Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
File: ChCKKMcHsOXCwubCE31Fh5EUu5I.mft (raw, json)
Hash identifier: 9mndNxUp7Zn/jHuxJ9XnQZXJVYBgqdpYGH9+0mpLp1A=
Subject key identifier: 26:AA:0E:7B:34:14:AB:DC:8A:BF:55:5D:08:79:8F:9D:B9:EE:F1:77
Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Certificate serial: 019D9AABFF79F90AF6B9A6AD4F051ED3123D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
Manifest number: 0ABC
Signing time: Fri 17 Apr 2026 09:00:56 +0000
Manifest this update: Fri 17 Apr 2026 09:00:56 +0000
Manifest next update: Sat 18 Apr 2026 09:00:56 +0000
Files and hashes: 1: ChCKKMcHsOXCwubCE31Fh5EUu5I.crl (hash: Y4WpC2u4g21dqpBWF0mXxtVgTPtkHkf7upnIWIUrJn4=)
2: Fp4UEgpqLjFgWOhGK_G7aio72NU.roa (hash: YSrfGKlIuE0FqJ0gu+vKGaGUCKaaLtU+2IoC/r0Bjwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ff:79:f9:0a:f6:b9:a6:ad:4f:05:1e:d3:12:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Validity
Not Before: Apr 17 09:00:56 2026 GMT
Not After : Apr 18 09:00:56 2026 GMT
Subject: CN=26aa0e7b3414abdc8abf555d08798f9db9eef177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:23:ec:a0:d0:32:72:41:2e:14:a0:dc:5d:
cb:55:77:0d:5c:5b:e9:62:4e:a8:a4:14:0d:2a:b0:
b2:78:59:4b:3f:3d:f9:2e:87:6e:2d:bd:02:d9:b3:
a2:85:c9:52:59:43:83:72:85:36:a9:ed:04:2a:90:
d7:b5:46:0b:67:01:fd:79:21:a2:21:d4:5f:f8:d2:
39:5c:bb:66:1d:bf:ca:7d:ff:34:77:80:36:cd:4b:
63:84:e0:41:b3:0e:31:e0:10:5c:5f:e9:ba:3f:aa:
ff:6a:5c:7f:90:e9:84:48:c4:1a:80:ec:cf:fe:9c:
53:db:22:82:7f:b8:e3:b0:3d:c8:09:cd:c0:cf:76:
ea:c5:f1:f9:68:ff:d8:3a:0e:24:16:d3:88:04:a1:
bc:06:44:4d:47:38:3f:4f:c3:8c:b9:87:0a:03:36:
91:fd:60:4d:1d:93:94:bd:6e:72:7f:43:af:ff:60:
7a:de:95:ec:fa:9b:fa:78:84:ea:b0:91:75:f7:5f:
51:98:ad:59:d1:1b:25:7d:4f:5f:20:53:0c:b5:96:
0a:3b:b1:c0:49:24:e8:ee:2d:e4:f1:53:97:75:81:
03:8b:8a:85:61:e1:cc:8f:d3:b9:32:32:1a:eb:e7:
32:bb:9c:50:3b:15:5e:33:11:28:6d:82:3c:7b:50:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AA:0E:7B:34:14:AB:DC:8A:BF:55:5D:08:79:8F:9D:B9:EE:F1:77
X509v3 Authority Key Identifier:
keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:90:48:ba:30:b2:27:1d:c9:23:c5:7e:56:df:45:2d:59:99:
18:b5:93:84:5f:16:36:52:c3:3f:7d:b2:16:b3:28:46:91:62:
1b:5d:9d:4b:46:3e:0d:11:70:14:f7:89:cd:c4:1e:80:73:e9:
71:91:16:c8:c4:f6:3e:c1:18:5b:63:4b:94:28:7b:a7:6e:6f:
5f:44:1a:f2:4b:2e:f0:d4:f3:73:d6:67:e0:60:a3:91:8c:89:
92:53:22:31:8d:08:9f:41:e0:72:d8:43:08:18:14:98:ec:88:
a9:61:30:ff:f0:50:47:72:e4:c4:b3:2e:4a:68:15:93:8b:31:
0f:01:81:9f:0e:13:96:a4:d5:b5:9f:9f:06:7a:54:c8:48:eb:
5f:22:17:77:c4:78:08:a5:72:83:e2:f5:ac:7d:5f:91:ed:5e:
34:a1:96:00:60:25:e8:d2:a3:66:17:0b:5f:97:28:94:27:f3:
05:ef:22:1e:57:bc:ec:87:87:17:ce:97:6a:f0:d5:16:f2:f6:
bb:b2:15:6f:d7:27:3b:a3:68:38:6d:54:cd:f3:dd:ca:2a:47:
36:aa:f8:a0:d9:77:27:dc:c6:05:1d:da:51:90:c1:38:d3:5d:
66:cc:16:e6:a6:e2:11:a8:af:8d:39:b9:ad:72:81:98:34:51:
93:f7:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:48 2026 by rpki-client