Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: cE2mf5b4hXYxOczeXQq0D2fOhLqGZd7w6w9vQ7JrG4k=
Subject key identifier: 9F:6D:E6:8B:36:95:34:28:D4:7F:F6:35:D6:34:9B:EA:95:0C:1F:C6
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 019F18D66E10A7FBBAF5324EFF7930A03ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 13BE
Signing time: Tue 30 Jun 2026 14:02:13 +0000
Manifest this update: Tue 30 Jun 2026 14:02:13 +0000
Manifest next update: Wed 01 Jul 2026 14:02:13 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: 4zR15aNGtYQtFTjFP+BLBY4q7u2LafIYNZN4c4c/Mm0=)
2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:6e:10:a7:fb:ba:f5:32:4e:ff:79:30:a0:3a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Jun 30 14:02:13 2026 GMT
Not After : Jul 1 14:02:13 2026 GMT
Subject: CN=9f6de68b36953428d47ff635d6349bea950c1fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:ba:55:d2:b6:d8:8e:bc:ec:d4:47:90:80:
90:0c:0f:74:a3:ee:09:27:7f:1d:3e:5f:32:c1:2b:
6d:0d:4c:f4:91:a5:b0:3f:4d:7c:fc:7d:41:90:57:
e5:15:b2:89:b5:bc:cd:04:bb:55:1b:cb:a6:42:a4:
fd:b6:cd:1a:39:5e:2f:86:2e:14:4f:d3:13:f6:97:
74:c1:1c:fc:81:7e:08:04:56:36:5e:eb:e9:2d:07:
29:d6:15:30:0e:03:f9:ad:12:f8:7b:f6:ff:5f:c5:
4b:87:93:d2:05:88:d0:7f:4f:79:c9:c6:e3:dd:c1:
5d:e8:c4:2c:24:13:81:bb:f5:45:86:64:7a:fe:37:
f7:8a:36:e7:63:ab:7c:15:f7:42:f2:e5:dc:c3:a7:
84:1b:1c:05:be:60:c1:9e:c6:13:a9:72:95:3d:73:
4d:fd:43:3c:93:39:3e:3b:0e:16:26:ae:23:9e:09:
42:b5:83:41:ff:f7:2f:af:95:55:c6:42:04:18:27:
80:f0:29:21:18:8c:1d:6d:87:a1:27:6c:b4:49:ed:
60:cb:aa:88:55:73:d1:2f:e1:90:6f:b2:93:91:a4:
26:3d:56:bd:00:3b:8e:a3:97:90:99:81:41:21:23:
5e:ac:99:3a:14:28:9b:df:3d:ec:1b:90:76:7e:97:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6D:E6:8B:36:95:34:28:D4:7F:F6:35:D6:34:9B:EA:95:0C:1F:C6
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b9:da:42:fa:01:1e:3f:fa:04:01:fc:55:8f:c2:ef:91:6f:
08:76:78:fe:5b:33:4a:2e:7b:64:f4:65:36:24:60:39:55:b4:
6e:d1:29:5f:cb:af:06:c9:11:e5:19:3f:b7:48:1b:72:98:16:
3f:bb:5b:f6:61:dc:00:d9:fd:39:88:df:00:fd:60:bc:fd:f6:
4e:68:36:1c:2e:40:05:5d:bc:94:4b:f3:2d:3f:24:e5:d3:0f:
da:6c:4f:f1:cf:1b:13:f7:e5:32:5d:2b:89:d8:b0:75:3d:7d:
aa:c0:83:29:fe:47:f0:35:9d:5b:12:a9:3f:41:08:73:8a:38:
1b:ec:1f:c9:5a:94:8a:ba:6c:45:54:b1:6f:44:61:a2:f4:7e:
e7:af:ff:a1:39:4e:d7:32:ba:97:f3:2b:8e:05:73:9f:ae:31:
2d:32:bb:7b:48:86:bc:4b:fd:59:0a:c3:ea:32:d2:09:82:b5:
9c:9a:0f:52:0a:3b:a1:64:4b:92:13:ce:38:94:ac:2c:7d:b7:
02:53:0c:5d:9a:16:3d:ab:e8:db:e6:e9:80:64:25:0c:a8:b8:
04:ee:af:02:59:7f:ae:85:32:f7:a4:1f:d5:87:0b:ed:6c:4f:
f2:c8:d0:e0:2c:3b:e6:30:56:a2:21:53:92:5d:e1:0a:79:35:
61:23:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:17 2026 by rpki-client