Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
File: CheLtUkzwTowA4cgu0NB-f8r7j4.mft (raw, json)
Hash identifier: YCF9JINqOm2MCOq6CNibkZyiAtRwO/TWCeYg6V2PeDo=
Subject key identifier: 99:47:EF:D8:30:3A:E5:FB:FF:4E:A6:2F:46:E0:1C:78:49:FD:71:7C
Authority key identifier: 0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
Certificate issuer: /CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Certificate serial: 019D39099C649E247C64348B05546EBB990B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
Manifest number: 01DF
Signing time: Sun 29 Mar 2026 10:00:24 +0000
Manifest this update: Sun 29 Mar 2026 10:00:24 +0000
Manifest next update: Mon 30 Mar 2026 10:00:24 +0000
Files and hashes: 1: CheLtUkzwTowA4cgu0NB-f8r7j4.crl (hash: 3j9hhGByXLaHBkJ/NsVgLI4jKgG7DPfW2DFxe8PhVag=)
2: _ppZcJvhKyMT7u0OoJi2R_ngeSE.roa (hash: UhX6rrUi7juaS+ftLotvN09V5C7za1f0hNW2nd3JUk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9c:64:9e:24:7c:64:34:8b:05:54:6e:bb:99:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Validity
Not Before: Mar 29 10:00:24 2026 GMT
Not After : Mar 30 10:00:24 2026 GMT
Subject: CN=9947efd8303ae5fbff4ea62f46e01c7849fd717c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:83:3e:37:27:e9:1d:3b:95:b6:c3:e4:96:
17:0e:4c:8d:71:f5:20:3f:fc:b9:ae:3b:11:fe:4b:
75:dc:c6:b0:ef:da:f8:af:b7:4b:84:2e:8d:bd:b1:
c2:1b:82:e0:a9:ae:ce:a2:e4:52:da:63:96:f2:f4:
d0:8d:7d:c3:9d:5b:23:f3:b0:eb:72:b7:e7:ba:22:
0e:1c:2c:28:ec:88:4c:b1:ed:b7:77:b5:74:df:51:
49:fc:76:14:4e:07:d7:04:b7:3f:fb:7f:6b:69:0a:
87:40:59:52:f0:aa:23:48:ea:7e:92:59:6a:8e:41:
16:40:fe:46:4a:19:f6:69:76:46:c5:ad:ab:46:a7:
f6:d4:92:0b:c6:c2:c2:35:61:52:45:90:00:58:29:
65:fc:fc:21:18:94:0e:72:fd:f4:33:f2:49:af:3e:
ac:b9:5d:02:93:21:8f:f4:10:62:3e:31:de:a2:00:
82:34:34:9a:88:b3:51:c0:89:8c:45:59:3a:03:60:
6b:d7:27:27:26:e2:37:fc:96:bc:74:df:45:27:da:
ba:9f:b5:c0:99:77:07:93:80:0a:d5:76:76:db:1d:
5d:b4:51:11:a6:21:57:b0:9e:0f:76:85:2d:df:92:
ea:bb:40:28:23:fc:6e:0d:c8:d9:f6:55:3d:ff:4a:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:47:EF:D8:30:3A:E5:FB:FF:4E:A6:2F:46:E0:1C:78:49:FD:71:7C
X509v3 Authority Key Identifier:
keyid:0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d2:3b:36:e7:9e:1b:37:3b:f6:98:6c:af:72:58:79:11:0d:
cf:8b:c8:ef:60:99:ab:63:d3:7d:c3:31:fa:86:8f:d9:84:df:
25:15:aa:2a:3e:97:7f:29:b4:8b:ed:a3:f5:10:2e:36:c3:d2:
3e:7d:28:5d:87:5a:be:8f:a9:f4:c1:dc:da:36:69:24:07:23:
93:90:6f:ff:11:8a:e1:7d:79:15:fa:a3:63:6f:a2:ae:ab:03:
ad:a8:23:ca:11:35:ad:31:06:c8:34:4a:43:bd:0d:ed:b3:23:
5b:63:e6:1d:1a:7c:b2:cf:3c:fe:88:49:77:52:79:7e:85:14:
8f:0b:17:a0:de:34:c9:97:c5:64:3a:74:9f:44:f0:79:45:66:
ee:ca:33:37:da:0e:60:ee:f1:74:dc:44:b7:e2:f8:61:11:0e:
4d:1d:01:de:ad:32:b0:98:09:5c:89:6a:cd:09:92:48:68:c5:
11:4a:6a:fc:ec:2d:99:80:e1:0c:4c:cd:a5:fb:30:ae:7d:8f:
fe:d3:3f:8e:e4:de:a3:24:74:f9:df:99:f5:d3:b5:52:c6:2e:
a1:c9:73:99:3d:83:aa:a7:ab:10:d8:44:c4:4a:9a:72:96:c6:
05:f4:55:c6:40:98:9c:f5:4f:68:8f:c5:12:43:6c:3c:b9:d1:
25:03:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:07 2026 by rpki-client