Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
File: ChCKKMcHsOXCwubCE31Fh5EUu5I.mft (raw, json)
Hash identifier: 6u+CkkIz/uaFP5KolynbskrTae/rj2NE3aydXC+o2SM=
Subject key identifier: 29:FA:8C:49:84:FA:07:41:0E:5C:80:06:BB:A7:33:DD:94:E9:64:1D
Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Certificate serial: 01A0E888E6E352B89BBA620DCCBCAA0FEB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
Manifest number: 0C72
Signing time: Mon 28 Sep 2026 15:01:20 +0000
Manifest this update: Mon 28 Sep 2026 15:01:20 +0000
Manifest next update: Tue 29 Sep 2026 15:01:20 +0000
Files and hashes: 1: ChCKKMcHsOXCwubCE31Fh5EUu5I.crl (hash: 4jUj7icWTjG5iKqeendkuPWaHMgR7yHPXXLLmODOSmw=)
2: Fp4UEgpqLjFgWOhGK_G7aio72NU.roa (hash: YSrfGKlIuE0FqJ0gu+vKGaGUCKaaLtU+2IoC/r0Bjwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:88:e6:e3:52:b8:9b:ba:62:0d:cc:bc:aa:0f:eb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Validity
Not Before: Sep 28 15:01:20 2026 GMT
Not After : Sep 29 15:01:20 2026 GMT
Subject: CN=29fa8c4984fa07410e5c8006bba733dd94e9641d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:5a:af:ff:de:f0:10:9d:77:df:43:23:94:
69:df:f7:3c:76:fe:13:d2:ff:43:ea:f0:49:f2:9a:
a3:7c:4a:7a:ae:d6:df:77:81:d2:cc:ec:fb:e2:b7:
97:c6:0f:a1:4f:e8:eb:60:60:b9:7c:a3:87:3c:b8:
05:d0:c5:38:95:e6:a9:5c:2f:4b:8b:2b:83:45:b9:
35:40:6f:fd:da:39:e0:49:74:9c:7c:dd:56:0d:71:
b5:80:9c:ea:01:7d:75:3a:9f:0b:2d:88:ad:37:95:
f1:fa:b8:40:3d:cc:9d:6e:f9:12:51:d3:c8:e0:b9:
6d:5c:72:bd:4e:5c:5e:5e:17:52:c4:b0:a3:38:e0:
db:68:ae:7c:87:d5:ab:9b:e3:93:74:52:70:c3:3c:
dc:60:eb:cd:c9:79:91:8f:b9:30:96:ae:8a:1a:fc:
bb:9a:a7:d9:58:03:f6:52:d1:fc:99:0f:44:bc:15:
55:b7:7d:bf:09:78:6c:f4:a6:e2:a5:4c:d5:88:d8:
9c:27:00:dd:aa:13:6b:b4:ee:9a:83:15:cd:91:08:
56:a7:69:ac:f5:fc:a1:20:f5:1e:90:3d:02:36:85:
d1:32:73:c3:c8:bc:80:06:f1:a6:f4:7d:e3:f7:a1:
31:78:13:c1:09:6a:25:2d:67:37:2f:aa:e7:00:3f:
d3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FA:8C:49:84:FA:07:41:0E:5C:80:06:BB:A7:33:DD:94:E9:64:1D
X509v3 Authority Key Identifier:
keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b7:85:a7:2b:89:7c:88:b9:41:1c:fa:28:cc:7a:9d:f0:2f:
1e:b9:8e:f5:ab:2b:84:11:40:51:20:7e:54:a6:a8:d2:80:a7:
9c:80:dd:78:14:ae:18:74:b6:48:fd:6e:5a:90:69:3a:9b:6a:
b4:66:6f:e5:2e:f1:85:99:e3:82:1f:86:94:84:52:01:9e:64:
d3:a7:41:e5:06:0e:08:d1:fb:a3:36:5b:32:46:c5:ce:f0:72:
70:1c:6e:c7:cc:e7:34:74:a0:13:61:62:34:db:cd:eb:0d:b4:
b5:2c:5c:bc:f0:73:4e:aa:fe:0f:fd:cc:34:a4:66:c2:dd:2a:
4e:e5:bc:5c:69:fd:91:66:7b:b5:97:97:b4:11:1a:3f:78:31:
c7:23:b5:02:3c:88:ad:15:08:5b:92:ff:07:18:c3:6e:37:fb:
06:31:64:e6:fa:71:9a:2b:f7:bf:d4:5a:61:69:a2:65:84:02:
46:34:c1:87:56:4b:25:a0:04:ee:55:3b:ab:73:67:68:55:5e:
1e:b1:29:30:b2:8d:b5:a0:7d:c0:30:62:bd:2a:c1:47:67:24:
14:f8:3d:12:1c:e6:61:84:9f:b3:a6:4a:d7:93:46:12:9f:76:
27:da:3f:56:1f:4e:3a:b0:1f:67:b6:8e:ca:18:61:62:57:a1:
44:25:2e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:21:03 2026 by rpki-client