Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: y2DgFoTN2UTu5BWAU8qvlzeAd27cUmpdeodaB4RhzME=
Subject key identifier: D9:E8:F8:00:09:8E:81:6B:11:9C:DD:02:DA:7A:19:4C:05:BD:25:FB
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 01A1472947ADADC6AAD355B2B07276802864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 1948
Signing time: Sat 17 Oct 2026 00:00:50 +0000
Manifest this update: Sat 17 Oct 2026 00:00:50 +0000
Manifest next update: Sun 18 Oct 2026 00:00:50 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: Aq/IzoqlklZHKB4eyMXlWnse77OhxLMXCHO8xl8Qp6o=)
2: nZWVrpkktVLvbn1tQxNa0DXWXX8.roa (hash: Po7W+yP4HlMRBc7RVFcp2+NXeQgCvfW3njKkUPa+zOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:29:47:ad:ad:c6:aa:d3:55:b2:b0:72:76:80:28:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: Oct 17 00:00:50 2026 GMT
Not After : Oct 18 00:00:50 2026 GMT
Subject: CN=d9e8f800098e816b119cdd02da7a194c05bd25fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:2e:f1:e1:9a:de:7e:ae:56:63:51:32:d7:
7d:65:d3:41:d3:65:df:46:9c:1f:92:92:6d:26:fb:
ad:fe:a9:5f:63:94:5e:0a:16:14:9b:6d:54:3d:b6:
73:1c:48:5a:80:98:92:02:dc:ba:32:48:ae:fd:50:
bd:57:ce:e4:fc:37:b6:00:dd:14:d9:a3:19:94:f7:
05:1c:d1:74:90:1b:89:28:4c:78:4f:95:73:69:dc:
05:10:91:88:bf:03:a8:98:71:9d:be:d6:1f:a2:cc:
b0:01:81:62:af:48:6c:b3:9b:3c:7a:d0:6c:e9:91:
9f:eb:ef:5b:f7:7b:df:5f:4a:03:3c:66:0c:30:c2:
32:96:08:a2:56:30:29:1a:48:88:8f:50:52:6d:4a:
e5:e8:88:a7:fe:3b:40:7c:ad:45:31:19:5c:2f:96:
a8:ec:ed:68:0a:e9:30:a3:ab:64:1a:5c:a8:f8:a7:
fc:04:52:a2:8b:03:05:b9:51:0e:11:e4:dd:80:4a:
96:bd:a5:2a:35:0c:f4:5a:8c:f6:ec:6d:e2:8f:ef:
2d:60:66:2f:74:e5:e7:91:e7:7a:92:b8:9a:79:b8:
90:9b:33:55:5d:9f:b2:89:6a:1d:25:2c:45:68:5f:
f8:81:e5:57:f7:03:5b:22:ee:24:50:4d:06:27:7d:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E8:F8:00:09:8E:81:6B:11:9C:DD:02:DA:7A:19:4C:05:BD:25:FB
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c9:14:56:89:b5:95:ec:cc:6f:a2:b6:81:fb:32:ff:b7:18:
76:5e:38:57:11:85:bd:2b:5f:16:b3:db:91:ae:db:3d:48:05:
0b:92:ff:ed:f1:e5:cc:74:79:a0:77:e9:dc:57:c1:db:dd:f6:
c2:2e:47:4f:5d:f4:14:29:1e:0b:58:f7:f8:16:f5:3c:c3:68:
b3:a3:07:34:c1:8b:01:29:67:11:76:34:f7:4a:76:e0:96:32:
71:a4:f1:98:d1:12:4d:5b:78:b4:a8:70:3d:7e:31:41:d8:7b:
1f:10:04:9a:65:47:50:63:68:74:28:8e:9c:9d:f3:49:93:a6:
40:e6:92:6a:89:34:2c:ca:fa:07:50:07:0d:3f:3a:5a:58:3e:
4b:f4:84:df:13:b7:d2:0b:8c:1c:e8:24:c7:9b:2f:02:9c:c8:
eb:aa:7f:cc:e7:65:93:f7:9f:78:9a:24:fb:02:27:1f:87:66:
e1:8c:58:35:57:8d:c5:64:43:ee:69:86:c8:25:7b:44:fa:a9:
22:2e:4d:25:ca:20:97:fb:cb:15:0f:c8:fb:51:58:45:aa:9f:
2a:d7:b1:5c:10:6a:33:37:7c:29:71:b8:f0:96:a8:99:d7:7e:
36:1e:a5:8b:a4:13:e3:f7:22:cf:b8:f5:85:fe:45:be:84:7a:
37:2f:ce:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:10:11 2026 by rpki-client