Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: G65F9RlRwQJizplOtGv3vGUpmAXM/9Nw1v7rS4NZzSY=
Subject key identifier: E1:E8:DC:1F:74:22:27:5E:A0:5B:6C:58:F4:93:00:3B:44:F4:DD:CF
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 01A14ACF93BD73410F65342D11678F5A7266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 14E1
Signing time: Sat 17 Oct 2026 17:01:20 +0000
Manifest this update: Sat 17 Oct 2026 17:01:20 +0000
Manifest next update: Sun 18 Oct 2026 17:01:20 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: pGF8yUM4AbbZX0vk+mYCFroo7YfopJaxlYcaxjlwbOU=)
2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:cf:93:bd:73:41:0f:65:34:2d:11:67:8f:5a:72:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Oct 17 17:01:20 2026 GMT
Not After : Oct 18 17:01:20 2026 GMT
Subject: CN=e1e8dc1f7422275ea05b6c58f493003b44f4ddcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:c6:6d:e4:df:1e:a9:65:d5:78:24:5d:45:
54:3d:c7:fe:e5:4f:b4:29:66:2c:50:06:5d:16:f0:
4a:3a:85:27:f8:31:36:b9:b0:ca:81:ef:76:2f:ed:
08:9e:c2:6e:8b:2e:2e:d0:85:e8:66:88:b9:7d:27:
f1:78:fe:0f:e8:4d:da:e3:55:2c:99:be:93:e2:bf:
f0:de:f8:75:ae:bf:01:30:77:3c:9c:ca:4b:ff:dd:
95:71:cd:79:fc:42:a4:65:60:c2:25:b4:64:49:b3:
4e:e3:d8:7a:7f:8f:64:69:7b:6f:52:69:80:bb:5d:
20:b6:4d:66:ee:e9:b3:97:3f:68:60:43:b8:5c:f7:
48:76:51:e9:fe:c2:5f:e0:18:90:bf:55:5a:57:35:
e6:45:dd:2e:7f:5e:2e:04:a4:16:a0:52:a4:40:25:
db:a1:71:e2:27:69:7a:10:7e:8a:6e:0f:7a:06:17:
3e:df:53:c3:ed:e9:e7:24:51:f1:ca:2c:be:24:cf:
0b:c1:d3:cd:d2:77:d1:d7:3c:06:1f:54:57:5f:f5:
aa:f5:f8:63:57:d5:33:c7:ec:a2:e9:1c:0a:8a:ca:
53:8e:4f:c1:ba:ff:5c:92:c2:eb:65:2a:c2:90:75:
2e:b4:3f:96:13:54:44:f0:35:3d:8d:ed:c7:46:bb:
75:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E8:DC:1F:74:22:27:5E:A0:5B:6C:58:F4:93:00:3B:44:F4:DD:CF
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:57:b9:63:57:47:17:c6:94:7c:51:cd:1c:c2:13:f8:12:1e:
c4:a5:4c:01:c4:01:91:fc:bf:36:00:75:0c:3f:2f:d8:a1:1a:
11:96:82:41:ab:72:83:82:df:dd:0a:14:82:99:93:33:6a:1d:
d9:c8:74:35:6b:fa:b7:0b:06:36:af:85:bf:c9:fc:c8:b6:22:
34:b7:5a:ae:9a:cb:15:fe:64:13:b9:ad:78:d1:7c:66:2c:4d:
d2:a1:10:a4:8e:92:f0:bf:13:99:a7:f2:1b:12:12:da:89:15:
8f:06:fc:70:8b:12:f5:8a:e6:e2:88:0b:5b:99:ca:22:5d:94:
11:cd:dd:92:6a:3a:e1:e6:4d:0c:14:2b:b1:e0:77:ed:a2:ec:
d0:82:1f:99:f1:3b:88:e5:15:3a:53:1c:7b:3b:47:df:95:89:
98:57:11:83:3b:24:e9:f5:76:a8:63:49:07:56:e8:71:d8:8d:
4d:94:fb:b7:b8:66:10:d9:e7:ea:38:ef:46:fe:23:c6:b5:39:
7d:9a:d5:9a:a6:2f:f0:fb:49:1b:e4:b6:73:a0:0c:50:d2:a2:
54:93:47:08:2e:c6:e5:34:b3:e7:51:2f:8a:f3:ce:1b:c2:3a:
33:6b:23:e9:a7:71:38:aa:db:77:c9:b4:c2:82:f8:76:90:7d:
7d:54:74:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:43:50 2026 by rpki-client