Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File: Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier: aHa64+pf4doLDI6JpGup+7LoyhcmO3JBSCXQxeMtXMY=
Subject key identifier: DC:EB:40:4A:94:9B:D1:BB:31:D4:B8:AF:62:3B:D3:34:C0:FE:18:C0
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer: /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial: 01A125421ED7BAFF6021F6C4AFD82D661DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number: 1921
Signing time: Sat 10 Oct 2026 10:00:52 +0000
Manifest this update: Sat 10 Oct 2026 10:00:52 +0000
Manifest next update: Sun 11 Oct 2026 10:00:52 +0000
Files and hashes: 1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: aPMQbj2h0JxH1TjcsLNo6TcNedqoxA8miMiH8XdVlts=)
2: JGOkLh2PzH5oVETn1detOd-TQdk.roa (hash: ybMRNED16hWrl8FEtC2F64yXXNvtkRHeZquSrRkt2ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:1e:d7:ba:ff:60:21:f6:c4:af:d8:2d:66:1d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Validity
Not Before: Oct 10 10:00:52 2026 GMT
Not After : Oct 11 10:00:52 2026 GMT
Subject: CN=dceb404a949bd1bb31d4b8af623bd334c0fe18c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:dd:2f:00:24:56:c7:19:29:30:ac:9c:e9:
9b:09:9a:1b:75:17:ac:56:94:62:d5:a0:a7:90:5b:
29:8e:7a:2d:dc:3a:72:60:7d:86:db:f6:dc:3d:87:
35:de:d9:11:b6:cd:3f:72:7a:ff:c8:b4:e4:80:9e:
a6:26:29:16:f5:7d:85:db:0e:49:f1:9d:37:48:45:
5d:7f:61:1e:5c:00:34:18:4a:b6:c0:b2:55:bb:9a:
6a:69:c2:d8:9c:2f:4b:68:e6:da:1c:d9:05:08:0f:
48:5e:60:6b:69:3f:8c:46:4d:a2:36:7d:87:d3:1e:
77:1c:26:7f:31:e7:0f:52:12:24:f5:ef:44:31:48:
70:fd:0f:61:fd:f3:40:c0:72:7c:fe:7c:e5:fc:92:
10:f7:34:9f:16:dc:6b:92:01:52:36:dd:bb:d8:0d:
06:48:3d:b8:66:ff:87:97:c0:3a:fe:35:c0:26:65:
11:75:c8:d3:00:83:f3:1b:51:60:f9:73:3e:3a:90:
ee:a9:d8:83:fd:ed:3b:7b:48:6a:4e:38:02:17:17:
1f:2a:7b:9a:39:f2:28:ae:59:1a:6b:aa:40:1b:e8:
42:d7:2d:da:f5:aa:42:29:43:d7:f0:1b:a2:2e:e1:
11:17:dd:39:d5:03:a8:2b:44:8e:9a:5e:6c:c8:bb:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:40:4A:94:9B:D1:BB:31:D4:B8:AF:62:3B:D3:34:C0:FE:18:C0
X509v3 Authority Key Identifier:
keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:65:63:a1:a2:d3:68:3f:44:24:0c:1a:66:5a:bb:87:54:ed:
54:e9:13:94:d6:88:dd:3b:77:56:0a:64:8e:b9:2c:f3:aa:6d:
c2:79:71:3b:fd:43:79:bf:ed:d3:0c:ce:70:29:55:fa:22:5f:
3a:51:eb:bd:28:ee:23:87:0f:c9:a2:bd:53:41:9a:93:42:ef:
ed:db:d8:78:59:18:6e:0a:b1:da:63:3d:bc:17:09:bd:57:da:
bd:03:36:20:f3:5e:42:2d:f8:64:97:84:35:c3:41:f4:a2:4c:
3c:86:6f:5e:3a:a4:6b:0a:4e:b2:2f:b3:63:80:ef:39:1b:78:
60:e9:5e:29:cf:0a:20:49:e4:75:c2:2d:aa:f5:91:12:5a:3b:
2c:6e:ed:60:68:cd:79:7a:b0:94:36:12:63:2b:d2:fe:7b:25:
e3:fe:14:17:40:12:58:aa:5d:72:cb:80:5b:48:20:51:ef:10:
e6:d8:e9:d1:b0:5e:1c:45:76:15:d1:a8:f5:66:f7:7f:c9:b6:
a2:4f:fe:f1:d2:0c:bb:3e:bf:b3:8c:bc:65:a8:71:1a:d6:ce:
f3:d3:1f:8d:79:f0:47:8b:7e:57:9f:15:20:95:aa:d6:e9:32:
fe:e2:17:02:45:83:7d:ee:bf:09:38:63:dd:16:60:81:fd:b2:
7b:61:02:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:38:47 2026 by rpki-client