Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json)
Hash identifier: E2TwSpQUBFemcKB6jAP73ci/i/6W99MD+ls5GzU5MyI=
Subject key identifier: 51:CF:23:A8:2A:41:4A:33:71:1F:40:77:64:C4:D1:B0:F3:7A:4C:E0
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 019CAC7E205CD8214A25316F4FF98C43E365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 03:01:12 +0000
Manifest this update: Mon 02 Mar 2026 03:01:12 +0000
Manifest next update: Tue 03 Mar 2026 03:01:12 +0000
Files and hashes: 1: Uyak9FY9ba4bxHqEK0yM1pkZMUw.roa (hash: eKt2OFgdGFEDf87H4DQvI0kzMnm6G7iHFK8YVozoyak=)
2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: R6y2UnW1ILcYMN8e4pUMP8DCxKQbrJGHF4dJCkvdtyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:20:5c:d8:21:4a:25:31:6f:4f:f9:8c:43:e3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Mar 2 03:01:12 2026 GMT
Not After : Mar 3 03:01:12 2026 GMT
Subject: CN=51cf23a82a414a33711f407764c4d1b0f37a4ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:6a:f4:db:38:a0:fa:d5:c4:0d:03:47:25:
58:57:7c:78:02:b4:5a:bb:a1:c8:61:af:4e:f2:aa:
3b:ed:44:ce:b4:c5:25:6f:f3:fe:60:fc:a2:82:81:
37:67:1d:38:d0:fe:93:e9:42:76:a0:f4:f4:f2:9f:
90:b7:cb:0c:07:35:35:28:fa:04:8d:3b:eb:9f:ae:
d6:54:ec:9b:f9:1e:f3:7d:d7:98:99:1d:2d:f5:7e:
d5:7c:14:e5:55:d0:41:3f:53:8c:88:8f:d0:e5:64:
37:9a:39:a3:e2:97:ca:07:b5:bc:35:b5:16:ad:79:
37:73:32:d1:ae:78:b2:66:e4:18:2b:18:ad:cf:d4:
82:c3:90:7a:92:77:6d:3f:10:1e:ba:50:ea:bf:56:
76:a6:1a:16:5f:7f:0d:72:72:d5:17:d0:d7:b6:ba:
19:c0:2c:da:a7:92:d7:8a:85:bf:70:a0:a2:db:d9:
38:27:cc:0f:89:b7:d6:16:3a:7e:fc:7a:b7:10:7c:
22:db:ac:32:cd:cf:76:d5:ce:3c:0a:69:f4:7e:3f:
56:ef:f8:d1:87:df:78:71:9a:ab:ad:54:e2:2b:12:
ce:26:64:61:aa:64:76:70:fb:dd:d3:c6:a7:ff:f8:
cd:a8:58:6b:58:d1:46:42:11:19:6a:cd:cd:de:35:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CF:23:A8:2A:41:4A:33:71:1F:40:77:64:C4:D1:B0:F3:7A:4C:E0
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bd:3d:6e:03:ff:31:4f:ca:21:9e:3e:3f:06:45:7c:82:f6:
24:4a:59:92:2c:0f:a9:87:ab:7e:36:b2:47:86:b1:6a:37:bd:
92:8b:ae:36:48:29:14:58:70:c2:be:00:9d:3a:77:20:e3:49:
77:8d:e7:f6:c3:91:4e:34:1f:f0:50:9d:0d:99:18:2d:c8:91:
98:b4:1b:65:e7:3a:31:5d:e1:62:cd:d0:3b:fc:ba:a9:47:d7:
a4:0c:20:27:6a:66:dc:5a:c9:96:df:6d:59:94:6d:e9:bc:4d:
28:13:a1:54:ca:e5:d3:75:c4:ef:fb:18:46:9d:ea:d2:71:77:
f3:4c:f7:96:1e:f2:2f:e5:4e:46:27:8b:8c:00:7f:af:32:df:
8e:cb:28:f4:f8:7a:ef:0a:bb:1d:73:cf:74:b2:da:a2:87:d5:
93:19:55:10:b6:fb:c7:5b:43:36:d9:53:a9:32:56:cf:31:f3:
f7:cc:a0:2d:d1:08:63:40:0d:9c:8d:c3:65:26:0d:14:20:d9:
66:2b:2d:2b:96:24:0d:65:67:63:ae:4e:c1:5a:b1:c0:8a:4e:
23:c2:a4:ea:4f:bc:19:31:f3:fa:29:60:c9:dd:f2:de:57:5e:
bd:07:83:b3:6f:24:27:10:e9:5b:03:6d:3e:61:22:e8:20:28:
54:60:c0:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfiBc2CFKJTFvT/mMQ+NlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMTUxYTlhMThjOGE5MmI0Yjc2NzhkYzk2MGNjMmExYmI5
MDgwNTEwHhcNMjYwMzAyMDMwMTEyWhcNMjYwMzAzMDMwMTEyWjAzMTEwLwYDVQQD
Eyg1MWNmMjNhODJhNDE0YTMzNzExZjQwNzc2NGM0ZDFiMGYzN2E0Y2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx59q9Ns4oPrVxA0DRyVYV3x4ArRa
u6HIYa9O8qo77UTOtMUlb/P+YPyigoE3Zx040P6T6UJ2oPT08p+Qt8sMBzU1KPoE
jTvrn67WVOyb+R7zfdeYmR0t9X7VfBTlVdBBP1OMiI/Q5WQ3mjmj4pfKB7W8NbUW
rXk3czLRrniyZuQYKxitz9SCw5B6kndtPxAeulDqv1Z2phoWX38NcnLVF9DXtroZ
wCzap5LXioW/cKCi29k4J8wPibfWFjp+/Hq3EHwi26wyzc921c48Cmn0fj9W7/jR
h994cZqrrVTiKxLOJmRhqmR2cPvd08an//jNqFhrWNFGQhEZas3N3jXRLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHPI6gqQUozcR9Ad2TE0bDzekzgMB8GA1UdIwQY
MBaAFHIVGpoYyKkrS3Z43JYMwqG7kIBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2hVYW1oaklxU3RMZG5qY2xnekNvYnVRZ0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNGZkYmMtM2M4OC00MGI1LThkNzUt
Y2JmOTRhMDBjYzgzLzEvY2hVYW1oaklxU3RMZG5qY2xnekNvYnVRZ0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNGZkYmMtM2M4OC00MGI1LThkNzUtY2JmOTRhMDBjYzgz
LzEvY2hVYW1oaklxU3RMZG5qY2xnekNvYnVRZ0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADb09bgP/
MU/KIZ4+PwZFfIL2JEpZkiwPqYerfjayR4axaje9kouuNkgpFFhwwr4AnTp3IONJ
d43n9sORTjQf8FCdDZkYLciRmLQbZec6MV3hYs3QO/y6qUfXpAwgJ2pm3FrJlt9t
WZRt6bxNKBOhVMrl03XE7/sYRp3q0nF380z3lh7yL+VORieLjAB/rzLfjsso9Ph6
7wq7HXPPdLLaoofVkxlVELb7x1tDNtlTqTJWzzHz98ygLdEIY0ANnI3DZSYNFCDZ
ZistK5YkDWVnY65OwVqxwIpOI8Kk6k+8GTHz+ilgyd3y3ldevQeDs28kJxDpWwNt
PmEi6CAoVGDAUA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:19 2026 by rpki-client