Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
File: CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft (raw, json)
Hash identifier: P7gXkodHBQbwlclBwSJUv84rwM/wcng6VZOSaGSvVDE=
Subject key identifier: 62:2B:09:0C:6C:6B:89:40:B5:03:16:05:24:CB:29:28:C9:36:71:09
Authority key identifier: 08:71:19:7D:AF:A7:1A:1F:B9:16:EE:0F:D9:45:E1:C2:3A:55:D9:E7
Certificate issuer: /CN=0871197dafa71a1fb916ee0fd945e1c23a55d9e7
Certificate serial: 019F902335FF4C1BC9514BF5992556FDE2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
Manifest number: 11
Signing time: Thu 23 Jul 2026 18:00:54 +0000
Manifest this update: Thu 23 Jul 2026 18:00:54 +0000
Manifest next update: Fri 24 Jul 2026 18:00:54 +0000
Files and hashes: 1: 88EdeDABB-NjWV7m9scRSfiYFiE.asa (hash: mwR3ub0+0Dno6T1mW8HlTwvzj3E9hWCKitWBw9GKa+I=)
2: CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl (hash: LQk5Bp6R9ZWk2i/gUMV/owDJlBgATbrWc8GGl6qGXus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:35:ff:4c:1b:c9:51:4b:f5:99:25:56:fd:e2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0871197dafa71a1fb916ee0fd945e1c23a55d9e7
Validity
Not Before: Jul 23 18:00:54 2026 GMT
Not After : Jul 24 18:00:54 2026 GMT
Subject: CN=622b090c6c6b8940b503160524cb2928c9367109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:49:91:61:96:f5:bf:64:93:82:9c:29:87:
95:8b:3e:ca:73:ad:f5:78:fb:55:4c:a6:b9:40:22:
7e:11:10:8f:25:cc:5c:59:36:1a:20:d2:75:25:4f:
24:d6:18:da:32:3b:7d:8f:22:32:4f:c0:de:50:37:
ad:31:2e:04:72:f1:87:9e:19:e3:9f:98:14:44:70:
f6:38:98:20:46:98:32:a0:4a:45:46:7b:42:81:89:
b8:a8:82:61:29:dc:14:23:8e:3e:f8:53:4f:ca:0d:
1f:d5:ac:58:f4:b5:07:7c:70:b1:fc:0a:08:ff:58:
9d:42:75:1c:03:ee:da:dd:a7:e4:d4:ca:c5:f8:e8:
6b:5e:e6:50:fc:ff:04:f4:3c:28:04:1d:d1:a6:01:
83:ad:55:d8:72:39:70:b6:72:a7:1d:49:3e:d7:d9:
09:ac:fa:99:3e:c0:c0:14:6a:1c:73:61:49:a5:01:
85:f4:ed:09:e5:26:2c:d9:79:b8:66:5c:95:68:b3:
93:8d:e1:ba:4b:22:3e:7f:d4:95:70:cf:69:97:c6:
ae:4b:7d:da:2d:92:a1:f2:08:bb:7c:31:f7:ed:50:
ff:c2:37:3d:04:e5:be:ce:06:e3:6d:d5:de:f8:83:
3b:28:c5:c2:53:51:59:3b:cd:b3:e6:28:93:2a:d2:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2B:09:0C:6C:6B:89:40:B5:03:16:05:24:CB:29:28:C9:36:71:09
X509v3 Authority Key Identifier:
keyid:08:71:19:7D:AF:A7:1A:1F:B9:16:EE:0F:D9:45:E1:C2:3A:55:D9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2b:d7:3c:42:77:cb:39:d4:e6:b6:56:2c:b0:22:80:40:00:
44:58:4c:bc:ae:77:f3:cb:66:34:69:82:75:d5:0a:d7:7a:02:
9c:a9:d6:a1:4f:dd:be:cd:f9:54:20:db:48:90:0e:f9:c0:29:
fa:b3:24:85:6b:06:20:0c:50:af:7f:48:05:17:00:d0:81:05:
af:f0:c0:2d:0b:6a:2d:99:ef:91:6c:ef:10:2f:42:a3:56:72:
ab:35:95:da:2a:92:0a:d7:13:f9:93:07:4c:72:58:62:2b:6d:
bb:c2:e6:e3:72:f5:17:3c:60:cb:8a:41:66:a8:7c:c3:70:79:
c9:e8:b1:8c:43:a4:1e:77:88:e5:72:96:9a:32:f5:0c:ee:7b:
f5:df:29:2e:c4:1a:b6:08:43:87:c6:e3:e2:4f:dc:6e:ec:f7:
14:a5:c8:5b:ed:13:29:01:89:ed:42:59:c1:32:1e:e4:36:76:
a4:14:0e:44:b9:e9:c5:f4:86:1b:86:d0:2d:0d:b7:67:46:84:
14:b4:1a:07:5a:25:76:c2:56:c1:ed:dd:95:62:7f:45:42:07:
32:d4:3e:63:6b:03:32:d6:76:99:ec:42:d2:eb:d4:85:18:aa:
b3:e1:c4:93:41:22:bc:9f:5f:71:ec:f6:6e:bc:c2:66:da:bc:
25:bb:e1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:03:20 2026 by rpki-client