Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
File: cha_aL4onmHE01vUAmZi2OT76vE.mft (raw, json)
Hash identifier: rNzdZ6+VeCoQnrrwaFjpW6XmSoiQdRqIz42hcI27cT0=
Subject key identifier: A1:06:85:38:A7:5B:9F:90:C3:7F:66:E5:A1:09:BB:08:47:B4:7E:ED
Authority key identifier: 72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
Certificate issuer: /CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Certificate serial: 01A03826F200A9BC9487A79C26F5E6DC1261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
Manifest number: 0336
Signing time: Tue 25 Aug 2026 09:01:11 +0000
Manifest this update: Tue 25 Aug 2026 09:01:11 +0000
Manifest next update: Wed 26 Aug 2026 09:01:11 +0000
Files and hashes: 1: 6kDtRGD72hg_ViEDsunZWrtev2g.asa (hash: 7UpgN+iZ6ujyYBq4PaIilpgD97viaVXyBxo4zJETiRU=)
2: cha_aL4onmHE01vUAmZi2OT76vE.crl (hash: BgUHKzYD2WPvAS1gh+vOuEtNZBkIyb5e/3yJbKFAURY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:26:f2:00:a9:bc:94:87:a7:9c:26:f5:e6:dc:12:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Validity
Not Before: Aug 25 09:01:11 2026 GMT
Not After : Aug 26 09:01:11 2026 GMT
Subject: CN=a1068538a75b9f90c37f66e5a109bb0847b47eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:df:1b:a0:8d:a3:2b:4a:a5:af:56:6b:66:
35:74:fe:b1:47:53:fd:5f:e9:82:66:87:e6:80:68:
e9:9f:97:96:d4:72:a1:00:b6:91:a4:64:78:5e:a2:
fa:33:54:9a:ff:b6:cb:ef:70:b6:b9:24:87:d4:18:
86:9f:a7:47:e2:6d:90:e4:bd:8f:4a:9f:0d:95:6e:
50:3e:10:b1:fd:d2:ad:83:bd:b7:aa:d5:4f:4c:09:
63:b0:22:ea:08:83:85:02:4f:d1:e3:04:81:a0:0e:
c5:f0:4e:c9:bb:a1:f2:47:7c:c0:1d:f8:0f:4c:fb:
82:e0:4b:a6:b8:10:a9:83:bf:61:04:0e:af:c2:5b:
02:75:57:29:e3:66:64:1c:a9:15:1b:c9:57:58:7c:
a5:49:36:a2:e1:78:1c:89:9c:d7:54:f0:d8:cc:b6:
59:ae:ca:8a:82:02:8c:b6:32:46:cb:3b:ff:70:2f:
c2:cb:cc:3a:02:4d:23:d6:3d:1e:e5:64:cf:7d:3f:
5b:37:37:84:f1:89:54:56:3a:ff:39:2a:5e:19:6e:
3c:27:a9:35:11:16:2b:5d:5b:1d:cd:b8:03:f0:74:
ae:c0:6b:be:ac:4e:4a:97:4c:d3:f3:ba:69:6f:c4:
87:30:9f:3f:21:d4:76:e2:04:9e:aa:98:37:c7:aa:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:06:85:38:A7:5B:9F:90:C3:7F:66:E5:A1:09:BB:08:47:B4:7E:ED
X509v3 Authority Key Identifier:
keyid:72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:40:9c:58:5d:bf:b6:5f:ea:50:3b:5e:b0:95:ff:ae:00:aa:
