Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
File: chprP17V-3TQNRIhZRPEyB7-Hlw.mft (raw, json)
Hash identifier: we9nXWKneabMNw1Ikn3UyvD4yGcny8sMEXUEkHVyCOY=
Subject key identifier: 8C:35:E8:2B:46:EE:FB:5C:51:72:B8:3D:89:BE:1A:B9:FF:B0:24:57
Authority key identifier: 72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
Certificate issuer: /CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Certificate serial: 019D37BFFD32E59B95B2D7DA397AB06E7361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
Manifest number: 0F72
Signing time: Sun 29 Mar 2026 04:00:22 +0000
Manifest this update: Sun 29 Mar 2026 04:00:22 +0000
Manifest next update: Mon 30 Mar 2026 04:00:22 +0000
Files and hashes: 1: 4FtzsbmBRCz-KN7S54pRuO4IZrM.roa (hash: GUqsJWH9+kzctFjpZP6HQaUNoQFv8yqD7sokvUur02k=)
2: chprP17V-3TQNRIhZRPEyB7-Hlw.crl (hash: p7fdTC/ZYkgvI1zsMPbvp6kfwKKWCH5jDY4GIgmodxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:fd:32:e5:9b:95:b2:d7:da:39:7a:b0:6e:73:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Validity
Not Before: Mar 29 04:00:22 2026 GMT
Not After : Mar 30 04:00:22 2026 GMT
Subject: CN=8c35e82b46eefb5c5172b83d89be1ab9ffb02457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:04:65:13:41:5f:2e:d3:b2:04:cd:f2:a9:
fa:e5:24:91:c5:65:8f:e3:81:52:ba:e4:8e:18:15:
67:fb:f0:30:76:88:95:bf:86:9f:3d:07:7c:db:0f:
62:f8:e4:15:0b:ea:9e:b1:b6:20:4e:ea:fd:69:fe:
9b:8e:ad:03:e9:56:72:14:a8:cf:22:e4:96:b5:54:
16:b0:bb:1c:99:87:78:e3:0a:a3:d2:26:10:82:c0:
97:e0:41:b8:5e:e5:b5:bd:17:9d:a7:d9:2e:47:32:
29:f4:06:fa:04:8a:eb:b4:de:e6:69:b2:fa:ae:51:
90:71:8f:98:9a:41:40:d8:7c:89:38:33:76:b1:e1:
c9:59:14:c7:3a:24:b8:96:85:1d:ab:92:c4:e3:27:
dd:ee:20:3c:0b:7f:50:96:0d:f9:d3:b4:ed:ff:ec:
2f:0c:54:90:12:2c:a7:38:5a:40:8d:ec:7c:23:6d:
b6:d7:4b:52:1d:71:1f:3c:a8:34:61:5c:01:12:04:
86:2f:0f:d1:95:04:e9:ca:f6:43:29:c5:4d:d0:9c:
72:e0:1e:2b:06:47:5a:ce:0d:ae:eb:53:71:2a:fd:
0e:68:23:ae:0f:22:e8:bd:77:24:00:6c:07:83:92:
ae:ce:57:7c:b0:89:56:0b:d6:89:64:36:f8:31:96:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:35:E8:2B:46:EE:FB:5C:51:72:B8:3D:89:BE:1A:B9:FF:B0:24:57
X509v3 Authority Key Identifier:
keyid:72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:71:eb:6e:c2:8b:af:c3:f6:96:22:99:ac:06:77:06:ea:a7:
c1:b1:71:63:85:74:f3:0b:09:3e:62:8c:c7:10:73:11:4f:d2:
2c:97:9e:14:3c:49:af:60:67:ce:0c:59:4b:b0:c5:9e:aa:26:
09:02:f9:5b:fe:59:c5:0c:15:03:99:32:3d:1c:08:ab:06:8d:
e3:06:99:1f:1a:40:4a:81:ff:9f:73:22:86:49:e1:2a:20:69:
b3:68:cb:70:89:d7:22:c1:26:ea:ce:99:a6:88:6a:fb:4a:6d:
38:1d:2b:12:0c:32:f0:26:3d:63:ac:10:6a:57:21:43:29:55:
c9:4e:0b:6d:03:68:1c:5c:2e:a9:66:a7:47:a7:ed:a8:e7:64:
72:96:6d:30:90:a5:59:34:41:2e:98:81:de:7d:c2:d0:c9:a5:
6c:5f:1d:80:98:32:10:d8:9a:59:57:2b:58:53:28:0d:4f:73:
17:95:fd:ef:52:6a:96:9c:b3:22:20:6e:5f:97:72:73:ab:eb:
ed:95:e4:66:68:71:48:a9:94:5a:82:66:92:a0:63:0b:0e:e8:
d3:30:f3:f6:0f:25:75:e6:ab:4d:94:ba:fb:5a:53:55:bb:74:
65:02:a5:81:43:20:65:d1:ff:9b:27:6c:9a:b1:35:cf:79:fd:
1b:e9:22:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:13 2026 by rpki-client