Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json)
Hash identifier: Y3GHi0kkANZDeGMPwJ6rlgifagZM9y4tbhxY01lkRFA=
Subject key identifier: 76:AD:63:B6:13:1E:2E:19:64:5A:7C:1F:6B:DC:1B:81:CC:2E:C5:05
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 019D281677DE9CB1174DA7DAF7B9736F9C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: Uyak9FY9ba4bxHqEK0yM1pkZMUw.roa (hash: eKt2OFgdGFEDf87H4DQvI0kzMnm6G7iHFK8YVozoyak=)
2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: GMnaLvp7ELdl6TGh7Cl2xds41PRTs1EPOFGGtySyC28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:77:de:9c:b1:17:4d:a7:da:f7:b9:73:6f:9c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=76ad63b6131e2e19645a7c1f6bdc1b81cc2ec505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:51:81:41:98:aa:ec:36:5a:38:5b:81:fd:
34:62:5f:f2:d7:72:de:e0:ee:bb:3b:d9:97:80:b6:
3e:6c:b5:ac:89:17:4c:18:7c:aa:2e:f7:a5:39:01:
fc:88:33:1f:da:bd:13:32:18:fe:1a:b8:f3:1e:8b:
57:37:b1:83:e1:87:4f:1c:47:78:dc:93:51:9f:95:
59:96:dc:10:50:50:21:fb:bc:01:06:f8:61:d9:a4:
29:e8:51:38:78:16:16:19:d1:3c:9a:6f:bd:f3:3b:
4d:18:7a:ab:a5:f2:dc:7f:40:29:e2:63:92:9d:42:
15:ca:dc:0e:55:a6:4e:e6:77:74:3f:39:bb:ac:29:
23:80:64:41:cd:d4:22:44:5f:27:d9:e4:72:85:31:
5a:33:31:e3:11:6c:f7:6a:23:c3:a5:28:f0:71:3f:
63:2f:7c:74:b7:e1:b3:b0:ab:9c:51:33:f1:d2:1e:
48:03:59:d4:c8:b5:19:51:4c:65:11:a3:35:02:c8:
63:8f:c2:4b:98:e3:e8:e5:d0:b4:30:28:79:4a:b5:
9b:8c:9d:97:8c:8d:90:bc:ad:c3:16:b5:da:32:a3:
f1:30:95:ad:e3:02:04:68:ea:ec:8c:43:0d:0d:84:
c9:86:a8:1e:de:bb:14:76:1d:76:76:e1:f3:11:6a:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AD:63:B6:13:1E:2E:19:64:5A:7C:1F:6B:DC:1B:81:CC:2E:C5:05
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:46:c3:12:cd:2d:75:33:f1:e3:90:a7:18:e3:f0:52:21:8b:
e4:5f:31:2c:3e:1a:2c:ea:b5:db:b2:3c:a7:20:e4:df:0f:31:
a3:cc:00:a6:6d:d2:93:f1:04:cf:52:92:dd:5e:2f:39:ed:22:
d6:94:06:5a:5b:00:19:14:94:6b:e5:32:99:c4:3a:63:9e:9d:
02:e6:af:c8:8a:10:6e:db:86:28:5c:a5:45:1e:49:69:b2:93:
01:6d:45:a3:c9:b3:da:b3:90:e3:2c:e3:0c:a2:88:04:94:53:
87:e2:50:f0:2a:b2:79:44:90:19:3a:6e:85:2f:86:d7:c9:95:
df:a3:13:e8:a5:62:28:7e:56:88:7c:7b:b4:37:d4:98:b1:10:
a7:3f:a8:6b:81:6d:35:3b:04:07:9e:51:db:5d:f2:aa:a3:fb:
76:a9:52:6c:08:36:3b:c2:d8:5f:82:53:d0:bb:7e:11:20:fa:
89:ad:9e:d4:ef:d6:ea:bf:1f:84:12:56:f7:d4:d5:12:1b:ca:
71:ad:23:7c:7d:36:14:79:2a:5b:4b:ae:da:2f:87:23:8c:8e:
5e:4a:e1:52:d3:ec:d7:6c:6c:32:f8:8b:dd:da:67:1c:11:4e:
c3:03:bf:87:ac:79:ac:01:66:6f:ec:87:98:15:4b:9a:eb:6f:
31:95:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:09 2026 by rpki-client