Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
File: ChCKKMcHsOXCwubCE31Fh5EUu5I.mft (raw, json)
Hash identifier: eJue0Aw5NpYPUAPpsTt/ugfUl8Db/ChFm3sO8Ssj0y8=
Subject key identifier: 09:45:6F:CF:C3:E8:A1:41:F2:BC:3E:3B:B7:03:D5:40:E6:AC:4C:40
Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Certificate serial: 01A13F7052F542CB69E90BFD27F0BFB8076A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
Manifest number: 0C9F
Signing time: Thu 15 Oct 2026 12:01:28 +0000
Manifest this update: Thu 15 Oct 2026 12:01:28 +0000
Manifest next update: Fri 16 Oct 2026 12:01:28 +0000
Files and hashes: 1: ChCKKMcHsOXCwubCE31Fh5EUu5I.crl (hash: MCouqJuOHi36AbHioMBptLpn46qDHzcCkqySnzlm1lo=)
2: Fp4UEgpqLjFgWOhGK_G7aio72NU.roa (hash: YSrfGKlIuE0FqJ0gu+vKGaGUCKaaLtU+2IoC/r0Bjwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:52:f5:42:cb:69:e9:0b:fd:27:f0:bf:b8:07:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Validity
Not Before: Oct 15 12:01:28 2026 GMT
Not After : Oct 16 12:01:28 2026 GMT
Subject: CN=09456fcfc3e8a141f2bc3e3bb703d540e6ac4c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:ff:9c:a3:e1:73:7c:a0:41:a6:06:09:5a:
44:70:f2:ee:09:a6:7c:68:d6:ab:80:fe:db:c3:44:
b7:da:ec:02:d4:63:24:d2:a6:08:0d:cb:e7:8c:f8:
b9:26:a9:d8:57:0f:5a:01:02:a0:83:c0:4d:0f:47:
aa:f6:62:c9:3d:b4:ca:a3:9d:40:9c:73:a3:be:77:
25:30:d1:90:f8:74:9c:45:a9:20:ad:a8:5e:97:0f:
f0:8c:0a:cc:4c:a9:db:44:09:d6:e7:a7:b9:4a:53:
0a:59:12:78:32:70:79:61:84:41:86:6b:2a:c8:b2:
56:51:15:3e:a9:6d:67:63:c3:0f:61:1f:dc:dc:a9:
c7:cc:69:1b:0f:d8:68:09:d2:40:37:e7:30:2e:4b:
34:1a:3b:84:e2:74:39:00:21:73:08:46:c7:94:bf:
8b:c3:8a:93:57:51:f9:e7:6b:06:69:e9:f3:02:47:
1f:2d:f5:23:db:00:bc:80:dc:d6:f4:05:a0:fd:b7:
95:3c:3b:2e:3e:ba:5b:ae:44:2a:cb:f2:cd:75:4f:
41:4c:45:d4:f4:03:c7:2f:2f:9b:b9:bd:07:f2:90:
47:f3:73:a0:57:3a:8c:15:e0:8c:97:c4:cc:6e:06:
6b:45:f4:f5:94:7c:b1:86:09:da:41:b0:f0:13:b2:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:45:6F:CF:C3:E8:A1:41:F2:BC:3E:3B:B7:03:D5:40:E6:AC:4C:40
X509v3 Authority Key Identifier:
keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2c:52:64:4c:f9:61:66:24:8a:8b:30:ee:df:2e:aa:a8:33:
ad:0c:0f:26:52:22:55:08:c8:72:ac:a6:1a:29:08:e6:1e:da:
db:47:af:3e:7c:d0:9b:f8:13:42:1e:f3:8a:90:90:2e:74:37:
3e:3c:27:4a:35:9d:3a:9b:b9:f7:b1:ba:15:67:cf:08:1d:59:
27:07:88:08:4d:d8:ee:59:be:01:e9:5c:eb:d0:61:f6:0c:78:
27:54:d0:56:46:25:dc:eb:d5:7b:66:f2:7f:96:59:56:57:df:
25:0f:21:00:df:3d:47:26:54:ab:45:95:17:aa:e2:53:77:2d:
d3:8e:89:7d:b0:75:19:12:72:bc:50:c9:83:95:60:cc:48:b7:
02:9c:68:6e:dd:8f:e2:60:52:a6:46:4f:17:91:36:70:e7:d8:
88:25:ed:e0:27:34:56:74:4d:48:fa:44:fd:65:3a:a5:8e:4e:
22:50:20:90:4b:30:16:e4:78:b6:47:31:31:aa:00:07:6c:34:
4d:9e:e4:0d:fc:7e:4b:8c:9a:93:47:0c:8a:62:b8:4a:2b:bd:
1f:94:c0:5f:f9:28:43:f8:07:55:bc:5e:20:bf:b2:5d:85:a9:
dd:4e:e0:ea:3c:e3:42:55:a1:cc:1f:b9:9a:45:29:87:27:a8:
01:db:bb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:05 2026 by rpki-client