Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
File: cha_aL4onmHE01vUAmZi2OT76vE.mft (raw, json)
Hash identifier: qw6XwTr6z01mfq4DpGFqcSCYxDDAit3kOIYM0T7eQuc=
Subject key identifier: DD:D7:77:C1:C8:73:67:C3:01:CC:93:76:B9:BB:99:19:FE:E9:F5:DB
Authority key identifier: 72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
Certificate issuer: /CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Certificate serial: 019F129C5863316E95792A777059F2378E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
Manifest number: 029E
Signing time: Mon 29 Jun 2026 09:01:03 +0000
Manifest this update: Mon 29 Jun 2026 09:01:03 +0000
Manifest next update: Tue 30 Jun 2026 09:01:03 +0000
Files and hashes: 1: 6kDtRGD72hg_ViEDsunZWrtev2g.asa (hash: 7UpgN+iZ6ujyYBq4PaIilpgD97viaVXyBxo4zJETiRU=)
2: cha_aL4onmHE01vUAmZi2OT76vE.crl (hash: I0zqeG2X+ydk+3ZHhqmcY56tNKsBgafVcA/NnIQWx34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:58:63:31:6e:95:79:2a:77:70:59:f2:37:8e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Validity
Not Before: Jun 29 09:01:03 2026 GMT
Not After : Jun 30 09:01:03 2026 GMT
Subject: CN=ddd777c1c87367c301cc9376b9bb9919fee9f5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:90:28:10:0e:93:bd:11:00:c1:33:06:91:
b9:72:02:4d:b8:9c:ca:c1:06:5e:ae:96:7d:01:aa:
c6:cf:07:6d:21:d8:88:a0:1c:40:18:19:4f:12:eb:
aa:17:e8:31:e5:dd:18:c9:7f:71:0d:01:7e:8d:54:
32:20:55:9b:c8:31:0f:3b:5b:9a:f1:1b:09:ad:ec:
c3:b6:e6:14:7f:76:05:1e:f4:45:6d:bc:23:f5:46:
38:02:9f:df:c6:8a:a0:46:b1:d5:3d:83:b6:26:65:
18:27:9d:c7:4e:e4:04:17:81:b7:30:f6:3c:2b:dd:
99:5a:4e:c8:96:ae:de:b2:65:2a:ff:ad:92:df:11:
2f:dc:e4:6e:94:65:9e:7d:3e:60:8b:36:31:94:dc:
68:a5:0b:dd:34:2a:f9:05:d0:7e:1c:db:5f:67:ab:
c8:a2:6b:c7:fb:d3:ca:dc:19:b5:ed:2f:1c:3a:68:
81:e7:12:a3:5d:4e:fd:f1:3d:5c:49:77:f1:f2:4c:
c4:16:cf:a0:b6:ee:2b:0d:55:e7:49:a5:67:e8:f5:
50:f8:ed:68:c8:bb:6a:df:3f:a1:00:9b:62:fd:44:
36:8e:e9:83:8f:24:c6:57:c4:34:3f:55:7c:37:f2:
6f:88:73:b3:12:bd:1b:48:fb:52:63:0e:fc:26:55:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D7:77:C1:C8:73:67:C3:01:CC:93:76:B9:BB:99:19:FE:E9:F5:DB
X509v3 Authority Key Identifier:
keyid:72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ac:9a:18:8b:98:c1:fa:2b:31:42:b5:cc:34:0b:74:f6:2c:
ae:32:9a:bb:a1:04:e7:ac:e7:a6:49:ef:65:d7:fd:33:bf:7e:
23:9a:79:75:d6:ca:43:86:25:a8:25:af:c2:71:95:57:d2:de:
ed:80:99:4a:32:68:c6:d2:2a:e5:72:f8:f3:90:59:07:80:a5:
c1:9e:be:7d:74:b1:9a:c1:f8:2e:53:09:ec:d6:c5:7f:d6:b6:
78:49:61:6f:ae:d7:c1:09:b3:7f:6d:72:17:2d:76:86:22:8a:
cc:6a:4e:f2:eb:e0:e0:8e:d9:d1:c5:02:37:34:d5:f0:69:15:
3c:be:91:b7:83:2f:7b:13:a0:36:8b:39:85:26:9b:49:0d:e1:
0f:da:bd:83:12:bf:51:d1:31:5f:ab:ec:a9:48:bd:e2:3c:94:
5b:4d:15:94:ae:35:d3:e3:42:f2:26:3b:13:5a:af:fe:61:24:
5d:67:f4:76:2f:68:45:8e:df:12:1d:9c:d4:dd:63:65:8a:ad:
b1:d9:a7:4c:98:9d:6e:3d:22:71:19:55:f6:08:1c:1b:c6:f8:
0e:fc:c4:07:00:0f:d8:29:05:c1:4c:e8:32:22:8e:ec:e6:14:
b6:fb:28:d8:89:92:66:82:5b:02:d2:64:21:99:0a:15:2d:42:
be:d7:5b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:24 2026 by rpki-client