Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: MOUPGbIqoaeL31yt9ghVTMSGeWziINQd06k/VS2eJEc=
Subject key identifier: 44:12:B8:1D:DD:C5:5B:FF:14:17:F8:83:B8:9D:2B:D0:96:84:71:EA
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 019D37F7494951A879B26BCDC29325A43170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 12C5
Signing time: Sun 29 Mar 2026 05:00:46 +0000
Manifest this update: Sun 29 Mar 2026 05:00:46 +0000
Manifest next update: Mon 30 Mar 2026 05:00:46 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: zl6jF8zXnUnrFT2a20npL26MAjCiRcrOrDMIALFBHio=)
2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:49:49:51:a8:79:b2:6b:cd:c2:93:25:a4:31:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Mar 29 05:00:46 2026 GMT
Not After : Mar 30 05:00:46 2026 GMT
Subject: CN=4412b81dddc55bff1417f883b89d2bd0968471ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:b4:f0:be:de:ab:2d:d7:cc:14:55:00:54:
cf:88:e3:fa:7b:8f:d8:23:03:ef:69:93:c8:c9:5d:
0c:47:da:54:ef:21:e2:8b:93:44:90:2e:d2:e0:63:
d8:bc:23:56:f4:db:b8:66:89:95:3c:e2:73:78:b7:
d1:e8:9e:cd:bd:be:5e:2a:04:05:c0:fe:24:84:3d:
7c:9c:2d:7b:15:20:06:ff:48:dd:64:86:08:02:bd:
29:7d:81:c4:ce:a6:93:37:ae:3e:2f:b1:1c:cb:4d:
96:6c:72:a7:4f:06:53:55:bf:95:c0:14:be:2c:27:
83:3c:46:3d:17:4d:89:a9:50:b5:39:f9:a7:93:9e:
e5:fa:93:c0:36:48:b3:0d:b9:d8:b2:e4:12:10:ff:
d1:05:d5:01:2f:7c:56:83:e9:c4:c5:b7:48:a5:bd:
90:d2:22:98:d0:ed:da:99:80:d0:c5:67:f1:30:6d:
54:ba:dd:27:86:ff:af:d5:93:ee:d6:04:dc:96:24:
33:38:89:ec:38:27:8e:cb:2e:07:a1:68:fd:04:32:
a8:38:ad:c6:c2:e9:7a:ff:2c:5e:d1:85:ab:29:85:
45:7d:dd:ce:bd:5e:7c:21:ab:ff:d6:76:44:80:9c:
7b:f3:2f:35:fb:15:f2:17:d0:fa:59:d8:c4:4f:d6:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:12:B8:1D:DD:C5:5B:FF:14:17:F8:83:B8:9D:2B:D0:96:84:71:EA
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:88:8e:e1:28:02:49:82:e7:23:d1:23:e0:40:a1:ae:12:0c:
6c:28:37:0e:9d:12:60:1d:d0:f9:31:97:a0:5a:11:88:73:df:
58:3e:d6:58:83:bd:6f:1f:57:90:d7:23:5c:29:83:a3:ad:09:
ad:3e:cd:a0:1d:68:5e:c1:20:3b:ca:6e:09:a2:0c:10:f8:47:
66:b1:8f:81:41:61:3b:61:b7:b8:24:f2:a7:f9:20:1e:b4:19:
6e:f7:65:3e:2b:08:bd:15:b1:2c:6b:cd:0f:31:f2:59:6e:d9:
27:be:f1:3b:7d:dc:39:9a:71:48:b9:44:16:a5:00:9b:80:60:
d9:db:6e:44:a3:6d:89:c5:c5:4d:a6:9d:21:b6:db:62:96:58:
83:48:93:87:b9:41:b6:bc:47:ec:7d:df:03:88:04:0d:84:05:
9f:f3:d3:be:ba:95:c7:4a:b2:63:d0:1f:73:a2:93:39:b8:96:
e0:ea:a3:e0:ce:11:68:0f:28:b0:f3:fe:b3:8a:51:f5:03:d0:
38:e5:20:9b:0f:9a:95:35:ed:e4:94:22:12:99:f9:6b:d6:c6:
04:17:3f:39:06:57:38:65:dd:52:cc:ff:2f:51:ae:29:36:89:
fc:18:12:77:59:8b:e3:94:8f:ca:26:9e:2c:ea:20:bd:3c:20:
20:57:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:27 2026 by rpki-client