Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: 1v3NlcnH1z9u60zNe7CbbdxjkFGwXQVgmxc50gLikP0=
Subject key identifier: 1A:47:05:D4:E4:39:1F:CD:80:92:11:B9:B5:B8:10:A6:2A:6F:31:EC
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 01A1A5CA7AE4C06AEAF9195A83E5336CB905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 1A1E
Signing time: Wed 04 Nov 2026 09:01:12 +0000
Manifest this update: Wed 04 Nov 2026 09:01:12 +0000
Manifest next update: Thu 05 Nov 2026 09:01:12 +0000
Files and hashes: 1: NvNBBzczdvedzfA0zmq_oqTjNy0.roa (hash: aNRFQnk32ELUJc2di3VPfCYAy8SNGZZzchv0G1guk1k=)
2: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: b167ZhPweIQH8hO/LCNJN3RMrU5qYwgmElAbVggghX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:ca:7a:e4:c0:6a:ea:f9:19:5a:83:e5:33:6c:b9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Nov 4 09:01:12 2026 GMT
Not After : Nov 5 09:01:12 2026 GMT
Subject: CN=1a4705d4e4391fcd809211b9b5b810a62a6f31ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:8f:e0:e2:7f:8b:50:53:bb:d2:d9:b1:43:
cb:3e:ba:39:4c:87:72:33:e8:6f:09:4e:51:ce:fe:
20:47:ac:fb:8d:bd:0c:32:72:e6:52:dc:f9:71:77:
de:b8:9a:49:05:0d:dd:2c:2c:2a:c3:aa:f9:29:82:
2d:9e:58:60:86:4e:25:90:95:2c:bd:8f:06:fa:0e:
31:87:03:61:f5:65:47:b2:e1:e0:5c:e8:d4:e4:6d:
2d:e4:cc:5d:f8:c9:bb:79:42:41:a9:58:27:33:d8:
f6:b4:a8:d7:9c:a4:66:47:55:84:75:ea:d9:6c:d3:
2c:ad:af:ba:c2:60:31:86:0b:ab:72:54:0e:d2:a0:
52:7e:ce:7d:71:08:76:f5:f2:07:1b:4d:5b:8c:7f:
13:39:16:cb:7d:d4:38:77:81:25:61:74:18:3b:45:
d9:37:f3:8e:18:86:8a:07:06:0e:69:55:76:6c:86:
62:f3:e8:84:bd:62:de:8b:42:03:e6:12:78:6f:77:
22:2b:8d:22:cf:79:94:79:6e:f4:e6:55:c2:a4:ee:
3b:7a:f8:f4:28:62:a3:b8:8b:95:05:55:83:f1:01:
b7:bf:a2:ef:97:0b:4e:26:67:c1:7c:6f:82:0f:99:
bf:e9:15:18:9f:7f:2a:e1:4e:46:e7:3f:a9:75:e2:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:47:05:D4:E4:39:1F:CD:80:92:11:B9:B5:B8:10:A6:2A:6F:31:EC
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:11:e5:dc:40:8e:e6:6c:e3:53:08:dc:53:89:19:14:94:fb:
f8:42:37:cf:61:a6:8f:a2:b6:7b:7a:6b:bb:a3:d2:f6:fc:ad:
84:ab:0a:2f:db:03:61:a6:45:8c:59:79:2f:86:5a:2b:ba:00:
60:74:25:ca:9e:89:e5:d6:e1:af:62:22:c7:eb:88:b8:20:e3:
56:55:20:3a:50:a9:29:1f:d1:33:26:36:13:fb:9d:b6:ae:4e:
5b:ad:98:15:ae:7b:66:d8:f1:74:6c:e0:c4:e7:45:8e:92:47:
11:f2:2d:6c:0a:1f:7f:2a:d6:b1:59:8f:db:7b:2e:2a:a0:62:
c1:8d:2f:c2:f3:6c:f0:71:83:f6:a1:26:ea:59:24:52:f2:f3:
8c:36:13:1a:99:c2:34:a4:c7:80:48:4d:e7:8f:c6:ff:44:7a:
e7:5d:91:c7:47:29:d9:3c:af:4c:3c:27:b5:b2:0d:73:6c:98:
61:9f:d7:37:e8:b8:2b:3c:71:4d:04:fe:03:11:68:ea:e3:e1:
55:51:5b:07:bb:b2:83:11:e7:1d:01:f5:89:5e:b5:21:a5:3c:
e5:43:d0:dd:01:45:da:f5:09:6e:d0:88:67:48:24:95:fa:4d:
d3:5e:3b:3f:99:85:f5:15:3d:61:c5:70:df:03:2a:2e:1a:8c:
dd:c1:5d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:28:50 2026 by rpki-client