Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File: Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier: s6fbkwjR4jQVy3fel+xhcFE61/5TRH6BwO4Mb2Q0SS0=
Subject key identifier: 60:9E:C3:59:78:FA:3A:BA:B2:18:D2:84:10:D0:D5:FA:63:87:53:72
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer: /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial: 019D390A088FB39D6C1A472A941CA0B2CF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number: 1719
Signing time: Sun 29 Mar 2026 10:00:51 +0000
Manifest this update: Sun 29 Mar 2026 10:00:51 +0000
Manifest next update: Mon 30 Mar 2026 10:00:51 +0000
Files and hashes: 1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: 7VQ8tHwQ+D3AupLZn6OnWVxIraoPPXepRCIMbczh8s8=)
2: JGOkLh2PzH5oVETn1detOd-TQdk.roa (hash: ybMRNED16hWrl8FEtC2F64yXXNvtkRHeZquSrRkt2ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:08:8f:b3:9d:6c:1a:47:2a:94:1c:a0:b2:cf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Validity
Not Before: Mar 29 10:00:51 2026 GMT
Not After : Mar 30 10:00:51 2026 GMT
Subject: CN=609ec35978fa3abab218d28410d0d5fa63875372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:93:af:ba:77:26:46:43:fb:40:69:e2:59:
77:38:20:4e:f8:7e:78:b9:88:b0:9e:5a:8c:52:0e:
6e:3d:13:f5:f0:94:53:fc:2f:bc:3f:8e:e8:5c:14:
d6:a1:fc:7c:07:a3:4e:65:76:79:2d:61:80:c8:b3:
2e:f4:bc:cb:d9:30:f6:c0:48:0d:5c:11:88:f4:36:
b8:d5:a2:5a:86:ba:a3:35:62:b5:9e:9b:c4:8e:5b:
09:11:09:9f:b4:03:c8:a6:95:c6:39:e9:e8:df:28:
ca:11:83:69:46:ee:59:b1:48:08:54:1a:6b:32:11:
46:5c:16:1c:a3:e9:36:e6:9b:cb:80:37:89:e6:31:
40:ca:e3:d1:6f:3e:dd:17:f9:c4:43:4b:38:fe:1d:
6d:e8:81:7a:86:ec:fd:14:6a:ad:58:a8:93:4e:88:
35:ee:49:39:2b:0c:6a:a5:4e:08:00:f8:09:94:70:
f9:a6:96:ff:22:57:f0:31:ca:13:79:8f:15:2b:5e:
92:4b:82:2b:d3:e3:8b:15:96:e1:07:1c:02:c5:4d:
7f:fb:35:b3:06:d8:58:7d:90:94:b1:3d:9f:47:49:
93:fd:f0:c1:0d:9f:b8:fe:98:54:0c:ea:37:91:1f:
cb:2b:8c:46:44:2c:83:81:80:11:d4:ba:0e:62:1f:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:C3:59:78:FA:3A:BA:B2:18:D2:84:10:D0:D5:FA:63:87:53:72
X509v3 Authority Key Identifier:
keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:07:50:e1:67:0e:28:3a:b4:80:bd:7b:14:a5:3b:a6:aa:8a:
6c:b5:bb:05:30:22:47:62:ac:e6:04:1b:58:ba:ce:52:ef:fd:
cb:b9:e3:49:55:59:82:b8:7e:57:1a:e5:de:9e:08:e0:f6:f3:
13:f8:b8:b7:34:8c:b9:dc:36:22:97:17:86:be:88:d2:fa:ef:
2c:42:e7:52:77:76:da:53:4f:9f:e9:44:ad:ae:06:73:ba:1a:
25:c9:a3:0e:ae:be:37:82:c0:44:14:30:1a:9d:ee:e8:35:c9:
0d:71:46:39:5e:0a:38:17:77:73:d3:ee:9e:c5:8e:07:1e:95:
6f:2d:86:12:a5:5b:1e:50:86:0e:5b:78:d1:07:70:df:09:74:
6a:96:d2:21:93:cf:80:3c:bb:89:be:f3:25:4d:b6:f1:5a:69:
da:14:40:6e:fd:54:dd:b2:97:4e:36:55:9a:ba:c9:75:ea:e3:
0a:5f:de:83:d6:58:e7:59:e2:b1:62:6b:4d:20:5e:6d:6d:92:
aa:cd:c8:b2:a8:89:20:bd:29:a3:75:82:ff:5a:47:e2:f2:4a:
0e:6c:02:84:f6:27:e2:8c:d7:22:12:eb:78:dd:b8:6f:ce:c7:
12:e8:d4:63:60:04:ac:43:a3:c3:0b:0e:4a:3c:02:6b:02:6a:
d5:71:b1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:35 2026 by rpki-client