Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
File: CheLtUkzwTowA4cgu0NB-f8r7j4.mft (raw, json)
Hash identifier: 31ZJp3lRjk/S5SmOWzfFs385FKplTQQBssAbrx2Ck60=
Subject key identifier: AF:15:BC:58:68:F6:36:8C:0D:EA:F1:C6:FD:56:AA:0F:24:D1:D4:94
Authority key identifier: 0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
Certificate issuer: /CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Certificate serial: 01A03F723BA88296234EA5D67EE7FEE22665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
Manifest number: 0370
Signing time: Wed 26 Aug 2026 19:00:46 +0000
Manifest this update: Wed 26 Aug 2026 19:00:46 +0000
Manifest next update: Thu 27 Aug 2026 19:00:46 +0000
Files and hashes: 1: CheLtUkzwTowA4cgu0NB-f8r7j4.crl (hash: X2WVXz1ztDh7G7a5KVaY7aAnfAtC4qhcEvcZO8kscy8=)
2: _ppZcJvhKyMT7u0OoJi2R_ngeSE.roa (hash: UhX6rrUi7juaS+ftLotvN09V5C7za1f0hNW2nd3JUk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:3b:a8:82:96:23:4e:a5:d6:7e:e7:fe:e2:26:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a178bb54933c13a30038720bb4341f9ff2bee3e
Validity
Not Before: Aug 26 19:00:46 2026 GMT
Not After : Aug 27 19:00:46 2026 GMT
Subject: CN=af15bc5868f6368c0deaf1c6fd56aa0f24d1d494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:22:5c:c2:ad:7d:e5:9f:a7:03:fb:67:6c:
42:f4:c3:4d:eb:fa:e8:4d:3f:d1:e8:7c:bf:96:21:
57:27:2e:44:a2:9d:78:56:ec:8d:fa:60:c7:12:48:
97:bd:48:86:58:6b:4f:ed:df:63:67:44:81:3b:1a:
17:cb:60:99:3a:96:7b:2f:9b:ea:03:11:04:ef:b4:
75:eb:b7:bd:9e:1f:25:b4:50:ef:df:0f:2b:70:9e:
24:cb:30:15:29:15:9d:9e:7e:fc:12:8e:a8:a8:cc:
47:e7:32:42:51:67:f0:e2:98:65:13:a1:92:7a:cd:
1e:22:77:f7:6a:ef:99:c8:20:3b:22:4d:27:12:58:
69:86:6c:c6:56:fb:26:e9:0a:ca:2b:c4:17:7a:a4:
bd:9b:d7:c4:f8:e3:e2:36:3b:56:c1:cc:2f:69:ac:
70:67:e5:4e:55:21:3e:ab:12:a5:c6:5e:a9:c2:4b:
b4:0e:ac:bc:14:ec:f7:f4:b1:0d:5b:94:e7:47:cb:
65:27:f0:ac:dc:f9:5f:5a:b5:fc:42:18:fe:7c:cf:
1f:28:ef:a0:a6:df:61:a0:d7:c6:45:97:dc:b9:81:
ff:87:fe:59:bc:22:62:37:a4:a1:09:67:4a:7b:9f:
4a:27:7a:42:a7:b0:0f:48:c2:03:58:bb:7b:20:f9:
51:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:15:BC:58:68:F6:36:8C:0D:EA:F1:C6:FD:56:AA:0F:24:D1:D4:94
X509v3 Authority Key Identifier:
keyid:0A:17:8B:B5:49:33:C1:3A:30:03:87:20:BB:43:41:F9:FF:2B:EE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CheLtUkzwTowA4cgu0NB-f8r7j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8b9454-4ca1-462a-84e3-293c4d89c432/1/CheLtUkzwTowA4cgu0NB-f8r7j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6e:04:db:87:79:ec:f8:b2:0f:ca:03:cf:09:5c:27:fa:e8:
