Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier: 9lBtS+E5eW+ez9nhWaNMko6oiPWJOOFKN33nRJnnBXw=
Subject key identifier: EC:59:07:BD:8C:C0:30:D7:39:2F:5D:5B:88:B3:DB:D5:7C:1C:71:EA
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 019DCB2AC6AC57A4340CFCFE3027A1F42DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number: 161B
Signing time: Sun 26 Apr 2026 19:01:11 +0000
Manifest this update: Sun 26 Apr 2026 19:01:11 +0000
Manifest next update: Mon 27 Apr 2026 19:01:11 +0000
Files and hashes: 1: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: z+ERkIVynRjRGQjuobqaeAohAUwxciEQvFW0AwqJBIc=)
3: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
4: ZUC7Id2Okv2eHSSZdTBUkg-VCng.roa (hash: /lduSjfq1UA9xfg3a0WqS2j8mYLYGsas2BzQFm6I+Kk=)
5: mEdwgIPRh23OxSoHlQNJuRMghjc.roa (hash: F8DBsuD0LXSZtLRp2HPMhvbe4OQSD53Wc5fBou6rnO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cb:2a:c6:ac:57:a4:34:0c:fc:fe:30:27:a1:f4:2d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Apr 26 19:01:11 2026 GMT
Not After : Apr 27 19:01:11 2026 GMT
Subject: CN=ec5907bd8cc030d7392f5d5b88b3dbd57c1c71ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:9e:ce:2f:4a:a0:5f:5c:67:b4:a7:43:f4:
d5:43:04:fa:1e:dc:88:d4:2b:f0:d2:d6:ea:d5:a0:
73:92:aa:b2:ef:5d:7a:49:99:9d:80:23:31:c5:8e:
02:c9:e5:9b:7f:14:c0:f1:63:e2:b3:62:0e:09:4b:
27:a0:a0:5d:d1:4a:02:ed:70:11:25:7a:00:d0:7a:
68:bf:32:4d:4c:3b:b7:77:75:26:52:52:d8:43:c8:
cb:45:fa:75:ba:61:e9:47:9c:6b:5d:b9:ee:45:08:
85:d1:63:f8:96:49:6c:de:c6:97:1b:58:9d:bb:88:
2d:17:6e:68:0a:2e:9b:f6:58:b6:aa:6c:45:3b:fc:
fe:87:b6:97:7a:d5:d1:87:7b:7b:29:e8:70:cf:b8:
83:17:3b:7d:3e:8e:1a:b0:ee:71:6b:98:33:e6:e1:
5e:3c:ce:ab:d1:fa:27:93:f6:28:11:33:2b:9a:f4:
50:2e:0c:cd:ac:93:9b:4f:23:ea:34:9c:d5:8b:c4:
82:b7:9a:7f:e9:d3:17:19:ac:0f:f3:09:10:33:f2:
a6:fe:1c:8a:b3:0b:6e:22:98:0b:75:32:3c:69:90:
cc:37:da:4c:7f:92:a6:fc:a1:39:84:81:ee:c9:84:
84:82:34:92:6d:03:c2:ec:69:1c:25:22:e8:74:56:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:59:07:BD:8C:C0:30:D7:39:2F:5D:5B:88:B3:DB:D5:7C:1C:71:EA
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:79:16:3a:cd:9e:2d:54:39:02:2f:4e:14:fd:86:4a:5d:f0:
5e:d7:b5:79:24:49:c4:94:e2:d7:f2:a9:ac:c5:14:6d:95:99:
7c:88:c1:8a:ba:ef:9e:4c:51:b4:6d:d3:95:bf:22:06:45:b2:
dd:af:a5:df:7d:0d:d3:8d:d8:7b:58:8f:44:6e:ce:7b:bb:50:
da:97:cd:f1:b5:36:8b:4b:ca:e7:7d:af:9e:be:ce:26:ef:f6:
ae:9e:2f:ff:25:7f:d0:d0:ed:25:f9:00:4a:ef:16:b7:bd:79:
f6:9d:cc:c2:bb:2b:54:eb:87:30:3e:b8:ed:d5:db:10:a0:70:
56:ed:93:fc:15:58:cc:5c:35:ca:f9:c9:5f:6b:0d:c3:65:a0:
79:b0:e6:03:0f:ee:0d:76:56:11:56:36:bf:cb:13:66:7b:52:
7b:cf:73:ac:e1:57:86:c2:79:56:3a:85:e5:8c:af:a6:97:10:
11:ba:3d:66:9f:4f:78:ac:72:cf:4c:60:da:79:cd:91:e4:fc:
bf:5f:a1:ce:86:63:e8:41:36:9a:11:e5:3c:bb:b7:76:bd:d2:
19:97:3e:e4:95:3b:55:67:61:ff:fd:5e:20:cd:63:b4:cf:e4:
fd:cb:d0:e2:83:39:7a:fb:bc:5b:24:d7:ff:99:02:5c:84:a0:
4e:0b:92:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:32:08 2026 by rpki-client