Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
File: CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft (raw, json)
Hash identifier: eJZT8kUc50Xp7r7A7SXL2ncPOMOCVUiwrmAqFBEUbfw=
Subject key identifier: B0:C8:B8:9B:23:F2:E6:40:FC:FC:0E:8B:58:5C:B1:88:4F:64:97:D0
Authority key identifier: 08:71:19:7D:AF:A7:1A:1F:B9:16:EE:0F:D9:45:E1:C2:3A:55:D9:E7
Certificate issuer: /CN=0871197dafa71a1fb916ee0fd945e1c23a55d9e7
Certificate serial: 01A0CEC85B626BA747D47B1A898DC0C61F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
Manifest number: B6
Signing time: Wed 23 Sep 2026 15:00:32 +0000
Manifest this update: Wed 23 Sep 2026 15:00:32 +0000
Manifest next update: Thu 24 Sep 2026 15:00:32 +0000
Files and hashes: 1: 88EdeDABB-NjWV7m9scRSfiYFiE.asa (hash: mwR3ub0+0Dno6T1mW8HlTwvzj3E9hWCKitWBw9GKa+I=)
2: CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl (hash: 48T4aEap9HFl/s6LMdmwqqes3jwn46KxK1bMEe3V1Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:5b:62:6b:a7:47:d4:7b:1a:89:8d:c0:c6:1f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0871197dafa71a1fb916ee0fd945e1c23a55d9e7
Validity
Not Before: Sep 23 15:00:32 2026 GMT
Not After : Sep 24 15:00:32 2026 GMT
Subject: CN=b0c8b89b23f2e640fcfc0e8b585cb1884f6497d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:f6:2c:1a:b1:27:cf:f4:bc:78:e5:9e:6b:
64:03:75:d3:b8:08:1b:f0:00:4a:3b:db:6e:ed:c5:
40:21:64:52:db:7a:b8:f7:88:08:86:7a:19:3c:e6:
d1:60:a0:bf:24:64:1b:9c:c3:c7:c4:ea:ba:d0:92:
0e:79:2b:a7:7d:ee:59:6a:b8:d8:bc:8a:3e:9b:6e:
71:f0:f1:9c:0b:bf:ae:99:0b:59:52:de:ad:f6:9b:
a3:12:50:9e:be:34:8e:6b:a8:6e:7e:b4:0c:24:85:
a0:25:e2:37:2c:ad:cc:74:5a:11:14:62:8c:13:59:
30:cd:af:e5:97:1f:69:80:a2:1c:1b:12:aa:cc:7d:
04:41:4f:8b:c8:e2:de:ae:a1:a5:2f:d4:cc:4e:2e:
32:1c:a8:86:c2:e7:e2:b9:04:7b:fd:23:62:f7:16:
4d:4d:1a:07:3d:f3:68:11:f6:42:d7:f7:69:33:cb:
1b:7d:49:07:c8:c8:0e:a6:79:ca:9e:d5:44:64:bc:
5f:34:54:91:e8:97:cd:d8:73:b4:54:ad:78:ea:82:
df:42:b9:e5:8f:ab:95:3d:cf:17:e3:58:42:0b:ae:
85:2f:96:d7:6f:63:ab:b6:05:4d:d9:72:d8:8b:63:
10:9b:7d:51:0a:3e:5f:9c:e9:04:51:e1:3d:93:a9:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C8:B8:9B:23:F2:E6:40:FC:FC:0E:8B:58:5C:B1:88:4F:64:97:D0
X509v3 Authority Key Identifier:
keyid:08:71:19:7D:AF:A7:1A:1F:B9:16:EE:0F:D9:45:E1:C2:3A:55:D9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8e:7c:61:df:b0:aa:51:07:f2:4e:8b:df:ff:a5:38:3e:67:
e6:be:f5:fa:3c:4b:ad:1c:00:08:ea:27:f3:bb:cd:6e:b2:83:
19:b1:62:73:e3:82:7d:79:fb:3f:a1:68:dc:83:b9:85:5d:8d:
f9:2d:10:68:4a:10:fe:6a:26:95:93:eb:b0:e5:bc:c0:86:66:
b2:94:5f:27:d0:62:62:42:4d:13:49:9c:00:fd:55:6d:46:38:
3a:e6:7e:44:b6:10:70:62:e0:b7:31:05:4a:fe:07:e8:21:4c:
0a:37:36:da:7a:2f:97:ac:21:26:ed:d9:e0:4b:d5:1b:d1:c8:
7b:ee:9a:b3:69:42:5a:c9:cd:63:ce:d1:2d:4c:68:bb:2c:c8:
10:29:40:a6:50:70:e6:1e:4c:7c:04:81:70:4d:38:6e:dd:65:
65:46:65:9f:a5:4f:8c:e6:fd:23:7e:ad:ae:65:6f:f2:84:a3:
77:ed:2c:51:37:fa:7a:20:32:76:64:3a:9b:ff:7d:13:7d:3e:
aa:ae:c8:cc:cc:17:9d:1b:44:39:53:b0:09:a1:b9:db:d5:00:
05:1d:b4:f6:bf:2c:d7:90:d3:ce:a4:43:b2:ef:5c:31:74:1d:
b5:5e:fa:f2:a0:0c:37:dc:a5:3e:27:85:16:63:95:93:62:ee:
20:48:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:50:00 2026 by rpki-client