:25:09:15:50:40:82:7a:f9:
ed:ea:60:3d:e8:34:7a:74:04:11:ad:09:11:95:ac:03:8c:45:
12:b0:45:b1:79:56:f2:22:a6:bb:df:4e:7d:0d:67:9b:16:ba:
d7:3e:2f:90:b4:0b:17:bb:29:8a:e7:37:8b:b0:27:93:52:54:
75:f2:5a:7f:a3:eb:a1:4f:2a:18:19:ae:23:48:91:43:8e:03:
33:ed:57:ed:f4:3c:21:2a:c3:9f:7f:eb:1d:75:c3:f4:e4:2d:
f7:b8:6e:28:fc:7b:b9:96:06:87:bf:61:e1:0a:1a:a0:94:80:
a3:1f:d4:72:37:98:b9:31:b9:f5:61:a3:05:93:28:a0:ae:80:
a9:f7:91:e1:0f:ff:c1:90:c8:be:5f:7e:ad:55:c6:d2:71:32:
be:08:c9:49:62:c7:95:55:4d:af:b6:56:c1:b5:cc:4f:92:31:
f8:fc:a3:0c:a3:50:7d:25:87:2e:4f:ad:e3:3f:ba:bb:b2:1e:
c6:8c:96:74:3c:a2:78:4a:8e:00:80:86:74:aa:23:76:81:57:
41:e3:e1:6e:0c:80:50:9a:4e:c0:d3:39:42:af:2a:3c:bf:51:
6e:03:30:85:41:e9:f0:0a:c9:dd:f6:ed:cf:56:c1:7b:37:8a:
00:3b:f0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:06:54 2026 by rpki-client