Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
File: chprP17V-3TQNRIhZRPEyB7-Hlw.mft (raw, json)
Hash identifier: 5x7lF4BaU5WCCaTIjDigUqrbDhpSHxGMPDUZq4rm9II=
Subject key identifier: 99:7B:3D:3F:DB:27:58:FE:A6:17:FF:44:85:50:A0:57:2D:9A:80:CA
Authority key identifier: 72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
Certificate issuer: /CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Certificate serial: 019D984FA78A6D44C54D9FB7D19098D088E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
Manifest number: 0FA4
Signing time: Thu 16 Apr 2026 22:00:50 +0000
Manifest this update: Thu 16 Apr 2026 22:00:50 +0000
Manifest next update: Fri 17 Apr 2026 22:00:50 +0000
Files and hashes: 1: 4FtzsbmBRCz-KN7S54pRuO4IZrM.roa (hash: GUqsJWH9+kzctFjpZP6HQaUNoQFv8yqD7sokvUur02k=)
2: chprP17V-3TQNRIhZRPEyB7-Hlw.crl (hash: e6ihkUOXEFBYu58Ke/gQi+KzO7ZByNf45UkywtyI52c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:a7:8a:6d:44:c5:4d:9f:b7:d1:90:98:d0:88:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Validity
Not Before: Apr 16 22:00:50 2026 GMT
Not After : Apr 17 22:00:50 2026 GMT
Subject: CN=997b3d3fdb2758fea617ff448550a0572d9a80ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:18:56:1a:6d:d5:a9:e8:ac:7c:42:7f:19:
f9:e1:82:18:bc:6b:2e:6c:68:b7:de:88:0f:21:4d:
40:c5:28:bb:db:ee:a2:a2:b8:55:c9:09:13:3d:7f:
67:c5:b8:6a:1f:41:84:fe:b8:15:4e:dd:f7:fa:18:
81:98:0e:33:f7:7a:93:ca:e8:ea:74:9a:e7:c1:33:
74:b5:5c:2d:91:42:c6:b0:3c:c0:a3:4e:c7:40:b9:
a0:ea:21:86:6c:f5:83:1a:36:18:39:0d:93:f4:f0:
50:68:5c:84:6d:a0:49:70:26:6a:47:f4:96:fd:26:
da:a2:6c:3c:20:f2:19:ce:15:ef:ac:96:19:5c:6b:
0f:97:18:d7:62:02:ca:43:b2:e5:3e:94:ef:e8:08:
e4:98:90:27:cb:b7:02:f4:92:33:e7:05:71:3e:9e:
d7:57:91:33:68:03:8f:d3:1b:bc:31:fc:a3:0f:11:
64:76:03:35:89:79:5b:99:f1:ce:f9:d0:68:51:08:
8a:9e:06:11:ac:e5:a6:ff:c1:79:88:33:2a:c8:10:
21:aa:ac:c0:0b:81:65:e8:e3:69:b7:a8:3c:11:5b:
ec:02:06:84:3b:3c:fd:8b:75:7a:8c:b1:2a:cb:b2:
a9:30:e3:3d:d1:e6:e2:3f:be:b0:4e:03:45:91:52:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7B:3D:3F:DB:27:58:FE:A6:17:FF:44:85:50:A0:57:2D:9A:80:CA
X509v3 Authority Key Identifier:
keyid:72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:13:ac:d7:7a:b2:91:b5:c6:01:10:64:22:ec:00:ce:8d:88:
f7:2b:53:97:f4:96:a2:8b:53:1f:47:b1:9b:81:a7:7e:ae:95:
50:dd:fc:c6:27:16:a7:e8:f6:94:fd:90:2a:3a:d4:fa:0e:00:
f0:2a:f7:24:7a:22:eb:32:1a:d5:39:aa:b5:ba:6e:7c:10:41:
d9:6c:2c:37:60:ce:11:79:64:66:69:43:9e:4a:20:a5:eb:44:
d9:37:d8:8f:06:2f:fa:ff:93:db:72:dc:ea:5b:a3:fd:51:ba:
ab:05:17:ae:92:b7:e4:e4:1b:04:8f:69:3b:e0:45:d7:22:07:
fa:46:93:69:86:9f:11:ea:27:4b:48:57:16:93:be:4a:dc:7f:
3d:00:c7:65:26:64:bc:7d:05:ef:30:6b:b9:17:23:46:c2:67:
80:28:6c:94:6d:94:22:cc:81:f2:a8:48:92:e2:c7:04:7a:1b:
57:c8:25:d6:0d:58:4b:66:5f:7a:64:cc:ca:51:8c:c6:40:24:
37:a2:0b:26:36:00:2b:d3:b5:84:10:22:d0:3c:71:00:5f:bc:
e3:fa:79:47:9e:fc:20:0a:28:05:23:9f:c2:95:69:56:6b:14:
2b:e7:bb:92:77:ea:34:18:74:fa:86:9d:db:e4:67:e2:7b:73:
83:44:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:56:01 2026 by rpki-client