7e:84:57:cc:ce:09:4e:af:26:1e:b5:8a:8d:a6:c1:d3:90:05:
6a:01:b3:47:40:79:c8:45:f7:86:7c:a8:f3:0e:1f:b1:27:e3:
da:08:5c:f7:b6:2b:a6:bb:98:8f:ed:04:20:97:6f:86:32:22:
3f:68:c8:f4:1d:3e:9f:6c:35:cb:cb:b9:16:44:8a:f2:7c:6b:
34:ee:f6:bd:7b:39:57:c9:a7:05:38:1e:56:05:bc:8d:9d:c3:
04:14:19:1e:71:cf:dc:3f:d1:54:8e:1f:89:42:ac:2a:7d:45:
22:1e:3b:44:2f:6a:39:77:75:1b:7e:3e:1d:d8:5d:9c:89:bc:
0f:72:bf:bc:3f:9a:f9:33:da:15:e7:dd:90:3e:a4:cf:64:38:
5f:4a:6c:9c:24:7e:92:ee:8b:b6:47:21:2e:4b:79:99:df:a8:
c1:87:e1:20:d0:cf:5a:ef:b3:d2:91:cd:5b:c5:25:78:9c:45:
75:da:36:dd:d4:87:20:41:ef:dc:d1:22:2b:34:9a:2d:8a:25:
ca:7b:3f:43:bc:7f:dc:65:5d:b0:7f:c9:24:8c:8d:fc:35:4d:
d7:8a:78:06:10:7a:42:52:f3:c7:07:fd:b7:b0:86:ab:45:5f:
dc:78:4a:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/cjuogpYjTqXWfuf+4iZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMTc4YmI1NDkzM2MxM2EzMDAzODcyMGJiNDM0MWY5ZmYy
YmVlM2UwHhcNMjYwODI2MTkwMDQ2WhcNMjYwODI3MTkwMDQ2WjAzMTEwLwYDVQQD
EyhhZjE1YmM1ODY4ZjYzNjhjMGRlYWYxYzZmZDU2YWEwZjI0ZDFkNDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFMiXMKtfeWfpwP7Z2xC9MNN6/ro
TT/R6Hy/liFXJy5Eop14VuyN+mDHEkiXvUiGWGtP7d9jZ0SBOxoXy2CZOpZ7L5vq
AxEE77R167e9nh8ltFDv3w8rcJ4kyzAVKRWdnn78Eo6oqMxH5zJCUWfw4phlE6GS
es0eInf3au+ZyCA7Ik0nElhphmzGVvsm6QrKK8QXeqS9m9fE+OPiNjtWwcwvaaxw
Z+VOVSE+qxKlxl6pwku0Dqy8FOz39LENW5TnR8tlJ/Cs3PlfWrX8Qhj+fM8fKO+g
pt9hoNfGRZfcuYH/h/5ZvCJiN6ShCWdKe59KJ3pCp7APSMIDWLt7IPlRbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8VvFho9jaMDerxxv1Wqg8k0dSUMB8GA1UdIwQY
MBaAFAoXi7VJM8E6MAOHILtDQfn/K+4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2hlTHRVa3p3VG93QTRjZ3UwTkItZjhyN2o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi84Yjk0NTQtNGNhMS00NjJhLTg0ZTMt
MjkzYzRkODljNDMyLzEvQ2hlTHRVa3p3VG93QTRjZ3UwTkItZjhyN2o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi84Yjk0NTQtNGNhMS00NjJhLTg0ZTMtMjkzYzRkODljNDMy
LzEvQ2hlTHRVa3p3VG93QTRjZ3UwTkItZjhyN2o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPm4E24d5
7PiyD8oDzwlcJ/rofoRXzM4JTq8mHrWKjabB05AFagGzR0B5yEX3hnyo8w4fsSfj
2ghc97YrpruYj+0EIJdvhjIiP2jI9B0+n2w1y8u5FkSK8nxrNO72vXs5V8mnBTge
VgW8jZ3DBBQZHnHP3D/RVI4fiUKsKn1FIh47RC9qOXd1G34+HdhdnIm8D3K/vD+a
+TPaFefdkD6kz2Q4X0psnCR+ku6LtkchLkt5md+owYfhINDPWu+z0pHNW8UleJxF
ddo23dSHIEHv3NEiKzSaLYolyns/Q7x/3GVdsH/JJIyN/DVN14p4BhB6QlLzxwf9
t7CGq0Vf3HhKwQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:49 2026 by rpki-client