
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier: wXhjiIbTPvC5jH9IOj1z5aUBelKbP/fvdYnjA2xqDiE=
Subject key identifier: 9D:AF:34:9D:73:DF:86:78:70:6D:CB:17:CA:AD:5A:4F:B3:6B:35:59
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 019F8FEC7C88986414F2D08AD4FA9FC7AD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number: 1706
Signing time: Thu 23 Jul 2026 17:01:07 +0000
Manifest this update: Thu 23 Jul 2026 17:01:07 +0000
Manifest next update: Fri 24 Jul 2026 17:01:07 +0000
Files and hashes: 1: 1LR-EYBL03Uq9iiIomYFwjWbVgU.roa (hash: 8mf/H4W1UbLR+6XAVwkASsjfups8wwQESrwcntjZRGI=)
2: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
3: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: tk+Dt3il/yXcZe3qPVKzCYV6etjcrmalHD6sxnF06gQ=)
4: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
5: ZUC7Id2Okv2eHSSZdTBUkg-VCng.roa (hash: /lduSjfq1UA9xfg3a0WqS2j8mYLYGsas2BzQFm6I+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:7c:88:98:64:14:f2:d0:8a:d4:fa:9f:c7:ad:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Jul 23 17:01:07 2026 GMT
Not After : Jul 24 17:01:07 2026 GMT
Subject: CN=9daf349d73df8678706dcb17caad5a4fb36b3559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:82:63:ca:36:d7:69:3a:fc:d1:dd:8e:40:3b:
70:52:1e:3b:4d:94:11:67:d8:74:cb:b0:03:c7:ab:
bc:2e:9f:09:fb:8d:cc:72:52:0f:bf:99:07:e4:e8:
b6:1f:27:cc:6e:a7:2c:17:89:63:6a:27:ab:e8:0b:
e3:6f:32:1c:84:43:80:5c:aa:48:2a:a2:06:20:81:
f7:0c:58:bd:be:03:0b:ad:0c:23:0f:46:5b:e4:89:
1d:bb:9b:24:5e:fe:8d:30:7c:8e:af:3e:d8:55:04:
20:29:2b:d6:09:2a:31:d5:33:8f:ff:88:66:1f:45:
7b:44:e5:8e:25:54:69:26:1b:2d:99:70:49:5c:ab:
a3:5e:30:94:06:b5:ee:a3:1a:da:37:1f:8b:4f:e4:
b0:6a:af:4b:ce:4f:6f:6d:cb:3a:5d:c1:5a:a3:7a:
c9:4a:31:9a:19:3f:73:dc:50:98:51:69:f9:6b:24:
43:ba:99:fa:32:41:70:6a:13:6b:d0:6d:f4:48:ae:
1f:cf:cd:9e:ad:c7:15:9e:39:d2:1a:cf:9b:e2:ad:
ec:e0:76:fc:06:6c:9b:c3:7b:b5:a3:d9:5f:96:cf:
17:4c:83:7e:ce:58:b7:c2:56:8e:68:d8:62:92:30:
13:25:e1:81:be:f1:e9:30:eb:d4:cb:07:e0:76:c3:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:34:9D:73:DF:86:78:70:6D:CB:17:CA:AD:5A:4F:B3:6B:35:59
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3f:17:ae:c7:44:9a:ed:4f:f4:2b:46:98:77:e1:92:b8:6c:
13:80:04:ce:f4:a9:6b:cc:6f:12:64:02:cf:d4:eb:9e:d0:e3:
53:58:56:42:00:a5:3b:be:1e:9a:dc:f1:ad:ae:df:8e:99:41:
0c:4d:00:2a:0f:98:2f:8c:ee:4f:5f:7c:8c:88:41:d6:15:1c:
9a:6c:44:1d:a6:18:e9:a6:d7:9c:1d:ed:d0:e9:1b:b4:0d:d1:
ed:f5:a0:43:84:fa:69:d1:59:14:12:b7:e5:66:bf:df:03:9d:
86:5a:7a:40:4b:b6:fb:ad:06:6c:3b:a5:58:f8:5c:5f:d1:1f:
33:38:d0:14:56:db:a1:30:10:bc:c8:79:a9:ec:56:e0:6a:06:
2b:12:16:bd:60:64:0d:fc:54:66:44:31:4a:c3:70:0e:a9:1d:
58:8d:b9:10:9a:21:58:b2:66:8f:f4:24:32:98:ec:00:c4:35:
ab:51:ee:6a:37:3e:13:25:20:c7:bf:00:50:5f:21:0f:5c:40:
d1:e6:28:36:a4:87:4f:da:76:88:16:b0:57:fb:41:23:d7:3e:
77:11:68:16:7f:d0:fa:d3:75:90:f3:eb:26:25:9b:1d:39:9b:
1d:83:8c:dc:36:f1:2e:2d:f1:43:28:e4:45:1e:fc:96:e9:2a:
a0:2d:61:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:31 2026 by rpki-client