Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
File: ChCKKMcHsOXCwubCE31Fh5EUu5I.mft (raw, json)
Hash identifier: 8pnldVZRpzTbVnBtnuxhsru9dqm4w02tRTV8RH6SdcM=
Subject key identifier: 0B:11:BD:07:73:FC:C3:70:3F:AC:3B:BF:56:20:F0:8D:16:36:9D:E4
Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Certificate serial: 019EC2250060C5543DD40C1312FA769D5ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
Manifest number: 0B55
Signing time: Sat 13 Jun 2026 18:01:05 +0000
Manifest this update: Sat 13 Jun 2026 18:01:05 +0000
Manifest next update: Sun 14 Jun 2026 18:01:05 +0000
Files and hashes: 1: ChCKKMcHsOXCwubCE31Fh5EUu5I.crl (hash: QMfWUSYv3T+jfEWXFvcMZsdHssLlDNRzv+Bq61CiVcE=)
2: Fp4UEgpqLjFgWOhGK_G7aio72NU.roa (hash: YSrfGKlIuE0FqJ0gu+vKGaGUCKaaLtU+2IoC/r0Bjwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:25:00:60:c5:54:3d:d4:0c:13:12:fa:76:9d:5e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Validity
Not Before: Jun 13 18:01:05 2026 GMT
Not After : Jun 14 18:01:05 2026 GMT
Subject: CN=0b11bd0773fcc3703fac3bbf5620f08d16369de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:7f:10:17:f7:8c:03:27:85:45:19:9e:b4:
5d:d5:61:38:92:1b:88:8f:cd:b0:47:19:aa:0d:e5:
37:87:ea:9c:b1:88:eb:6c:14:52:0f:57:22:56:94:
e2:1b:b5:3d:72:04:ad:fd:ce:dc:40:b4:29:11:fa:
f7:f5:22:fd:04:db:47:3a:d3:78:bf:de:f7:20:d9:
07:8f:47:93:99:9a:76:22:a6:8f:df:22:2b:d6:eb:
0d:e4:01:cc:c6:13:5c:04:68:de:65:bb:89:ec:6a:
0e:cc:1e:f4:ff:dd:7a:b8:e8:e1:1c:30:70:35:b8:
ef:d2:2b:08:40:1e:4c:14:9f:51:54:1c:df:c5:73:
47:f0:23:e1:86:55:b6:33:1d:d0:a0:0f:68:6a:72:
f1:8a:b2:2b:40:36:68:f9:ed:ac:2b:5d:23:5f:cd:
1b:19:24:dd:98:a2:18:3f:fb:8c:fc:b5:4c:9a:90:
1d:29:30:de:02:f0:c6:56:79:84:b3:6f:13:d7:b7:
4a:51:f5:73:2d:a8:8b:db:7f:e8:d4:fb:3b:99:cd:
1b:d5:20:5c:14:db:16:1d:6c:74:a0:05:44:13:d1:
46:91:ee:52:d2:2e:c9:5a:67:71:cd:67:0b:17:e9:
13:bb:2a:d9:e5:fd:97:c6:3f:2b:c7:f4:fe:15:2f:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:11:BD:07:73:FC:C3:70:3F:AC:3B:BF:56:20:F0:8D:16:36:9D:E4
X509v3 Authority Key Identifier:
keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d2:cd:ba:3e:26:b6:6e:58:2a:18:ee:9a:9a:f4:c0:40:47:
2d:02:99:85:56:56:c2:a1:43:e0:6e:71:92:7c:48:d1:e9:8c:
ee:95:21:3f:be:e9:34:5d:60:42:6a:50:9d:9d:d7:5e:e1:9c:
0a:59:94:dd:68:ee:28:a2:da:6b:2e:41:02:fb:82:39:7b:f1:
53:50:1b:57:a8:d8:5c:fa:b4:07:09:52:a6:16:9b:70:53:71:
92:69:26:be:e8:d9:6b:cb:ca:2c:06:c1:dd:ca:96:08:1f:28:
75:0d:c0:53:81:3b:b6:17:fb:be:b7:a1:53:aa:20:46:08:06:
6a:70:a6:56:e1:ec:a3:3e:19:4e:9c:e3:9e:2b:6b:fb:1a:f6:
fa:88:f3:68:69:8f:77:f1:d9:5c:7c:09:b3:3f:b7:d2:fb:76:
b7:6b:2f:17:ac:60:cf:55:40:e2:73:dd:e5:a4:0c:da:b8:4d:
27:26:fe:0e:47:e4:6e:7b:7d:93:5a:ed:74:9f:54:f3:55:9e:
3a:45:f5:be:eb:5a:f9:77:a1:85:d4:1b:fc:a0:2c:28:d8:12:
38:07:0d:e9:e6:1f:37:11:91:a7:2e:26:25:d0:24:cd:af:ab:
a9:a6:35:d9:14:d1:7e:76:97:38:f7:67:6c:13:39:82:a5:a6:
b4:27:27:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJQBgxVQ91AwTEvp2nV7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMTA4YTI4YzcwN2IwZTVjMmMyZTZjMjEzN2Q0NTg3OTEx
NGJiOTIwHhcNMjYwNjEzMTgwMTA1WhcNMjYwNjE0MTgwMTA1WjAzMTEwLwYDVQQD
EygwYjExYmQwNzczZmNjMzcwM2ZhYzNiYmY1NjIwZjA4ZDE2MzY5ZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3Z/EBf3jAMnhUUZnrRd1WE4khuI
j82wRxmqDeU3h+qcsYjrbBRSD1ciVpTiG7U9cgSt/c7cQLQpEfr39SL9BNtHOtN4
v973INkHj0eTmZp2IqaP3yIr1usN5AHMxhNcBGjeZbuJ7GoOzB70/916uOjhHDBw
Nbjv0isIQB5MFJ9RVBzfxXNH8CPhhlW2Mx3QoA9oanLxirIrQDZo+e2sK10jX80b
GSTdmKIYP/uM/LVMmpAdKTDeAvDGVnmEs28T17dKUfVzLaiL23/o1Ps7mc0b1SBc
FNsWHWx0oAVEE9FGke5S0i7JWmdxzWcLF+kTuyrZ5f2Xxj8rx/T+FS8ddwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsRvQdz/MNwP6w7v1Yg8I0WNp3kMB8GA1UdIwQY
MBaAFAoQiijHB7DlwsLmwhN9RYeRFLuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xMzlkMjMtODAyZC00MjI0LTgzMmUt
MWY4NTgxNDIxNzYwLzEvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xMzlkMjMtODAyZC00MjI0LTgzMmUtMWY4NTgxNDIxNzYw
LzEvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9LNuj4m
tm5YKhjumpr0wEBHLQKZhVZWwqFD4G5xknxI0emM7pUhP77pNF1gQmpQnZ3XXuGc
ClmU3WjuKKLaay5BAvuCOXvxU1AbV6jYXPq0BwlSphabcFNxkmkmvujZa8vKLAbB
3cqWCB8odQ3AU4E7thf7vrehU6ogRggGanCmVuHsoz4ZTpzjnitr+xr2+ojzaGmP
d/HZXHwJsz+30vt2t2svF6xgz1VA4nPd5aQM2rhNJyb+Dkfkbnt9k1rtdJ9U81We
OkX1vuta+XehhdQb/KAsKNgSOAcN6eYfNxGRpy4mJdAkza+rqaY12RTRfnaXOPdn
bBM5gqWmtCcnJw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:12:52 2026 by rpki-client