Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
File: cha_aL4onmHE01vUAmZi2OT76vE.mft (raw, json)
Hash identifier: AIyO4b5mTD/JxSjN94PI0cE59G55WNz4T89Qe2nUS5A=
Subject key identifier: 9C:EC:B7:7E:BF:4D:A9:A0:38:9C:81:43:1B:E3:E8:2D:87:49:00:ED
Authority key identifier: 72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
Certificate issuer: /CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Certificate serial: 019F9022E184FE0F695859F48E07DCE0E6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
Manifest number: 02DF
Signing time: Thu 23 Jul 2026 18:00:32 +0000
Manifest this update: Thu 23 Jul 2026 18:00:32 +0000
Manifest next update: Fri 24 Jul 2026 18:00:32 +0000
Files and hashes: 1: 6kDtRGD72hg_ViEDsunZWrtev2g.asa (hash: 7UpgN+iZ6ujyYBq4PaIilpgD97viaVXyBxo4zJETiRU=)
2: cha_aL4onmHE01vUAmZi2OT76vE.crl (hash: Hu8AwDuadrprV14npIRRPAtwur1lTC6s0O6EDObxFXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:e1:84:fe:0f:69:58:59:f4:8e:07:dc:e0:e6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Validity
Not Before: Jul 23 18:00:32 2026 GMT
Not After : Jul 24 18:00:32 2026 GMT
Subject: CN=9cecb77ebf4da9a0389c81431be3e82d874900ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:83:fd:e0:32:6c:17:a6:b0:7c:d5:0f:62:
ee:77:7d:48:b3:6a:8e:6e:27:5a:41:cf:fc:97:e6:
96:44:64:90:27:7c:25:2f:f9:24:7d:63:69:0e:c6:
b9:a7:5b:a2:e8:c7:f1:91:58:9f:59:a5:4d:c2:7d:
32:4d:3d:ea:15:df:b5:6c:34:56:c0:8c:1b:70:05:
5f:aa:86:94:fb:15:bb:7f:75:c8:65:66:83:16:f1:
b0:75:86:58:5f:e6:db:bb:42:7e:d4:b6:9c:08:cb:
3a:09:64:7e:a0:7c:89:86:5e:44:6d:7d:e4:59:bf:
f3:06:d9:66:bf:06:81:d3:fc:94:83:d2:7f:16:b9:
cf:2a:9d:d2:67:4e:40:bf:a1:01:54:83:28:c3:21:
54:62:2e:3e:71:a3:3d:5a:ee:40:e0:e6:3f:a0:7e:
44:81:93:22:7b:86:44:8a:75:18:54:e3:56:ec:fc:
e6:47:a1:4b:5e:b8:37:b0:3e:cb:fe:2d:46:9a:24:
72:f4:9b:d2:b5:71:5d:a8:56:7a:fc:58:b7:c0:1c:
93:46:af:23:2b:5b:c5:b4:79:fc:05:b1:53:bf:9a:
e8:7b:62:9f:ca:80:36:ed:96:bd:0f:19:a6:23:23:
9a:14:3a:3c:67:b7:e1:f3:71:5f:22:fb:23:8c:4e:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EC:B7:7E:BF:4D:A9:A0:38:9C:81:43:1B:E3:E8:2D:87:49:00:ED
X509v3 Authority Key Identifier:
keyid:72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3b:7d:80:0a:75:cb:ec:ec:73:df:5c:ca:af:65:e3:96:94:
d0:51:37:62:8f:64:7d:a3:fb:07:30:b8:e3:be:d7:e0:62:55:
91:e9:a2:61:1e:62:3e:82:e9:34:d9:25:14:37:8d:db:07:97:
4b:0d:f9:6e:49:e6:86:4e:ab:3c:f5:db:88:49:32:8b:d6:c9:
04:e0:05:f6:e1:fd:26:06:12:4c:5f:21:6c:7c:05:ba:f1:d7:
4f:0a:04:37:13:bc:23:40:29:66:7a:5e:47:67:bc:9f:a7:9c:
e0:06:f8:59:6b:09:94:41:e2:57:9a:ee:6a:8a:3e:6b:56:c4:
f0:ee:78:ba:9b:e6:72:26:d8:c2:52:6b:26:6e:eb:78:4a:b7:
ee:16:4e:ae:dd:96:b6:5e:71:2f:58:8e:9d:74:68:6f:97:64:
34:29:4b:c5:7f:df:25:1c:55:3e:2c:bc:83:c2:29:c2:03:41:
05:9a:99:e0:0c:ca:71:3f:ac:c4:13:0d:fd:fc:3c:21:e4:97:
9d:cc:c2:e5:d8:3c:71:74:09:0b:b3:24:b6:9d:6f:51:20:20:
18:6c:53:3e:b9:cf:4b:3c:f0:cd:18:72:df:b2:f5:34:b2:82:
92:3a:3e:93:ad:9c:e2:ed:6a:39:30:99:4c:72:21:9a:fe:19:
14:08:2f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:12 2026 by rpki-client