Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: sPJVuV/HEeSShOoelPZ9yoQWleTTdKnJpeEeFOgc3NY=
Subject key identifier: 8F:16:32:EA:F1:FB:7B:CE:B5:53:5F:D4:2B:1B:E7:A2:F5:36:FD:4D
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 01A001DDA4DD87863A2ADCA12A30F75FC45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 19BB
Signing time: Fri 14 Aug 2026 20:01:37 +0000
Manifest this update: Fri 14 Aug 2026 20:01:37 +0000
Manifest next update: Sat 15 Aug 2026 20:01:37 +0000
Files and hashes: 1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: C1VWUzpKL6V90pD3uahptlprusnZtSramLdCsc3fYTQ=)
2: PCXd-9EviSUuR2-KbIZUWi0riBQ.roa (hash: nefgPfEo2Djt4hqoZTxg0xbxcxTGKZQtmu/1O0o4rzc=)
3: SaY7wOsMp2MJxwq5R4bQXJX5cKQ.asa (hash: 6aCmS8ZJo5oF+zi2/gpyJE6v5ir07/SV3sv2+dwp8nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:a4:dd:87:86:3a:2a:dc:a1:2a:30:f7:5f:c4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Aug 14 20:01:37 2026 GMT
Not After : Aug 15 20:01:37 2026 GMT
Subject: CN=8f1632eaf1fb7bceb5535fd42b1be7a2f536fd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:93:eb:3c:4b:32:0f:d0:5b:09:8a:c3:1c:
fd:a9:72:fc:c9:b6:e6:f5:af:bc:de:b1:76:2d:bf:
9a:b6:15:d2:c3:d0:b1:9a:e1:83:be:ac:b4:03:ea:
13:f4:6d:96:2d:2a:61:c7:54:b2:f4:d7:12:48:11:
32:6d:e2:f1:e1:9b:7b:1d:95:01:2f:5a:59:b3:0a:
14:fd:a9:d8:5e:1e:82:66:c7:03:fe:47:d5:e1:82:
ff:9f:94:55:16:53:f2:18:25:b4:d0:fc:76:9c:d6:
af:36:d7:fc:01:a9:3c:da:40:06:13:e0:e3:5d:1e:
ef:80:64:95:93:08:3b:a1:c5:e8:7b:76:7d:13:fb:
a4:4e:e8:72:2f:7c:7e:77:89:ac:af:74:99:bf:17:
23:00:73:46:9f:de:38:f0:5c:50:e7:ab:04:96:f6:
9d:e5:10:93:c4:79:84:91:f8:01:f8:08:91:1e:6e:
b4:85:44:60:34:1d:03:eb:38:99:75:1a:dd:d9:96:
d3:06:96:79:a5:ac:18:e0:cb:42:02:6d:51:7a:2b:
14:63:5a:91:e0:31:60:d3:f2:5a:cc:ba:cd:ee:80:
b7:c6:eb:b8:cd:66:ea:f4:ea:83:ec:1f:b0:d8:b5:
18:77:da:f8:57:43:7d:2f:93:a2:f3:5e:71:ad:bc:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:16:32:EA:F1:FB:7B:CE:B5:53:5F:D4:2B:1B:E7:A2:F5:36:FD:4D
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ab:61:07:53:ba:63:ea:d7:9e:6b:1b:91:50:72:4a:90:0c:
6a:2d:20:ba:2d:82:e2:33:9f:03:48:ad:4e:d2:98:e6:f6:2b:
5c:78:a1:aa:63:22:3f:ca:0f:f5:e4:da:ec:fb:8f:b8:24:40:
67:4d:11:62:4c:b8:b4:79:a9:fb:d0:81:07:d3:02:11:f4:59:
4c:43:f5:ad:c8:d3:d0:71:e3:21:9b:2a:db:00:ea:b4:61:b3:
63:31:bb:61:4a:7d:92:cc:6c:42:7d:3b:cc:71:0e:19:e0:f6:
52:b4:aa:3b:f1:01:0c:6c:fe:6c:d4:81:40:73:9f:15:9a:0e:
df:18:3f:24:09:83:4e:32:11:96:1c:ce:26:31:22:1d:c6:de:
42:84:a3:70:ba:ed:01:17:67:26:13:3d:bd:1c:63:74:d5:de:
68:33:aa:d5:db:9b:fc:4d:28:b8:15:84:29:8e:98:95:f3:da:
e7:0a:f7:ba:d0:37:51:3b:55:d4:42:36:f5:4d:c6:97:8f:11:
a4:31:3d:eb:1c:78:60:6f:a2:fa:45:22:90:d1:11:85:d4:9f:
d4:5e:fb:7f:a7:21:26:e2:fb:84:94:13:cb:cb:51:68:15:7c:
a0:c2:b3:c7:c9:89:ac:f4:bf:c7:93:df:c1:fc:5c:e5:35:84:
b1:11:59:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:21 2026 by rpki-client