fa:5b:a2:24:43:33:45:8f:d8:35:6f:7d:c0:b8:8f:de:4d:88:
b5:4b:22:50:45:91:a6:cb:22:1c:23:2d:18:c7:11:c9:7c:c4:
c4:f3:5a:c4:8d:12:c9:a0:95:d5:09:7a:9d:a0:e9:a2:c0:10:
d1:09:dd:e1:d9:dc:5a:11:0a:9f:82:23:70:b6:29:ed:0a:9e:
33:87:ca:e3:c8:9a:1d:04:0d:c8:98:19:5c:f8:81:ed:45:70:
a1:ec:44:40:9e:4a:09:98:19:df:fe:2b:f2:0a:5c:04:a6:d2:
df:2d:71:56:a3:b6:70:e9:5a:a1:84:1a:78:fd:d2:67:f7:68:
01:c9:33:60:46:cd:ce:f3:60:b9:e0:8a:91:9a:90:d2:4b:bb:
11:02:61:cb:d0:33:4c:f7:ff:8d:54:bb:54:40:6d:c5:74:46:
9c:a1:53:6e:78:60:b0:18:1b:b2:6a:ee:28:38:e9:86:bf:6a:
54:30:08:68:4e:3e:50:9b:29:f4:ed:11:47:6c:d5:33:37:d1:
fb:8a:21:9e:11:d3:97:a6:e4:dd:32:15:58:af:c8:7c:d1:e8:
47:12:4a:43:35:55:77:f4:2b:92:0e:57:d7:c3:aa:aa:b3:88:
d9:c7:99:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA4JvIAqbyUh6ecJvXm3BJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMTZiZjY4YmUyODllNjFjNGQzNWJkNDAyNjY2MmQ4ZTRm
YmVhZjEwHhcNMjYwODI1MDkwMTExWhcNMjYwODI2MDkwMTExWjAzMTEwLwYDVQQD
EyhhMTA2ODUzOGE3NWI5ZjkwYzM3ZjY2ZTVhMTA5YmIwODQ3YjQ3ZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI7fG6CNoytKpa9Wa2Y1dP6xR1P9
X+mCZofmgGjpn5eW1HKhALaRpGR4XqL6M1Sa/7bL73C2uSSH1BiGn6dH4m2Q5L2P
Sp8NlW5QPhCx/dKtg723qtVPTAljsCLqCIOFAk/R4wSBoA7F8E7Ju6HyR3zAHfgP
TPuC4EumuBCpg79hBA6vwlsCdVcp42ZkHKkVG8lXWHylSTai4XgciZzXVPDYzLZZ
rsqKggKMtjJGyzv/cC/Cy8w6Ak0j1j0e5WTPfT9bNzeE8YlUVjr/OSpeGW48J6k1
ERYrXVsdzbgD8HSuwGu+rE5Kl0zT87ppb8SHMJ8/IdR24gSeqpg3x6peBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEGhTinW5+Qw39m5aEJuwhHtH7tMB8GA1UdIwQY
MBaAFHIWv2i+KJ5hxNNb1AJmYtjk++rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YmJhNDktNjE5Mi00OGUzLTk0ZjAt
NGQ0NTIzMWM3MjMzLzEvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85YmJhNDktNjE5Mi00OGUzLTk0ZjAtNGQ0NTIzMWM3MjMz
LzEvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0CcWF2/
tl/qUDtesJX/rgCq+luiJEMzRY/YNW99wLiP3k2ItUsiUEWRpssiHCMtGMcRyXzE
xPNaxI0SyaCV1Ql6naDposAQ0Qnd4dncWhEKn4IjcLYp7QqeM4fK48iaHQQNyJgZ
XPiB7UVwoexEQJ5KCZgZ3/4r8gpcBKbS3y1xVqO2cOlaoYQaeP3SZ/doAckzYEbN
zvNgueCKkZqQ0ku7EQJhy9AzTPf/jVS7VEBtxXRGnKFTbnhgsBgbsmruKDjphr9q
VDAIaE4+UJsp9O0RR2zVMzfR+4ohnhHTl6bk3TIVWK/IfNHoRxJKQzVVd/Qrkg5X
18OqqrOI2ceZjA==
-----END CERTIFICATE-----
Generated at Tue Aug 25 19:15:30 2026 by rpki-client