Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: w/8oQR0waxeUyuxAJyC7jAKu7b0WFzp8C1bi7QAytNI=
Subject key identifier: 17:16:E5:01:96:61:F9:2A:CB:21:FE:67:38:BE:4C:59:BB:AA:3D:F8
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 019FA229972853EB8CE3CE38BBF63BB2DC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 1913
Signing time: Mon 27 Jul 2026 06:01:02 +0000
Manifest this update: Mon 27 Jul 2026 06:01:02 +0000
Manifest next update: Tue 28 Jul 2026 06:01:02 +0000
Files and hashes: 1: NvNBBzczdvedzfA0zmq_oqTjNy0.roa (hash: aNRFQnk32ELUJc2di3VPfCYAy8SNGZZzchv0G1guk1k=)
2: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: PkiqlmYGJMFAANP0K6zbswBQmSqNwFUVhzY4DfiDoc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:97:28:53:eb:8c:e3:ce:38:bb:f6:3b:b2:dc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Jul 27 06:01:02 2026 GMT
Not After : Jul 28 06:01:02 2026 GMT
Subject: CN=1716e5019661f92acb21fe6738be4c59bbaa3df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:81:99:4c:47:d2:34:1e:78:4e:1e:22:12:
cd:0e:c2:a5:53:db:f4:db:73:21:30:6a:38:cc:c0:
56:10:51:aa:19:fb:dd:61:dd:f7:41:4f:fd:fd:a4:
ff:ea:a8:4d:51:85:0f:bd:d7:4e:60:5e:df:ec:71:
cb:46:c5:e9:8f:91:de:08:73:05:ee:1c:b8:62:6c:
cc:e0:7f:b8:a5:6b:6c:b9:5c:57:d6:44:e6:bd:cd:
25:47:19:82:3d:78:93:28:b5:7d:10:9c:69:fc:b9:
e6:ff:a6:83:10:21:de:55:73:dd:c1:99:4d:d1:49:
34:ad:4e:be:72:14:aa:62:0e:62:e5:35:42:68:de:
f3:7c:76:d0:60:71:cb:01:4f:64:60:5d:e4:d9:da:
a9:26:c7:7e:8c:f2:d8:40:f5:d9:47:78:9f:e6:86:
68:33:b3:4b:a9:72:2e:e4:9c:85:3f:15:8e:59:1f:
8b:ea:44:04:00:be:4f:33:9b:3f:71:82:3e:76:3f:
16:bc:6d:49:e7:5a:6b:bd:bf:45:0f:05:57:10:83:
90:82:5a:ea:14:79:ee:0a:dd:3f:0c:b8:4c:6e:fb:
5a:eb:c9:f2:c3:05:30:26:85:25:06:33:01:7e:c9:
24:db:08:b3:d3:9a:8d:00:a8:9f:79:0e:69:9e:ba:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:16:E5:01:96:61:F9:2A:CB:21:FE:67:38:BE:4C:59:BB:AA:3D:F8
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bb:dc:0c:07:13:70:b8:e1:9c:fe:59:68:f5:e9:2d:8f:87:
43:fe:24:dd:94:d7:af:6f:70:79:a7:83:ef:ec:bf:8c:e7:80:
10:e0:fb:2c:cf:7f:59:9c:78:5e:d8:6b:90:6d:c8:67:6e:c7:
be:76:2a:e5:d6:5b:5e:cb:dc:3e:8a:f5:cf:31:a5:1d:dd:09:
68:34:f6:77:3a:3f:8f:1e:1f:a0:66:08:e1:e2:e4:83:91:61:
45:c1:b1:d9:b9:3c:92:4a:9e:d0:43:d9:07:b3:d0:b3:60:69:
87:97:1f:3e:73:98:27:84:78:41:8c:41:cf:20:89:ac:50:46:
34:ab:be:6b:05:e8:7d:77:f5:8c:90:73:3f:7d:ed:d4:4d:8b:
8f:5b:62:51:2c:19:c9:20:a1:32:7d:97:82:bf:b4:2c:32:02:
fe:e9:7c:47:43:3d:a6:8a:4f:14:3e:73:a7:b6:cf:d5:51:31:
94:a9:fa:e4:66:b2:c1:1f:61:11:79:1a:09:ad:03:70:0b:4d:
39:4a:39:c0:bb:7f:82:01:24:3c:ec:5b:a3:65:88:3d:d4:07:
1f:14:54:2c:b8:9a:45:6b:26:4e:87:f1:5f:03:fc:72:18:83:
43:ba:74:ab:2d:90:1a:34:9f:a8:df:92:12:f6:c5:25:12:86:
07:45:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:06:09 2026 by rpki-client