
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: f+E/0hsdpOozqYv+3s3YbrOAv9R4MSuNrbQgrN6JP3c=
Subject key identifier: 24:88:D7:D7:AC:2A:59:2B:E9:F9:55:4D:4D:40:13:32:16:7C:D8:F1
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 019E1DC70944E18937BCAF903ACF6DC571C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 1489
Signing time: Tue 12 May 2026 20:00:43 +0000
Manifest this update: Tue 12 May 2026 20:00:43 +0000
Manifest next update: Wed 13 May 2026 20:00:43 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: ajTC/+ppZ878dyc+vAjm2Ib2P4WFArY8udfxbZemxSU=)
2: lraVilWlpRwJwEb3HMYRqrG9ypE.roa (hash: rxQGW+9bYJxaygOsVFP4v6AJEoysywtUM+KMY7B4r/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:09:44:e1:89:37:bc:af:90:3a:cf:6d:c5:71:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: May 12 20:00:43 2026 GMT
Not After : May 13 20:00:43 2026 GMT
Subject: CN=2488d7d7ac2a592be9f9554d4d401332167cd8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:19:73:ce:e5:22:ee:5a:e8:23:1c:f6:23:
25:3b:ff:0f:59:af:66:c7:a7:b6:33:ce:39:cf:6d:
d5:f4:b1:79:83:74:dd:31:1f:6a:b9:3f:61:ea:5e:
e4:56:d0:39:f0:20:9b:10:dd:55:2f:8d:cb:8b:60:
4a:f8:11:9f:b7:ff:d8:7c:92:c0:98:d0:4c:fb:55:
fc:25:b5:16:75:68:1a:b9:ba:10:7d:d2:ad:a0:67:
cd:e8:08:53:5d:e7:91:87:ee:29:e3:4e:4f:cb:16:
90:e1:14:cc:b0:de:03:25:3a:7e:82:49:50:78:f7:
46:1f:82:c0:02:77:af:ae:fa:38:02:31:51:85:30:
01:38:73:00:d1:ab:ee:00:4c:1b:69:07:d8:67:64:
d5:6e:d9:3b:3b:b6:db:f2:63:61:99:7d:3c:a0:e7:
a0:46:35:2c:45:ca:be:f8:4a:22:26:c2:a3:28:ae:
82:3a:fe:e7:3f:0d:a2:18:f5:db:bd:12:18:f2:3a:
69:14:e1:19:b4:01:05:ca:5a:09:4b:a7:46:e0:c7:
d4:cd:2b:f5:ac:22:fb:76:57:cc:cc:cd:b9:cd:5f:
50:bd:01:12:68:15:e2:39:e6:37:de:c1:00:ac:5f:
27:bb:51:c9:2e:7c:67:9d:7a:ff:46:1d:0d:82:2e:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:88:D7:D7:AC:2A:59:2B:E9:F9:55:4D:4D:40:13:32:16:7C:D8:F1
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4b:d2:cc:39:77:64:6a:e0:f0:8a:09:4f:e8:a0:d2:eb:03:
27:a3:d5:18:f9:c2:39:11:58:b6:57:06:4e:21:91:33:7a:6d:
ab:55:75:61:f2:71:60:5d:2e:9f:4e:b2:8a:8e:91:e3:ed:c5:
68:23:da:cf:11:b4:6a:b1:34:b5:33:2b:f4:22:76:a9:8d:58:
3d:e4:ad:06:e9:2f:84:fa:7e:f1:33:d6:83:b3:ae:b0:2b:f4:
63:54:77:db:b6:fe:09:47:af:5f:35:2d:c7:3e:6d:68:37:b6:
76:8a:af:4b:02:ec:f7:7c:7a:6f:d7:0d:48:3a:69:de:ad:a5:
2f:a9:fc:54:48:1c:36:99:be:15:e6:2a:9c:66:a9:19:36:b1:
3a:7e:dc:96:90:5e:a5:c2:17:ce:a2:3c:69:3d:be:de:52:6e:
2f:6d:8e:b3:53:c5:dc:5a:59:01:30:25:8a:b1:02:c7:61:ae:
5c:82:66:96:bb:54:0e:17:5e:ab:f9:1d:2e:71:07:58:fe:3b:
2d:11:45:ff:b0:ab:3c:9e:b5:78:27:d8:b0:26:bb:09:11:df:
f8:4a:e3:6e:80:9c:44:ca:23:4b:4d:bf:7f:d6:1e:63:ab:b6:
37:19:64:bc:c8:b4:21:e0:d0:84:81:15:b1:42:a5:eb:c3:b8:
5c:2a:fd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:32 2026 by rpki-client