Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
File: CheLtUkzwTowA4cgu0NB-f8r7j4.mft (raw, json)
Hash identifier: q7aTofc5cnqW1zkrrh3RrHZxtHosvti9bnRLDXTIRiI=
Subject key identifier: C4:48:1A:AB:D9:62:C6:B0:A1:C6:0C:A7:2F:7C:86:C0:3C:A5:1B:91
Authority key identifier: 0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
Certificate issuer: /CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Certificate serial: 019D2996D7507F3C2E0D91B2FEFC842900E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
Manifest number: 01D7
Signing time: Thu 26 Mar 2026 10:00:44 +0000
Manifest this update: Thu 26 Mar 2026 10:00:44 +0000
Manifest next update: Fri 27 Mar 2026 10:00:44 +0000
Files and hashes: 1: CheLtUkzwTowA4cgu0NB-f8r7j4.crl (hash: T917oaVNlvlLoKZ2HjhjJjDcNYmsIiNZBrQ6GxfC1OY=)
2: _ppZcJvhKyMT7u0OoJi2R_ngeSE.roa (hash: UhX6rrUi7juaS+ftLotvN09V5C7za1f0hNW2nd3JUk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d7:50:7f:3c:2e:0d:91:b2:fe:fc:84:29:00:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Validity
Not Before: Mar 26 10:00:44 2026 GMT
Not After : Mar 27 10:00:44 2026 GMT
Subject: CN=c4481aabd962c6b0a1c60ca72f7c86c03ca51b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:9c:aa:63:e7:35:36:59:0b:d9:27:ff:44:
7d:21:34:eb:0b:45:da:b2:d6:10:fe:d9:ea:9a:5b:
6c:26:c5:29:db:19:9b:ed:f0:fa:26:91:00:43:25:
2a:f6:f0:ec:30:f0:ab:c0:b5:ce:1c:04:ce:4b:dd:
74:26:cb:d7:3d:c2:8e:1c:d8:1f:91:22:6b:5b:b1:
8e:65:83:9b:6f:93:76:71:29:c1:32:bc:2a:6e:a3:
85:98:e3:0b:3e:1d:e8:b4:d0:33:e6:c6:66:4a:6d:
27:53:f8:26:19:c4:5b:55:2c:8e:d6:52:52:91:78:
07:2b:3d:66:cc:a9:c7:d7:65:58:6b:ba:a8:35:b0:
35:52:1d:5e:79:09:05:28:4d:71:27:a5:33:3b:d5:
c2:b2:05:49:54:23:b6:0c:a1:cc:0e:f7:ef:6b:4b:
a4:56:6d:ad:13:ca:24:4e:1e:ab:29:de:83:36:9e:
b8:3f:fa:eb:11:09:ff:94:9d:a0:b0:14:cd:69:c0:
d6:a6:6c:67:24:09:44:fa:c3:e3:13:04:13:fc:08:
fe:d4:46:40:4c:6e:9a:33:63:ad:e8:22:02:a2:6a:
83:c4:c0:16:76:e5:50:99:5f:c4:30:64:d6:42:b7:
57:b2:17:ce:17:c7:24:e2:94:e9:c1:9f:72:e5:d3:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:48:1A:AB:D9:62:C6:B0:A1:C6:0C:A7:2F:7C:86:C0:3C:A5:1B:91
X509v3 Authority Key Identifier:
keyid:0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f7:c8:d0:42:21:f5:76:f9:17:ed:d6:2c:3e:4f:ea:b3:8a:
a5:c8:29:4f:10:f9:13:49:02:f7:82:42:03:5c:1c:b1:b5:ba:
f1:7a:04:26:ef:f1:6c:b7:ee:d7:30:a2:ef:46:b6:fe:bd:91:
fb:a7:ad:bd:40:8f:4e:1a:56:2c:38:d1:1d:eb:fe:52:06:cd:
2b:e6:2d:31:f5:9e:0b:23:ef:6e:f5:33:6d:17:50:50:fb:3d:
24:c1:39:39:29:b8:ea:12:93:d1:24:36:dd:4b:4e:c8:5f:df:
ee:14:2c:ea:0d:4b:2b:2a:9a:49:b1:32:70:b5:76:2d:c9:64:
d8:8b:55:f1:9e:e8:f2:d1:3d:c7:b4:9c:98:59:e7:14:a9:f2:
13:73:70:3e:4e:40:b0:32:aa:97:06:57:32:df:36:25:53:16:
b8:7b:e5:02:ed:8d:2f:92:6f:82:ca:32:5d:98:c9:ce:54:49:
c6:ab:3e:3f:76:63:0b:ac:c1:07:80:dc:ef:e7:cf:14:6c:4a:
f7:1a:04:8d:c2:84:04:13:b8:c1:cc:38:07:c4:fb:be:9b:a2:
69:fb:2d:98:4d:55:45:36:52:6e:07:c7:b4:c0:ba:6d:1a:c5:
c2:a5:10:e2:dc:49:10:a8:fb:5c:68:b9:1a:4f:96:36:9d:9a:
bd:81:bd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:28 2026 by rpki-client