Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
File: ChCKKMcHsOXCwubCE31Fh5EUu5I.mft (raw, json)
Hash identifier: ckETk5MWXdQ5c18WftTh7N9AGtRukxRJr/9Zm3lIt+w=
Subject key identifier: 04:47:DB:9E:07:20:02:1D:B7:93:97:DA:2E:CD:09:08:E7:D2:31:F5
Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Certificate serial: 01A0D91743B2CD3889623491C48F7B02CAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
Manifest number: 0C6A
Signing time: Fri 25 Sep 2026 15:02:55 +0000
Manifest this update: Fri 25 Sep 2026 15:02:55 +0000
Manifest next update: Sat 26 Sep 2026 15:02:55 +0000
Files and hashes: 1: ChCKKMcHsOXCwubCE31Fh5EUu5I.crl (hash: LfmLNnkn6cV8XmWT7ov/0cT3xecxcAxNGmXA2sfE7iQ=)
2: Fp4UEgpqLjFgWOhGK_G7aio72NU.roa (hash: YSrfGKlIuE0FqJ0gu+vKGaGUCKaaLtU+2IoC/r0Bjwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:43:b2:cd:38:89:62:34:91:c4:8f:7b:02:ca:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Validity
Not Before: Sep 25 15:02:55 2026 GMT
Not After : Sep 26 15:02:55 2026 GMT
Subject: CN=0447db9e0720021db79397da2ecd0908e7d231f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:cd:23:51:d8:84:84:1f:e3:fd:c1:7d:1b:
1a:e7:c8:d2:6e:dc:d1:84:96:6c:06:17:a5:71:e9:
9b:ab:f4:52:3a:16:8d:47:90:7b:d1:a9:43:77:65:
e5:52:4d:10:ef:27:35:f8:1c:43:a3:1f:20:2b:70:
96:c8:a4:b5:51:12:f9:01:ca:cd:b8:bf:da:9b:1d:
f6:ad:da:33:27:bf:bd:21:cb:ca:47:6b:70:be:15:
88:5e:2d:6e:83:2c:e7:3f:f3:4a:52:c5:39:eb:16:
68:d1:68:a5:1c:b4:89:fc:0a:ff:35:8f:f9:f2:d8:
3d:36:61:cd:b3:f6:7e:ab:5b:ee:9c:e3:37:05:04:
be:9d:cb:f6:19:bd:d4:b3:a4:74:ff:f0:b0:82:d3:
c6:d5:fe:b6:4f:35:81:08:03:60:fc:bf:cd:9b:8f:
8a:cb:f8:8b:2a:e3:32:cd:ea:20:18:1f:26:73:08:
c8:88:6f:e7:d0:4a:c6:f0:a1:db:26:33:e8:52:d1:
b2:80:ef:b0:8b:6b:52:f7:23:98:78:ed:cd:ca:c7:
34:7d:86:31:0e:2b:5d:20:96:8f:41:74:d3:80:4e:
42:57:2a:45:27:2b:2d:15:11:bc:92:8c:01:64:ed:
36:3c:e8:75:b7:c9:d5:dc:f6:8b:e2:95:09:8b:59:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:47:DB:9E:07:20:02:1D:B7:93:97:DA:2E:CD:09:08:E7:D2:31:F5
X509v3 Authority Key Identifier:
keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:46:eb:13:d7:ea:02:d8:6d:78:3f:32:a3:12:e7:3c:55:6f:
ee:0e:79:c6:15:81:44:f5:71:80:b5:d8:3c:ce:d6:8f:30:b5:
58:e7:5f:c0:29:68:da:63:96:a0:6f:72:02:45:94:d7:15:91:
26:f6:9f:2e:1e:75:f5:94:ec:b7:f4:80:c0:bd:26:33:d4:95:
2d:04:71:26:4c:fa:d4:c3:3d:f8:8e:ee:27:1e:61:41:29:9a:
31:25:af:26:41:31:61:32:21:70:da:c7:7d:f3:cf:3f:76:48:
62:fb:ab:c6:35:e2:24:75:78:25:40:51:4f:b3:a4:40:e0:3a:
26:f0:3f:d5:f4:03:ee:63:c3:f4:6e:ef:f9:1f:3f:85:0d:aa:
6f:53:a7:02:46:32:98:9b:0c:ca:73:26:b2:d9:cd:8e:a5:f3:
62:28:96:90:39:0a:a6:49:1c:70:71:0d:28:e5:75:16:b2:3b:
02:0a:d9:1c:75:43:a1:a9:54:df:b6:65:43:e2:0e:02:70:33:
97:49:c2:52:86:b9:e6:24:20:5b:e5:c8:f4:7e:6a:11:bc:a4:
c3:f9:c4:a4:7a:2d:59:53:b4:0a:11:b4:e0:e3:56:5a:c3:94:
c7:fc:c3:97:0f:2f:d9:eb:29:e4:d1:a9:38:7a:df:dd:89:30:
59:42:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:06:03 2026 by rpki-client