Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: KlH1F1aTOZyfAu7BQNQ/aYWe9iMpjhhFPUzK7uuQOIU=
Subject key identifier: 6C:56:CE:67:94:C1:F1:2E:26:9A:0C:67:A6:34:C9:4C:85:8F:B3:0C
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 01A19FFEBB4EF7241B183C36C6E049BF2C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 1A1B
Signing time: Tue 03 Nov 2026 06:00:33 +0000
Manifest this update: Tue 03 Nov 2026 06:00:33 +0000
Manifest next update: Wed 04 Nov 2026 06:00:33 +0000
Files and hashes: 1: NvNBBzczdvedzfA0zmq_oqTjNy0.roa (hash: aNRFQnk32ELUJc2di3VPfCYAy8SNGZZzchv0G1guk1k=)
2: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: 9mewmuOrNa4sPNJJ6VQs02ztpPHkj9URph34dA55IS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:fe:bb:4e:f7:24:1b:18:3c:36:c6:e0:49:bf:2c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Nov 3 06:00:33 2026 GMT
Not After : Nov 4 06:00:33 2026 GMT
Subject: CN=6c56ce6794c1f12e269a0c67a634c94c858fb30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:37:76:74:68:5e:f8:35:4d:87:25:43:30:b9:
20:f2:f1:cd:8d:58:36:4c:52:0f:b4:a0:ff:61:82:
84:b1:3d:61:aa:bc:62:32:55:a6:88:d5:60:57:c4:
0d:8e:97:58:e9:0e:d4:3c:43:2d:14:5e:35:4e:a0:
b9:14:eb:6b:b2:83:f0:48:21:cf:de:69:e5:dd:60:
0d:1a:f0:32:7e:6c:cd:67:51:4c:38:d4:18:5b:a8:
ce:ef:67:e3:b6:f6:42:f5:f8:a0:e6:4a:e1:c6:cf:
8d:11:cf:a4:05:c6:20:4e:b5:29:46:26:09:83:93:
91:25:70:69:3b:aa:20:59:14:c8:94:7d:6a:32:12:
b5:b4:82:2f:2c:54:77:73:5e:70:d6:7a:74:cd:bf:
e7:98:c6:fc:0b:7b:1b:d3:7d:81:56:73:7e:02:64:
bb:86:a3:90:44:a5:2b:be:27:80:96:06:b9:8a:79:
5d:62:1d:0f:ac:db:84:62:e2:7a:6a:31:75:b1:1e:
49:c8:3d:9c:a6:a3:cf:16:30:c0:66:fb:4a:60:32:
5f:ed:fe:60:e9:fc:fe:dc:86:14:7f:42:f4:b6:51:
08:bc:60:84:b3:e9:fe:f4:fb:cf:df:5f:45:e6:12:
97:eb:34:a2:10:63:13:6d:73:12:b1:20:bd:a0:43:
a1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:56:CE:67:94:C1:F1:2E:26:9A:0C:67:A6:34:C9:4C:85:8F:B3:0C
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:5c:5e:64:e8:f2:48:33:f6:67:06:a7:76:25:ad:55:89:94:
c2:ae:fb:0e:b1:55:3d:52:c7:43:99:61:68:4c:cc:12:f8:aa:
66:48:dc:ec:43:be:b3:79:72:8d:df:6b:61:12:41:32:bf:85:
f8:72:6a:f0:73:97:b3:57:5a:9f:d7:23:d6:83:ff:69:09:d6:
c5:0d:42:d0:39:a4:a3:ec:d7:a0:26:7d:68:df:bb:55:2c:2d:
bb:ad:10:8a:8d:db:ec:8c:e1:50:9a:d8:a6:fe:11:cd:f1:1c:
83:c6:27:26:25:69:10:b7:63:10:da:65:c7:05:b1:d5:21:7f:
1c:e3:66:29:6b:c4:77:df:01:3f:7d:4b:a7:9c:d5:9c:26:ba:
e7:35:c5:ca:00:e5:d6:06:cc:ca:1a:22:6b:d2:a8:50:da:ac:
ef:88:79:24:cc:1f:d6:cd:3c:fa:30:85:84:61:8c:87:03:71:
aa:5f:62:17:3d:d0:c8:9a:d7:9e:82:be:60:95:c9:ca:c0:17:
e5:d6:00:47:2f:5c:31:35:11:a9:3b:cc:97:dd:10:5f:1c:21:
4c:8c:82:de:ac:5e:1b:66:9c:ce:5c:a3:f3:0f:42:ea:01:89:
b6:40:03:58:2c:cc:e7:06:40:24:80:aa:d6:c7:57:27:35:9b:
72:5b:05:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:07:09 2026 by rpki-client