Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
File: cha_aL4onmHE01vUAmZi2OT76vE.mft (raw, json)
Hash identifier: IWwmt85jhKg6iKG1qeK8FUp3Lg02Fa+3OT9woyySJnk=
Subject key identifier: DB:A2:E3:64:6B:02:5C:EE:22:EF:D1:50:D5:EC:5B:03:10:ED:DA:B9
Authority key identifier: 72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
Certificate issuer: /CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Certificate serial: 019D2628A5DEBA136BFEAAE60254FFA1CC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
Manifest number: 019F
Signing time: Wed 25 Mar 2026 18:01:31 +0000
Manifest this update: Wed 25 Mar 2026 18:01:31 +0000
Manifest next update: Thu 26 Mar 2026 18:01:31 +0000
Files and hashes: 1: 6kDtRGD72hg_ViEDsunZWrtev2g.asa (hash: 7UpgN+iZ6ujyYBq4PaIilpgD97viaVXyBxo4zJETiRU=)
2: cha_aL4onmHE01vUAmZi2OT76vE.crl (hash: DJJcq6dTWhfjkTz849XRIC3MRwZ4WUif7TSqxn+5ddU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:a5:de:ba:13:6b:fe:aa:e6:02:54:ff:a1:cc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Validity
Not Before: Mar 25 18:01:31 2026 GMT
Not After : Mar 26 18:01:31 2026 GMT
Subject: CN=dba2e3646b025cee22efd150d5ec5b0310eddab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:ef:b8:78:2f:52:77:77:a6:6c:c2:0d:5f:
5b:c1:02:e0:6e:f1:3d:54:7b:ee:4b:d2:80:3a:c0:
6d:b9:c0:2c:0a:b4:5f:ed:78:83:51:c2:a3:a3:10:
12:64:78:d5:16:6c:58:ce:fc:20:35:16:b7:e0:aa:
b8:41:75:67:98:46:0d:c2:eb:72:7d:76:a8:c3:09:
74:92:74:bc:9a:bb:dc:00:58:57:40:f6:ae:3e:70:
ef:39:0d:2e:92:d4:5d:0e:fb:4e:bf:91:b7:3f:7c:
ef:6d:29:ee:66:23:11:a3:fa:b2:da:ab:82:bc:3e:
be:4c:21:d8:04:e0:95:ad:84:8c:70:32:92:f9:61:
3a:a5:c7:64:da:3c:07:43:7d:17:c8:3c:6e:7e:f4:
19:86:82:24:c8:bf:f9:97:ea:04:e7:7b:1b:48:72:
bd:04:fe:4c:88:59:13:9a:76:49:b2:41:ba:8e:1a:
4e:62:48:b9:0b:ad:99:89:e8:4f:0f:4c:80:f1:6d:
6c:f5:8d:22:0f:65:bd:b9:97:7b:c7:99:c3:2c:ec:
9a:34:f2:ff:e0:c7:18:15:1c:6e:8b:cf:c5:bb:19:
25:34:6a:84:e4:b2:97:15:0b:61:bd:20:05:93:7a:
28:dc:04:c5:25:aa:fe:99:ed:d3:eb:1b:4b:0b:a2:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A2:E3:64:6B:02:5C:EE:22:EF:D1:50:D5:EC:5B:03:10:ED:DA:B9
X509v3 Authority Key Identifier:
keyid:72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6b:df:ed:ba:87:44:f0:0c:10:bd:e9:c5:a4:b7:d9:e8:48:
ad:21:cd:92:2a:8b:00:b6:9b:5c:fe:4b:9a:37:be:3a:1d:76:
ea:4c:31:0e:ef:42:0d:61:ed:cb:41:08:15:e5:4d:9d:93:bd:
42:da:04:ad:63:66:25:44:e1:fd:97:50:79:c3:44:86:b1:de:
6e:49:df:c3:d7:80:e2:33:d2:3f:d4:32:7d:d2:77:e4:00:72:
6f:1b:90:de:5b:63:0f:11:2d:da:14:b4:9f:50:a9:55:75:c7:
40:b2:2e:1b:07:f3:58:1f:ae:a9:a4:07:79:92:21:62:98:87:
dd:50:c9:14:8c:04:07:d1:96:7d:8f:5c:84:cd:7d:93:d5:16:
68:1b:5f:8a:4e:83:99:f5:17:7c:1a:fe:97:04:ff:7e:a1:36:
39:1e:d4:73:81:44:fb:b4:32:ab:99:7e:10:48:d3:b8:d2:9b:
45:01:8f:e5:9c:ca:e4:eb:0d:67:e6:b8:70:62:73:60:a2:69:
a7:79:0a:e1:7a:43:07:63:9d:b7:02:ee:28:5e:bd:2f:b3:cb:
85:bc:7f:84:89:1b:93:84:14:d2:70:b3:da:5f:ea:65:bb:65:
f6:af:ab:4d:50:56:58:8d:f8:0b:15:52:b7:2f:cd:be:07:63:
c7:d2:30:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:00 2026 by rpki-client