Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
File: cha_aL4onmHE01vUAmZi2OT76vE.mft (raw, json)
Hash identifier: Doy2Th0DR8vgfoAFE4IXsBFrjJog3wyGSo+puexfuI8=
Subject key identifier: 12:D3:32:14:BA:23:C3:A0:BE:A6:B4:BF:50:6C:9E:F0:80:55:0C:3E
Authority key identifier: 72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
Certificate issuer: /CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Certificate serial: 019CA8A14F2E04A3DF1CDFC476346E3E347B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
Manifest number: 015E
Signing time: Sun 01 Mar 2026 09:01:09 +0000
Manifest this update: Sun 01 Mar 2026 09:01:09 +0000
Manifest next update: Mon 02 Mar 2026 09:01:09 +0000
Files and hashes: 1: 6kDtRGD72hg_ViEDsunZWrtev2g.asa (hash: 7UpgN+iZ6ujyYBq4PaIilpgD97viaVXyBxo4zJETiRU=)
2: cha_aL4onmHE01vUAmZi2OT76vE.crl (hash: PUDC9+QmqKoiw/0WKZ8r/pubWKX/2eqKK7mFgA/ABsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:4f:2e:04:a3:df:1c:df:c4:76:34:6e:3e:34:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Validity
Not Before: Mar 1 09:01:09 2026 GMT
Not After : Mar 2 09:01:09 2026 GMT
Subject: CN=12d33214ba23c3a0bea6b4bf506c9ef080550c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:8e:38:96:11:27:87:ff:f6:dc:f9:45:d2:
4d:80:69:6d:2b:00:54:8d:ea:12:9a:58:88:ab:69:
8b:c1:9f:04:69:69:25:2c:56:dd:f5:cd:cb:30:57:
89:20:a9:6e:9b:c8:34:91:70:45:ef:ad:09:ed:59:
d4:1d:5d:34:23:ef:77:0d:d6:e0:64:71:a8:26:81:
f4:ce:f6:41:99:c0:37:1c:10:82:6e:83:42:73:98:
d1:f5:c3:7c:77:40:f5:4f:fa:ed:a8:ef:27:0a:2b:
ca:64:a7:67:8f:72:55:6a:57:aa:67:3a:a3:76:3e:
50:e9:2f:54:e8:d7:92:40:58:c1:49:01:c9:2c:73:
2c:53:79:d2:50:ff:63:8a:f6:3f:65:d1:eb:f4:db:
be:c1:ce:ac:d2:6b:cb:63:b2:32:30:9f:58:7a:16:
c5:97:f8:76:47:ae:13:71:74:b5:e9:ef:05:56:d1:
14:14:01:62:c1:37:28:4f:9b:92:e5:b1:c1:8b:dd:
0c:44:0a:da:7d:cb:e4:0f:4e:00:a2:34:98:ad:e6:
20:21:46:0c:2c:66:3d:d6:20:d4:f9:a9:7f:ea:b5:
43:b2:76:0d:1b:9e:be:38:c5:3b:b4:c3:20:a7:dc:
ef:6c:2e:af:4f:96:e1:6b:fd:5a:da:2d:85:f7:c3:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D3:32:14:BA:23:C3:A0:BE:A6:B4:BF:50:6C:9E:F0:80:55:0C:3E
X509v3 Authority Key Identifier:
keyid:72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:2b:3b:2b:ed:77:ce:9e:4c:16:d6:9a:53:f4:cc:97:4c:bb:
a4:c6:f3:1a:58:18:9c:97:ae:14:c5:42:27:c3:2b:99:e5:3e:
94:8f:9a:1a:66:ca:4b:4a:63:c8:18:32:60:59:fd:59:8f:36:
12:dc:3f:3c:74:de:8c:5e:0a:db:01:e5:3f:25:4d:65:76:e1:
4d:29:9c:1f:7e:dc:84:62:42:90:6c:20:79:3e:85:a7:36:13:
03:3e:d2:1a:ac:a7:9b:c8:e3:2d:91:6d:80:e8:ee:e7:0d:62:
62:85:38:f0:7a:f8:e7:1c:be:cc:ac:d4:1d:1c:1b:d3:b8:54:
57:63:a7:7d:cc:0f:d0:74:87:55:c5:42:55:e5:c9:b1:7c:d7:
4e:c4:f0:7f:17:a2:68:62:a2:f8:28:c3:ad:c8:25:d1:02:8b:
48:a7:33:43:23:e0:12:ff:ef:97:62:47:05:f1:4b:e0:49:b3:
c2:dd:aa:9b:47:e7:09:d0:38:f6:48:6e:4b:fa:fd:f9:60:5b:
72:05:b7:01:42:f7:73:e8:43:36:a1:bd:7c:a0:20:89:80:0f:
af:8d:ff:92:93:c3:de:98:b4:89:1a:86:e6:27:d5:9e:1a:8e:
5c:b4:eb:f1:4d:af:3a:a3:4b:6a:9f:32:67:f4:95:67:1d:c2:
4b:c2:09:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:31 2026 by rpki-client