Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
File: CheLtUkzwTowA4cgu0NB-f8r7j4.mft (raw, json)
Hash identifier: Zu5t+dloVn0joO/7DRpsNYHc8rgl8AtSA8hLnI7Zfco=
Subject key identifier: C8:BA:71:B7:AF:EB:D6:8B:EB:34:7D:CE:F7:35:C6:14:DC:69:E6:20
Authority key identifier: 0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
Certificate issuer: /CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Certificate serial: 019F9391DC13DA988DD2D659FC858C23D90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
Manifest number: 0317
Signing time: Fri 24 Jul 2026 10:00:37 +0000
Manifest this update: Fri 24 Jul 2026 10:00:37 +0000
Manifest next update: Sat 25 Jul 2026 10:00:37 +0000
Files and hashes: 1: CheLtUkzwTowA4cgu0NB-f8r7j4.crl (hash: ljc5xTzSWJ0fZB0HspaVuDQx288/fZNdEjGz9KY4+eg=)
2: _ppZcJvhKyMT7u0OoJi2R_ngeSE.roa (hash: UhX6rrUi7juaS+ftLotvN09V5C7za1f0hNW2nd3JUk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:dc:13:da:98:8d:d2:d6:59:fc:85:8c:23:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Validity
Not Before: Jul 24 10:00:37 2026 GMT
Not After : Jul 25 10:00:37 2026 GMT
Subject: CN=c8ba71b7afebd68beb347dcef735c614dc69e620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:65:d7:00:1c:46:fc:b6:fd:7c:3d:90:7b:
fa:26:1c:71:ab:ff:61:0c:66:25:72:b0:df:9d:e3:
c3:a7:ab:39:c2:85:d0:e1:74:f7:14:c5:68:41:25:
35:c8:09:3c:e6:24:81:96:78:0f:20:88:24:8c:ed:
9f:aa:2a:8d:a5:b7:05:b8:25:f2:2f:97:c1:83:36:
41:b6:59:11:3a:0b:7e:5f:0e:16:27:a0:e5:85:c1:
5e:73:54:62:aa:8f:11:b4:35:d3:19:c0:c5:50:ca:
e0:7f:7d:15:0a:af:96:f3:89:a2:78:88:01:70:bc:
27:f2:b6:ae:ab:84:90:f3:2e:bb:23:fe:c2:09:78:
92:f2:51:94:a0:73:94:9a:2c:d4:bb:dd:81:d1:9a:
d6:58:1e:c2:81:22:11:19:31:2a:c2:af:03:47:42:
ac:57:4a:2d:b8:55:d6:78:76:5b:0d:74:33:d6:07:
e4:de:bd:f7:36:64:b1:4a:69:83:68:aa:56:ae:e5:
a6:26:85:a6:d8:97:67:00:87:a9:54:24:ac:6c:c8:
05:a7:61:81:cf:92:01:2b:2f:69:e9:4d:04:15:6e:
53:7f:bb:f8:6f:ce:ff:c2:30:17:0d:7a:f8:ff:98:
18:26:31:64:7c:7a:03:8a:ff:56:00:ec:0e:77:eb:
1b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BA:71:B7:AF:EB:D6:8B:EB:34:7D:CE:F7:35:C6:14:DC:69:E6:20
X509v3 Authority Key Identifier:
keyid:0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6d:c8:71:b1:f7:96:b1:21:a8:3a:c8:27:81:dd:48:27:e7:
49:89:18:23:10:dd:7a:6f:ca:70:18:36:62:33:1b:ea:6c:eb:
3c:29:5c:29:0a:86:e0:f1:2e:e1:92:75:68:4c:c5:98:17:8e:
c6:0d:1e:4a:a0:dc:13:9c:36:d2:fb:42:84:6f:26:13:8e:a7:
5b:1d:49:15:65:67:bb:05:de:21:4f:35:3a:36:aa:16:8a:8b:
6e:e1:42:b2:ad:5c:5c:81:25:b5:72:b1:80:c8:f5:8c:48:b3:
9a:e5:3b:f0:e9:ad:8b:ab:d0:a5:40:58:96:ab:a7:f8:f2:fe:
a7:b9:4d:94:7b:43:b9:62:2b:24:9a:d0:f7:89:cb:52:b9:b0:
0f:80:d4:e6:4a:19:cf:28:14:db:6d:43:1c:16:41:3d:68:70:
5c:c9:fb:a3:8d:8b:eb:d4:08:91:23:32:31:9f:44:bb:5b:ca:
a2:3c:78:e2:88:0c:71:a8:a2:2e:0f:cc:0c:f6:32:d6:90:c3:
43:e4:7b:32:14:f4:f0:24:25:5c:db:a4:9b:b5:c7:43:5d:17:
22:7d:e4:52:25:9f:16:ad:e1:3d:03:8f:a7:37:db:ea:44:a9:
b3:c5:ea:89:5d:30:d7:bf:04:ec:48:b5:b8:e3:12:2c:9c:7e:
c4:c3:ce:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:43:38 2026 by rpki-client