Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: RRydt/4fyMD8aWMh9U6yPaeqbIYgISGLJfTBy/BYTu4=
Subject key identifier: B8:9D:8A:AA:BC:F7:5C:4F:19:ED:F9:56:F0:D4:C4:A9:95:8A:31:4C
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 019F18D6F45F2C3E0270D21E25EEA2759280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 150B
Signing time: Tue 30 Jun 2026 14:02:47 +0000
Manifest this update: Tue 30 Jun 2026 14:02:47 +0000
Manifest next update: Wed 01 Jul 2026 14:02:47 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: 8bsKB1mlP80An22nwWxYX4bUl6GAQScEyYtVf/XKEWg=)
2: lraVilWlpRwJwEb3HMYRqrG9ypE.roa (hash: rxQGW+9bYJxaygOsVFP4v6AJEoysywtUM+KMY7B4r/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:f4:5f:2c:3e:02:70:d2:1e:25:ee:a2:75:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: Jun 30 14:02:47 2026 GMT
Not After : Jul 1 14:02:47 2026 GMT
Subject: CN=b89d8aaabcf75c4f19edf956f0d4c4a9958a314c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:6d:96:bc:4f:be:99:73:ed:3b:9f:9b:fc:
34:7b:44:3d:52:54:96:25:c9:90:8f:58:b5:19:91:
f7:ee:f9:19:46:5b:9f:91:dd:d5:07:86:69:90:9c:
37:6b:5c:04:9f:b4:03:3d:e5:5e:67:1e:d3:42:f6:
dc:f6:e6:a2:52:da:e5:6b:fe:3c:29:27:aa:45:d3:
a4:25:78:29:70:b6:ee:48:d0:48:5a:29:be:07:9f:
ff:0f:9d:11:c8:88:f0:5d:5e:4d:7d:cb:39:a8:f0:
4f:10:11:7e:39:a3:7d:f0:57:a8:b4:e9:5d:52:0f:
cc:b8:3c:7c:cc:94:1c:05:bf:2a:3b:b8:4d:73:f9:
15:da:99:a9:46:4e:da:69:25:10:ba:e0:e6:3c:08:
30:02:c5:8e:0f:ce:89:80:ef:df:45:94:3e:58:48:
06:09:ae:dd:b4:3c:e9:af:42:9e:e3:5a:49:2d:77:
e7:c2:e6:d1:b1:2c:b4:28:2c:22:77:a8:52:cc:22:
b2:e0:c3:6e:e3:ee:a4:47:8b:3b:ca:eb:cd:5b:4d:
2e:b7:15:3c:2e:2a:29:fe:81:6a:dd:67:e4:db:a0:
0a:fe:e8:e0:4d:12:31:a4:74:a0:ea:fe:de:f6:06:
08:b0:a5:28:c1:4d:27:92:e5:3a:f4:86:84:85:b8:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9D:8A:AA:BC:F7:5C:4F:19:ED:F9:56:F0:D4:C4:A9:95:8A:31:4C
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1f:4f:de:69:73:22:ba:52:5d:8c:dd:27:7e:e4:df:80:3b:
38:b3:da:80:cf:cb:f1:0d:49:fc:78:dd:54:6b:e5:e8:5e:66:
6c:69:0b:c7:c6:d2:d0:d8:50:cb:b9:25:71:7f:75:bd:fb:b7:
e2:d0:2e:55:55:f4:db:02:07:44:3e:59:58:0d:6d:90:92:dc:
41:81:f6:af:47:a9:eb:9c:3c:79:9c:40:ce:d1:ba:f1:43:8f:
0b:f0:6f:48:03:27:a4:0b:d8:ce:3d:55:73:27:12:19:6d:64:
43:34:40:8a:b3:7b:63:db:b5:1e:dc:f2:0b:fb:5f:16:6a:2a:
ee:5c:3c:6a:5a:49:56:9e:11:68:ed:cf:e1:9b:8c:7f:25:3a:
87:78:b6:13:ab:23:bc:c3:53:79:7b:3b:d0:90:ab:8e:69:3e:
60:73:66:df:a9:e1:65:b9:52:5c:89:3e:9a:e3:4c:c6:99:1b:
50:4f:6e:f5:eb:95:f5:9d:ae:59:d9:85:30:13:08:d6:53:15:
33:8c:fc:89:66:7f:9b:eb:82:b7:dc:da:ae:dc:27:dd:39:4f:
21:bd:9c:69:56:ad:f7:77:55:4e:75:10:b1:13:07:6f:82:69:
09:af:8d:4c:e2:6a:58:7e:15:59:f2:bd:50:75:4d:a3:1e:bd:
12:c3:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:29:06 2026 by rpki-client