Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: IOl2CPFmnhgZ/aLMUioc5QkZ0mVFEcqRzBmlpkNmQw0=
Subject key identifier: A8:87:D5:CB:5F:09:04:B3:64:DA:7F:7E:65:ED:AB:09:C3:B5:EF:08
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 019E311793823742D6E44D8249CB690D1489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 1493
Signing time: Sat 16 May 2026 14:01:29 +0000
Manifest this update: Sat 16 May 2026 14:01:29 +0000
Manifest next update: Sun 17 May 2026 14:01:29 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: /n8kwAkDIgf3wrpEboijjlJVyfC+YTeqPIKHwj7DlQo=)
2: lraVilWlpRwJwEb3HMYRqrG9ypE.roa (hash: rxQGW+9bYJxaygOsVFP4v6AJEoysywtUM+KMY7B4r/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:93:82:37:42:d6:e4:4d:82:49:cb:69:0d:14:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: May 16 14:01:29 2026 GMT
Not After : May 17 14:01:29 2026 GMT
Subject: CN=a887d5cb5f0904b364da7f7e65edab09c3b5ef08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:11:08:58:48:60:b1:b2:c0:0b:d1:ce:12:
81:b0:1a:03:f4:0d:a7:ee:4e:99:80:5c:49:dc:f8:
71:da:1b:23:f4:0a:98:88:a8:1a:05:ac:e2:5d:64:
f5:b8:1a:ae:80:04:7a:5b:9c:31:03:31:5d:fe:22:
0f:a1:a7:ea:fe:c4:fd:76:f0:d8:b0:85:99:b9:2c:
82:33:b2:ff:33:09:93:35:bb:29:09:4e:e5:97:ff:
b0:a7:23:61:fa:62:be:d5:55:12:72:a4:4a:90:57:
a4:93:8c:6d:c5:7d:7b:b0:c7:cb:7b:31:66:a4:88:
10:6d:19:e8:68:10:cd:7b:c5:63:03:c4:b9:ca:64:
e2:d1:b3:bc:cb:fd:25:15:21:79:3d:46:01:09:6a:
81:2f:71:b7:12:d9:1b:68:13:74:53:3e:71:e0:2a:
fc:6f:68:ee:76:48:8f:8c:5e:d6:c9:60:21:2d:a8:
ce:d4:bd:ec:fa:36:1c:76:15:18:4f:f0:2d:43:2a:
39:91:ff:d0:40:99:92:d2:99:5b:5c:4d:41:84:bb:
21:05:ff:96:ba:05:bb:6d:f7:60:a0:43:55:48:27:
85:a4:f8:55:50:42:d6:00:30:91:9d:98:a2:77:81:
7e:44:2a:88:08:79:2a:28:77:a0:42:59:ee:4c:6c:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:87:D5:CB:5F:09:04:B3:64:DA:7F:7E:65:ED:AB:09:C3:B5:EF:08
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:86:2e:b2:e2:9b:cf:2a:25:61:69:02:71:4b:0d:9b:e8:ac:
50:55:71:3b:16:7a:fb:40:2a:d9:82:e7:1d:f1:a2:0b:53:4a:
54:1b:32:26:e9:05:2b:a9:f3:b3:4f:09:99:1d:a2:50:b6:6c:
64:13:21:56:9d:b0:e9:b6:b7:fe:47:de:dd:77:e9:0a:19:14:
7f:11:c2:90:0b:5d:33:2d:d9:c6:a9:1b:2a:3f:35:b1:3d:9f:
7f:66:70:0e:ab:7a:6b:1c:a5:65:80:fb:b3:8a:7c:76:9c:4e:
77:a0:ad:8c:bf:29:95:3f:81:92:52:62:e3:78:9b:d0:db:38:
61:9b:94:3d:aa:9c:af:ba:40:d5:2e:d1:c6:bd:a7:bb:05:cb:
09:76:7a:b2:ab:b6:1e:99:86:98:ab:f2:eb:21:59:57:3a:24:
a3:b3:bd:6f:d4:db:08:7f:ab:b9:ec:d9:d9:0d:e3:0b:3d:d3:
67:11:37:41:22:7e:79:32:22:61:af:30:21:38:dd:f7:7c:77:
1b:46:21:7e:41:29:a9:2d:8a:e9:ad:33:f4:34:cf:57:ae:b1:
c9:15:49:bc:2f:2b:b1:47:9e:b4:5a:f4:b6:6c:99:fb:12:f3:
d5:fc:ff:03:06:77:22:b8:73:c8:0f:68:a6:a7:8e:61:b5:7b:
b2:53:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:02 2026 by rpki-client