Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
File: cha_aL4onmHE01vUAmZi2OT76vE.mft (raw, json)
Hash identifier: mafFZLDtd8MY6yWXw/GcWgsFSap4YXEFkNdKu+0gQSo=
Subject key identifier: 8F:9F:BF:C0:4E:15:95:E0:79:D1:3C:F7:43:EB:D1:6F:A0:75:C0:1B
Authority key identifier: 72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
Certificate issuer: /CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Certificate serial: 019FA93DDA7A03B8FCBDA0A49D15FC36AB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
Manifest number: 02EC
Signing time: Tue 28 Jul 2026 15:00:30 +0000
Manifest this update: Tue 28 Jul 2026 15:00:30 +0000
Manifest next update: Wed 29 Jul 2026 15:00:30 +0000
Files and hashes: 1: 6kDtRGD72hg_ViEDsunZWrtev2g.asa (hash: 7UpgN+iZ6ujyYBq4PaIilpgD97viaVXyBxo4zJETiRU=)
2: cha_aL4onmHE01vUAmZi2OT76vE.crl (hash: rAOMIqGFh9+SFIa6Mi/A0SBjm66t+vCraoiDlo7DzV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:da:7a:03:b8:fc:bd:a0:a4:9d:15:fc:36:ab:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Validity
Not Before: Jul 28 15:00:30 2026 GMT
Not After : Jul 29 15:00:30 2026 GMT
Subject: CN=8f9fbfc04e1595e079d13cf743ebd16fa075c01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:00:a9:e4:b5:d8:55:ae:2d:74:68:94:72:
ed:41:ae:86:e6:5c:1e:10:30:71:aa:83:35:98:c1:
8d:0b:f1:89:75:3c:43:8f:6e:48:78:56:63:48:68:
3a:76:6f:f2:b2:c2:ba:79:6d:57:ca:be:2a:49:f1:
70:36:da:54:da:01:ab:fc:f9:54:dd:5b:e0:49:dc:
7f:31:6a:fa:11:6e:3e:da:f2:fa:b0:34:55:38:04:
8d:5e:06:91:2a:a2:cc:34:91:c3:3e:bd:ed:1a:7b:
4e:28:37:f3:e9:35:a4:e3:b4:cc:14:67:b6:c4:e2:
6f:28:43:6d:9b:ae:96:72:1f:9e:3e:60:29:02:3f:
ca:77:d7:c6:78:e5:24:c4:d0:1b:5a:2a:01:37:53:
c0:5b:ef:b4:8c:4b:04:f9:06:87:d1:d2:ae:1a:89:
fc:29:56:15:12:ba:88:28:ac:ab:d0:69:cf:d8:bd:
e1:a0:01:60:11:4d:00:01:87:7b:d0:91:86:fb:b0:
44:10:ba:29:6e:4c:a1:fd:46:fc:ef:32:e0:c8:7a:
5d:9b:03:73:e9:8e:18:9b:b0:09:8a:f2:38:a3:d9:
aa:b5:86:60:3d:62:34:dc:a1:8a:ef:4e:5a:21:73:
ac:56:15:92:2f:88:63:c4:72:ea:69:a9:0d:69:6d:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9F:BF:C0:4E:15:95:E0:79:D1:3C:F7:43:EB:D1:6F:A0:75:C0:1B
X509v3 Authority Key Identifier:
keyid:72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0e:eb:2d:7f:a5:63:0a:4c:ff:68:8a:7f:9a:f3:17:80:70:
29:a5:ff:f2:a8:c6:34:d3:c5:ee:f0:af:b0:bb:c6:58:c6:14:
df:63:37:e2:44:51:3e:c4:70:d9:4e:77:58:e8:47:66:ab:40:
0b:c7:60:e7:61:72:36:84:f9:85:84:88:f5:14:eb:08:8b:72:
be:2d:12:9d:09:5e:4c:24:97:0b:73:a2:9d:87:0d:de:88:10:
57:2e:4f:4a:c0:61:bd:fe:55:33:42:a2:ac:9b:97:81:a4:81:
c1:eb:88:f9:c7:ae:6a:69:b6:e5:3d:0f:f8:6e:36:fc:63:88:
fc:01:16:c7:9d:59:c7:a7:0b:ec:c5:89:1f:67:e1:ec:3b:82:
fc:9f:19:25:be:f8:16:5b:e7:f2:20:25:9f:73:74:25:fc:aa:
a5:d1:3d:c6:d5:0d:e1:c0:e8:25:0d:00:a1:fc:dd:91:58:c8:
e5:e9:1e:74:6a:13:cc:bf:b4:cf:b3:43:3a:1c:ba:39:6c:7c:
06:19:d0:6f:c7:aa:bb:7c:8a:4d:0b:ca:15:75:5f:10:51:f2:
31:00:50:99:73:ed:48:22:0f:76:6a:03:97:a4:79:1d:0f:29:
38:60:de:a2:7c:2b:c2:5b:5d:42:ce:2b:2d:35:de:57:88:27:
8c:2a:19:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPdp6A7j8vaCknRX8NquFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMTZiZjY4YmUyODllNjFjNGQzNWJkNDAyNjY2MmQ4ZTRm
YmVhZjEwHhcNMjYwNzI4MTUwMDMwWhcNMjYwNzI5MTUwMDMwWjAzMTEwLwYDVQQD
Eyg4ZjlmYmZjMDRlMTU5NWUwNzlkMTNjZjc0M2ViZDE2ZmEwNzVjMDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX8AqeS12FWuLXRolHLtQa6G5lwe
EDBxqoM1mMGNC/GJdTxDj25IeFZjSGg6dm/yssK6eW1Xyr4qSfFwNtpU2gGr/PlU
3VvgSdx/MWr6EW4+2vL6sDRVOASNXgaRKqLMNJHDPr3tGntOKDfz6TWk47TMFGe2
xOJvKENtm66Wch+ePmApAj/Kd9fGeOUkxNAbWioBN1PAW++0jEsE+QaH0dKuGon8
KVYVErqIKKyr0GnP2L3hoAFgEU0AAYd70JGG+7BEELopbkyh/Ub87zLgyHpdmwNz
6Y4Ym7AJivI4o9mqtYZgPWI03KGK705aIXOsVhWSL4hjxHLqaakNaW08EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+fv8BOFZXgedE890Pr0W+gdcAbMB8GA1UdIwQY
MBaAFHIWv2i+KJ5hxNNb1AJmYtjk++rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YmJhNDktNjE5Mi00OGUzLTk0ZjAt
NGQ0NTIzMWM3MjMzLzEvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85YmJhNDktNjE5Mi00OGUzLTk0ZjAtNGQ0NTIzMWM3MjMz
LzEvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaw7rLX+l
YwpM/2iKf5rzF4BwKaX/8qjGNNPF7vCvsLvGWMYU32M34kRRPsRw2U53WOhHZqtA
C8dg52FyNoT5hYSI9RTrCItyvi0SnQleTCSXC3OinYcN3ogQVy5PSsBhvf5VM0Ki
rJuXgaSBweuI+ceuamm25T0P+G42/GOI/AEWx51Zx6cL7MWJH2fh7DuC/J8ZJb74
Flvn8iAln3N0JfyqpdE9xtUN4cDoJQ0AofzdkVjI5ekedGoTzL+0z7NDOhy6OWx8
BhnQb8equ3yKTQvKFXVfEFHyMQBQmXPtSCIPdmoDl6R5HQ8pOGDeonwrwltdQs4r
LTXeV4gnjCoZ0g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:29:55 2026 by rpki-client