Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
File: ChCKKMcHsOXCwubCE31Fh5EUu5I.mft (raw, json)
Hash identifier: XKWwv4x6QXSzL8C4ifC4wqmfa3fH6qna5EfkZxUo9QE=
Subject key identifier: D3:D4:D1:80:82:FD:0D:EA:EE:23:A9:AF:0D:0F:6D:29:40:4B:50:B7
Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Certificate serial: 019F90C7C481CF2E21C53A71D4E7F8FB61CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
Manifest number: 0BC0
Signing time: Thu 23 Jul 2026 21:00:38 +0000
Manifest this update: Thu 23 Jul 2026 21:00:38 +0000
Manifest next update: Fri 24 Jul 2026 21:00:38 +0000
Files and hashes: 1: ChCKKMcHsOXCwubCE31Fh5EUu5I.crl (hash: xl9XYbkwV6fQTSkAId6rJITue4J9yri+6mLi+cHZ5oM=)
2: Fp4UEgpqLjFgWOhGK_G7aio72NU.roa (hash: YSrfGKlIuE0FqJ0gu+vKGaGUCKaaLtU+2IoC/r0Bjwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:c4:81:cf:2e:21:c5:3a:71:d4:e7:f8:fb:61:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Validity
Not Before: Jul 23 21:00:38 2026 GMT
Not After : Jul 24 21:00:38 2026 GMT
Subject: CN=d3d4d18082fd0deaee23a9af0d0f6d29404b50b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:45:b4:42:11:6c:8b:5a:7c:1b:52:8b:ff:
94:b4:2d:28:29:ab:89:33:40:8d:fe:73:ca:10:49:
ab:39:53:83:49:f3:0b:53:83:b8:07:7c:32:9d:6d:
f3:07:1a:9a:c4:bb:d1:d6:10:f1:c8:22:87:b4:3f:
5a:c8:87:8d:38:43:be:7b:c9:9a:89:4e:d5:e4:a4:
68:22:98:f0:c6:f4:10:cb:ed:bd:dd:50:29:60:b8:
e2:a9:83:90:40:08:9f:de:93:68:3d:84:b8:82:b7:
43:45:42:ab:2b:8a:a4:e6:a8:05:d8:70:d8:23:fe:
c9:42:8e:28:87:ab:7a:4d:25:7d:c9:d7:1e:c2:ee:
1b:40:d3:51:f9:6a:44:ff:f1:e0:8f:a0:06:9e:1a:
0c:a0:c8:1f:02:25:ed:d7:a4:c6:50:59:c6:7a:a4:
dd:bf:41:db:6b:4b:f0:52:e2:e9:bb:2f:ad:be:b1:
81:d8:99:cd:d2:5d:4e:0b:32:8c:f4:e5:fd:2a:6f:
33:91:09:05:a1:8b:1a:68:df:c1:e8:f0:61:4f:76:
ec:10:9f:7e:41:26:ab:2a:ee:99:0a:e9:ce:6e:89:
68:f8:c8:41:9b:46:f4:33:71:42:38:b0:48:ab:c8:
02:4d:9e:e8:21:93:c5:5a:5f:aa:3b:c1:a7:c1:76:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D4:D1:80:82:FD:0D:EA:EE:23:A9:AF:0D:0F:6D:29:40:4B:50:B7
X509v3 Authority Key Identifier:
keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cd:5e:12:cc:4e:1c:2f:d0:e5:f6:77:f7:bb:c6:11:a7:0c:
22:b3:22:9c:8d:c5:54:d4:8b:f9:dd:d2:aa:37:05:a2:94:b8:
84:6c:6d:c7:a2:b7:bf:e3:30:68:5b:02:59:2f:00:82:fc:f3:
2f:2e:01:b4:a1:89:42:b7:9e:b1:7c:eb:19:54:a4:87:0e:41:
38:25:ef:71:6e:31:95:c3:74:c2:3a:33:19:c1:b0:c5:ae:ad:
1e:7a:c4:7e:22:2e:04:00:4a:70:63:b9:96:1f:f5:b8:cf:aa:
f1:28:77:d2:2e:ce:03:49:6a:01:b9:fa:db:9e:3a:0f:11:1a:
15:4f:d9:0b:74:12:ba:e6:b2:0b:6e:1b:4a:6b:56:8a:ad:61:
4a:fe:45:f4:63:2d:a5:0e:ae:c9:78:42:9d:42:41:89:e1:36:
ef:09:36:28:fc:e2:62:d6:eb:2d:88:f1:bc:fc:73:83:e5:92:
04:2e:81:87:1f:d6:56:0c:25:14:d3:7b:64:92:88:b5:b3:23:
bd:63:e0:07:8b:54:50:32:1f:40:07:02:6a:a8:2b:c5:32:a4:
4f:a2:f2:56:45:74:9c:61:39:26:27:08:a6:36:29:d1:82:d5:
55:44:03:83:6d:35:7c:68:7e:13:f0:5b:14:59:10:5d:c8:ef:
70:db:ff:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:19 2026 by rpki-client