Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
File: CheLtUkzwTowA4cgu0NB-f8r7j4.mft (raw, json)
Hash identifier: +ekiE/YJuHUJr+aPeoMF5nQHE2R28MHaLYLqedj+EOo=
Subject key identifier: D9:7C:68:CB:50:5E:0A:CB:08:5D:84:3A:0A:04:83:AD:84:D8:FE:71
Authority key identifier: 0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
Certificate issuer: /CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Certificate serial: 01A0FCB4679CEAD3CB84A49B2D6CFAD23F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
Manifest number: 03D2
Signing time: Fri 02 Oct 2026 13:01:16 +0000
Manifest this update: Fri 02 Oct 2026 13:01:16 +0000
Manifest next update: Sat 03 Oct 2026 13:01:16 +0000
Files and hashes: 1: CheLtUkzwTowA4cgu0NB-f8r7j4.crl (hash: /UNdCqZOq4stsB7AaXAVHkczBEsqwyqTcuL66450NPg=)
2: _ppZcJvhKyMT7u0OoJi2R_ngeSE.roa (hash: UhX6rrUi7juaS+ftLotvN09V5C7za1f0hNW2nd3JUk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:b4:67:9c:ea:d3:cb:84:a4:9b:2d:6c:fa:d2:3f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Validity
Not Before: Oct 2 13:01:16 2026 GMT
Not After : Oct 3 13:01:16 2026 GMT
Subject: CN=d97c68cb505e0acb085d843a0a0483ad84d8fe71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:98:55:23:1c:1f:79:7e:d4:32:43:7f:1c:73:
36:15:60:50:5a:32:9c:16:85:74:8c:d7:26:7b:29:
4a:6a:4a:81:57:93:8e:5e:2d:48:2c:54:6b:40:4e:
c7:2b:16:6a:15:0a:ea:73:5c:86:55:86:71:ac:6d:
0c:64:52:c0:f2:fa:f2:7a:64:4a:b5:a4:a4:51:55:
26:18:a0:14:25:5c:f7:55:bf:a2:39:aa:4e:01:82:
83:6d:f3:01:c4:40:98:37:98:ee:86:8c:7d:d7:3b:
07:a9:91:3f:ce:91:6c:c8:0f:ec:32:77:56:a1:e8:
44:ae:b6:85:bb:83:1b:f2:fa:ce:aa:ae:d3:ba:54:
cb:64:0c:10:d9:ed:ca:d5:ae:31:55:35:99:97:d3:
d4:ad:64:d4:52:33:07:a9:41:a8:7e:66:26:4d:6f:
77:a7:d7:31:d1:81:36:66:64:66:ab:d1:d2:cb:d8:
3f:34:d9:a0:5c:62:8e:72:ff:2d:75:9c:e3:13:71:
32:30:16:c1:ac:8f:85:d0:ee:6d:1b:e6:b6:cf:ab:
38:c2:5a:58:78:d3:1c:30:22:0f:c9:bf:cf:4d:18:
3a:c0:1a:10:1c:01:1b:58:83:8a:39:de:0d:d9:d9:
1a:9c:08:b2:ce:03:34:42:7f:e8:4f:86:ba:52:f1:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7C:68:CB:50:5E:0A:CB:08:5D:84:3A:0A:04:83:AD:84:D8:FE:71
X509v3 Authority Key Identifier:
keyid:0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:13:eb:4b:17:41:11:3e:f9:76:af:c4:05:0c:68:96:29:d0:
85:9c:81:6d:e3:3a:a5:1d:8f:19:ec:56:99:41:dd:93:63:e7:
2b:bd:ee:86:58:f3:24:3b:66:71:39:c9:15:0b:d9:5b:65:74:
b7:82:8c:bb:92:d5:41:c9:e0:a8:11:13:c5:a7:dd:f7:c8:37:
1f:15:57:62:24:65:76:0d:66:07:f4:31:6c:0f:9b:80:6d:9f:
ec:c1:75:a6:93:1d:31:05:54:2d:9f:cc:7e:ba:85:ae:1a:51:
63:ef:1f:85:85:ef:8b:aa:64:ac:dc:21:f0:61:b4:39:30:bc:
f9:2b:d7:08:de:d1:b3:f4:f3:28:3a:2b:eb:77:6a:c3:c6:c8:
60:ea:d9:47:cf:31:21:85:ee:31:54:93:59:60:9b:8a:d2:1f:
8c:d5:eb:f7:e2:22:65:3f:d2:14:b5:6a:9c:82:ab:8e:90:23:
93:2f:15:7f:2e:2d:d0:74:b7:12:6f:9a:e3:01:fd:ad:9c:77:
b3:eb:bf:ed:0d:48:77:74:52:2b:ea:85:46:07:d5:80:d9:75:
29:de:53:d5:27:00:a5:92:c8:94:ac:fb:c5:dd:aa:75:00:15:
3b:89:58:ef:a6:f1:6b:4f:ed:90:64:db:37:b5:8c:71:cd:8a:
d2:59:e4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 19:10:31 2026 by rpki-client