Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier: uAmjTJHtK6XW8hezhcWoIPyYXK4ht/1M/YS/GdBw4fw=
Subject key identifier: 84:96:BE:D2:1F:54:90:D6:D3:90:E2:9D:B2:5A:5E:47:D4:6C:0D:F8
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 01A0D07F6247A28D51F0C725B316D1A99154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number: 17AC
Signing time: Wed 23 Sep 2026 23:00:04 +0000
Manifest this update: Wed 23 Sep 2026 23:00:04 +0000
Manifest next update: Thu 24 Sep 2026 23:00:04 +0000
Files and hashes: 1: 1LR-EYBL03Uq9iiIomYFwjWbVgU.roa (hash: 8mf/H4W1UbLR+6XAVwkASsjfups8wwQESrwcntjZRGI=)
2: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
3: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: Bz4w8/wB6MlK1AHRQttWh6saTrnE4lnaY/kjCxyto9g=)
4: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
5: ZUC7Id2Okv2eHSSZdTBUkg-VCng.roa (hash: /lduSjfq1UA9xfg3a0WqS2j8mYLYGsas2BzQFm6I+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:62:47:a2:8d:51:f0:c7:25:b3:16:d1:a9:91:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Sep 23 23:00:04 2026 GMT
Not After : Sep 24 23:00:04 2026 GMT
Subject: CN=8496bed21f5490d6d390e29db25a5e47d46c0df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:36:11:9d:34:ba:7a:03:c8:1e:c1:f9:ca:
82:12:39:f1:ae:f3:e8:f3:96:8d:6f:f0:5e:08:95:
00:ad:1b:8d:e4:63:f0:ee:5c:6e:72:22:0c:4b:b4:
b9:22:63:b8:74:88:10:25:83:01:79:46:1a:1d:aa:
04:a1:8e:b4:25:a0:22:24:ec:f3:ed:f5:c7:f7:8e:
e7:06:90:55:86:8f:6f:00:aa:f4:f4:d7:3d:f2:c5:
aa:87:7b:1a:be:88:4c:5b:fe:4e:13:53:98:87:60:
b1:3f:5b:24:f1:c6:9f:04:59:2f:1e:9e:cf:c9:e7:
e4:c0:c8:22:a0:6b:ea:94:c6:60:ee:7a:46:e1:2e:
55:49:ab:4c:e8:b6:ff:59:0a:70:9a:3c:47:27:2f:
2a:d4:35:c5:a5:e3:17:47:a9:48:a2:4e:e4:98:7d:
ec:75:c2:03:40:11:c4:74:e4:a6:84:3c:63:ce:c1:
0a:4a:d7:c0:6d:6f:c5:89:da:a9:64:67:04:af:09:
4d:e9:d7:02:72:f6:96:25:4d:76:9a:c4:40:73:44:
8c:be:90:0d:5d:b6:b8:6a:7c:cd:27:a7:35:8f:e2:
b0:b9:96:23:2a:a0:6d:ba:b3:cd:a3:be:fe:38:04:
b9:b3:6c:cb:cf:08:00:1a:89:10:cd:03:85:86:74:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:96:BE:D2:1F:54:90:D6:D3:90:E2:9D:B2:5A:5E:47:D4:6C:0D:F8
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b8:f5:ac:11:88:99:ef:bf:51:98:28:3a:5f:79:b8:12:0b:
e8:fa:a5:e5:c7:6c:86:3d:f1:ed:b8:0a:49:ba:03:40:44:bc:
c9:9f:04:c1:53:03:02:a4:4e:9b:49:2c:6c:d6:db:58:4c:fb:
6f:6e:2a:63:de:40:f9:ec:0e:4d:cc:ba:2f:cb:97:25:30:b6:
bc:fa:f5:6e:4a:e0:a0:18:ef:88:84:bf:f1:8d:e1:70:40:e4:
d3:2b:54:5c:56:b0:39:b4:ea:c1:82:12:4d:05:64:d7:60:f1:
65:cb:c1:c1:f1:00:9b:fe:5f:c2:71:00:d1:a1:e8:97:a7:1a:
a9:c5:d3:91:e7:47:42:77:9a:cb:ce:4f:3f:31:93:40:f3:77:
a6:32:0b:69:df:e7:ff:8c:34:b7:be:b6:55:af:8b:2c:63:ac:
67:2d:de:0d:18:ac:25:b0:55:e3:a0:9f:33:53:25:1e:bc:62:
e4:b7:2f:26:e4:86:4e:39:23:a0:75:bd:cd:6b:c1:6a:0a:e5:
4a:61:3e:fc:d2:63:11:c6:cf:0c:17:78:99:dd:8b:1a:2a:7b:
07:e0:fa:68:7a:e4:da:92:02:91:69:e7:ec:88:9c:1e:13:ca:
5d:19:4f:40:a9:71:f6:0d:d7:c1:f6:bd:06:10:22:93:6a:e2:
e4:5f:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:34:53 2026 by rpki-client