Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File: CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier: sy4Kp2Olda7I/k5rPYeHR/SSzC6WD0eK2fEMOmr9d5A=
Subject key identifier: 20:90:51:D9:F4:DF:1D:CA:0B:4D:44:DC:68:3B:52:1E:45:16:C5:CB
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer: /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial: 019D37F713692ACD78DB00BE536AA73E73E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number: 1412
Signing time: Sun 29 Mar 2026 05:00:32 +0000
Manifest this update: Sun 29 Mar 2026 05:00:32 +0000
Manifest next update: Mon 30 Mar 2026 05:00:32 +0000
Files and hashes: 1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: Rfwc2Qkz2/2i8Xe97xKoCXGgWDWW2HPoM5krLdqz/uY=)
2: lraVilWlpRwJwEb3HMYRqrG9ypE.roa (hash: rxQGW+9bYJxaygOsVFP4v6AJEoysywtUM+KMY7B4r/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:13:69:2a:cd:78:db:00:be:53:6a:a7:3e:73:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Validity
Not Before: Mar 29 05:00:32 2026 GMT
Not After : Mar 30 05:00:32 2026 GMT
Subject: CN=209051d9f4df1dca0b4d44dc683b521e4516c5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:63:0e:30:0e:e2:0f:27:70:7c:92:78:f8:
db:bc:62:eb:55:4b:1d:71:ae:98:9e:c1:3f:fe:e3:
21:67:d2:8b:db:45:a8:47:af:92:94:fc:70:f3:96:
4c:a2:4a:d7:d7:ac:67:60:1f:3f:f6:36:55:7e:e3:
79:f1:b7:c9:1a:fe:1e:2c:f3:ef:10:39:f1:68:8b:
3c:15:75:90:1c:00:98:6e:ac:66:a8:6d:2c:01:86:
89:45:aa:38:12:80:78:2f:ff:d8:3d:f7:78:31:4c:
f8:96:5f:6b:23:9b:9e:de:a4:ed:5d:73:f6:58:5e:
1d:ae:82:02:01:14:d7:dc:ff:77:89:9f:46:5d:c1:
86:e2:d3:53:61:df:02:a5:1a:c2:51:d8:58:f2:22:
e0:0a:50:a2:3d:b0:e9:ab:76:87:72:a6:6e:7f:41:
75:c7:83:72:00:dc:3c:4b:89:31:7a:41:03:1e:d4:
14:ad:62:5e:6a:cd:33:6d:61:e6:d5:57:48:27:45:
1a:93:56:35:61:ac:69:cb:91:0c:ec:d1:d1:a5:51:
b3:ae:5b:e1:d7:a9:bc:d6:54:a2:ac:89:36:f1:b8:
b5:04:85:31:05:c8:2d:42:8e:ca:85:e7:37:5f:96:
e4:16:27:e5:60:73:e1:2a:35:83:29:88:25:a0:f1:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:90:51:D9:F4:DF:1D:CA:0B:4D:44:DC:68:3B:52:1E:45:16:C5:CB
X509v3 Authority Key Identifier:
keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:32:8a:7a:39:3d:76:52:5b:ba:6a:cb:1b:32:1a:e8:e3:bc:
38:13:d3:da:ea:91:e2:1c:a2:1e:79:fe:7d:5a:e5:63:09:50:
77:3c:de:62:49:70:63:ae:62:a8:eb:7c:f8:05:96:13:bb:8e:
03:62:c0:de:47:6f:9b:7f:15:12:17:f6:19:ca:40:97:79:e5:
ab:80:f2:ce:2d:bd:30:6e:b5:b1:c6:1e:16:d0:67:de:f1:2f:
87:2b:46:d2:a9:a5:1a:5e:0f:b7:1f:3f:bb:de:60:e7:bf:71:
04:a4:6d:fe:f9:37:86:20:71:7c:9d:86:16:d4:c1:21:2e:77:
40:f3:ee:d3:03:6a:c4:c1:f8:c5:f1:e4:65:25:d0:85:37:8f:
a2:ed:03:ef:02:9f:a9:a3:4c:f1:cb:d8:ae:79:56:64:88:be:
4d:81:aa:df:8e:03:86:84:42:33:cd:e0:8e:34:49:79:94:d1:
05:a5:17:ca:1d:b7:dc:d9:ba:d6:f9:e0:78:b7:4b:8c:14:11:
25:b1:8b:82:79:0a:8b:45:81:6c:e3:8e:a0:82:a1:25:8f:fb:
61:db:a2:19:fc:be:6a:9d:08:32:e4:5c:51:73:40:f6:d9:4f:
d5:df:bd:6c:54:14:3a:d7:59:39:19:c6:ab:9b:2c:84:19:17:
40:12:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:40 2026 by rpki-client