Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
File: CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft (raw, json)
Hash identifier: fvWolGkzBsgM4B5c6l58uRRYfvYM5pqLDzIyrmOEdtA=
Subject key identifier: CB:80:36:C8:53:9D:CE:C0:04:EE:C7:9F:61:14:B5:70:68:45:D3:71
Authority key identifier: 08:71:19:7D:AF:A7:1A:1F:B9:16:EE:0F:D9:45:E1:C2:3A:55:D9:E7
Certificate issuer: /CN=0871197dafa71a1fb916ee0fd945e1c23a55d9e7
Certificate serial: 019FF86C49F6F7A9730D530D9D39C8F1A52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
Manifest number: 47
Signing time: Thu 13 Aug 2026 00:01:14 +0000
Manifest this update: Thu 13 Aug 2026 00:01:14 +0000
Manifest next update: Fri 14 Aug 2026 00:01:14 +0000
Files and hashes: 1: 88EdeDABB-NjWV7m9scRSfiYFiE.asa (hash: mwR3ub0+0Dno6T1mW8HlTwvzj3E9hWCKitWBw9GKa+I=)
2: CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl (hash: Ab5F/WifSg2UiXRLoI8MRyplwQKTfnX7FCBHJI++0sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:6c:49:f6:f7:a9:73:0d:53:0d:9d:39:c8:f1:a5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0871197dafa71a1fb916ee0fd945e1c23a55d9e7
Validity
Not Before: Aug 13 00:01:14 2026 GMT
Not After : Aug 14 00:01:14 2026 GMT
Subject: CN=cb8036c8539dcec004eec79f6114b5706845d371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:0e:f0:ee:7d:8d:48:14:9a:0f:eb:fd:eb:
b4:24:60:02:88:1c:57:91:c0:de:84:17:6d:38:a7:
40:9e:2a:d4:1d:6b:f1:52:f8:fe:dd:31:c0:ad:1d:
71:51:46:c0:bf:36:b0:01:b0:8f:e4:60:14:5c:d0:
8b:25:18:e2:b3:57:3f:7d:b7:a5:ce:96:fd:01:df:
69:de:36:59:5d:2b:b1:59:60:9e:14:c6:e4:e4:c2:
ca:b9:ef:4b:b1:ec:e7:f1:49:fe:22:88:15:e7:55:
ac:e5:f4:b1:39:c4:bd:8f:8d:05:f0:c3:4f:9d:86:
5e:9b:1c:fa:29:25:79:40:12:38:70:4e:ca:b7:45:
8f:99:51:41:7c:88:74:d6:40:c8:39:6d:af:14:54:
ed:87:bb:3a:e9:db:7f:c6:5e:60:c2:5b:64:aa:49:
bb:d9:e9:81:d9:ee:9f:4b:15:d5:4c:77:e5:04:fe:
45:b5:65:96:e3:2e:b9:8a:f1:82:6d:93:99:0a:25:
d2:41:b1:b3:c6:73:62:a6:73:00:8e:27:7b:84:da:
1a:ae:48:b0:ba:a5:d1:54:e0:7d:6f:8b:f1:4f:0c:
6c:6c:38:6f:25:18:83:47:a4:93:17:9c:d0:81:a7:
0e:67:7b:58:ec:fa:17:16:cf:75:65:6a:8e:9e:e9:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:80:36:C8:53:9D:CE:C0:04:EE:C7:9F:61:14:B5:70:68:45:D3:71
X509v3 Authority Key Identifier:
keyid:08:71:19:7D:AF:A7:1A:1F:B9:16:EE:0F:D9:45:E1:C2:3A:55:D9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/084aa3-1477-4419-8a37-5cf61d6f9634/1/CHEZfa-nGh-5Fu4P2UXhwjpV2ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:92:39:c1:cd:f2:e9:39:5a:c8:a1:a6:72:9c:31:d7:b8:81:
1f:45:79:e9:85:e1:fb:c2:fc:51:58:17:ac:c1:50:5b:e2:8c:
b5:31:9b:ef:8b:db:ff:2c:d8:c7:43:80:9f:e6:e7:18:80:23:
09:4a:37:45:cb:f2:b6:77:68:63:51:b4:de:b6:e1:83:16:ac:
bd:2e:0f:7d:3a:92:75:0f:6f:66:f8:ae:79:7e:d8:d7:3b:d9:
2a:1c:ad:85:cd:30:12:a2:c2:d8:68:75:3e:f0:8c:f4:08:70:
c1:55:06:bd:4c:fc:3f:8b:67:84:7b:00:ad:ea:04:bd:28:05:
ea:02:58:09:a5:96:7e:85:ef:99:13:58:43:14:65:ec:94:3f:
68:66:4c:8e:5c:f4:ba:f8:a4:46:b3:5a:84:93:78:5c:fd:3a:
93:41:e9:bb:06:d0:45:8e:f3:90:b7:c8:67:12:e7:81:2d:53:
45:4e:9c:6e:e9:6b:7d:d5:a0:c6:ac:57:a8:d6:af:fa:3d:7e:
07:81:89:ec:09:6d:fa:c2:4e:e3:b6:f8:71:71:f4:09:fa:20:
ac:9f:c4:84:ca:36:69:9a:59:6f:a2:f5:7c:3a:14:68:8f:77:
88:0b:39:7f:76:a3:e4:49:0d:ad:8d:b7:9a:a8:c1:09:f8:d7:
b4:8a:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:37 2026 by rpki-client