Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
File: CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft (raw, json)
Hash identifier: eo8xSNMA9MCA78SVD4bmPSC8413o6BmPVi3w9oL6CUo=
Subject key identifier: C6:0B:7D:6F:E1:3A:26:3C:B6:81:88:99:14:3E:74:88:D5:DA:6A:4B
Authority key identifier: 08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
Certificate issuer: /CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Certificate serial: 019D3977BD337896021268B115DA904619A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
Manifest number: 14F7
Signing time: Sun 29 Mar 2026 12:00:41 +0000
Manifest this update: Sun 29 Mar 2026 12:00:41 +0000
Manifest next update: Mon 30 Mar 2026 12:00:41 +0000
Files and hashes: 1: CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl (hash: NOrrlxgZabfZbwR8fHDcCZmUT74Sq0qhY0BQrUr5xp8=)
2: S6WAJx7TbU110k_g0oyFg1H_34U.roa (hash: toyst882a1xCVx/3FvwHIaERW16kFo9wkqRcGIDeq00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:bd:33:78:96:02:12:68:b1:15:da:90:46:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Validity
Not Before: Mar 29 12:00:41 2026 GMT
Not After : Mar 30 12:00:41 2026 GMT
Subject: CN=c60b7d6fe13a263cb6818899143e7488d5da6a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:72:30:33:e3:f8:99:e8:62:42:f0:e0:2f:
15:bc:01:96:7d:9c:82:02:2b:6c:4b:66:cb:7e:02:
8d:4c:de:60:f1:b7:2c:d3:56:5e:4d:84:42:6c:d7:
28:ce:6f:f7:57:8e:a0:75:a9:29:5a:c0:c4:be:93:
b5:c4:16:5f:a4:22:f9:f3:03:cc:3b:64:be:4f:c7:
b6:4b:d1:89:63:4b:00:7c:51:8d:f8:16:f1:df:86:
16:bd:58:64:40:74:c9:b0:41:40:63:b2:ae:dd:0b:
1c:3f:b1:44:72:64:31:6b:00:0d:20:16:8e:4a:58:
8f:6d:51:76:61:4a:61:1e:66:a3:e7:55:e7:16:49:
8d:d0:89:12:07:67:20:8b:e9:21:c8:2e:31:63:bb:
b3:5d:81:10:d9:3c:44:ac:b0:41:02:a3:74:bf:2e:
72:56:7c:9e:2b:8e:9a:5f:ed:40:51:ef:d4:81:1c:
62:f5:da:60:86:8d:6d:c5:72:67:bc:57:db:f3:67:
7c:3e:0d:77:87:f4:aa:7b:0e:36:b1:fd:98:c4:ba:
b7:54:68:2f:91:f1:bb:ff:52:f3:b1:db:1e:df:7b:
a8:5e:52:cc:0b:ab:8a:87:9e:17:0e:ab:cb:64:56:
72:78:4e:f4:3e:b6:c7:2b:13:c2:99:ca:0b:84:9c:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0B:7D:6F:E1:3A:26:3C:B6:81:88:99:14:3E:74:88:D5:DA:6A:4B
X509v3 Authority Key Identifier:
keyid:08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2b:00:87:c4:ef:94:91:0a:03:a3:9f:60:fe:59:ef:8d:48:
35:7c:ee:0e:c5:16:75:1e:4c:c8:9b:68:6a:dd:80:df:72:6b:
39:a0:a2:15:08:0a:44:72:fd:97:b4:59:e9:04:06:1d:e5:02:
00:de:00:14:3d:f2:47:da:06:f1:9c:02:53:c5:7d:d7:8e:62:
5a:a8:7b:00:61:f4:e4:08:95:47:d5:90:4f:5c:5d:76:02:42:
d5:4c:a9:f9:40:cf:0e:99:ca:ac:45:f1:98:21:3a:c8:ca:a8:
9a:35:ec:60:5e:33:17:75:1c:50:5a:c8:3a:7d:53:3d:e7:05:
3a:4e:61:ce:33:30:44:fc:04:a9:15:da:9e:6b:bc:b1:1b:47:
a1:83:4a:dd:66:26:2d:97:02:18:f3:e0:dc:60:f9:1e:9f:43:
db:81:5b:15:7b:af:a1:32:b2:71:31:52:4e:86:0b:b8:cd:7b:
6f:82:ac:1d:30:2a:36:fa:3f:be:71:a4:f5:6d:a4:7e:cc:0c:
cf:5c:3a:2a:4b:3d:dd:24:0a:d9:a7:9a:2e:3f:44:bf:be:56:
2c:71:b4:de:6b:c7:6f:3b:bd:39:f1:de:48:c1:d7:37:c7:ad:
bc:7f:82:30:a0:22:83:c2:32:7f:0a:20:73:78:7e:75:6c:66:
9a:99:92:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d70zeJYCEmixFdqQRhmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTM0ZGFhYTg4N2Q5OGE1MzQ4YzNhNDYwYTIxZmM4NGUx
MWE0ZTYwHhcNMjYwMzI5MTIwMDQxWhcNMjYwMzMwMTIwMDQxWjAzMTEwLwYDVQQD
EyhjNjBiN2Q2ZmUxM2EyNjNjYjY4MTg4OTkxNDNlNzQ4OGQ1ZGE2YTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhdyMDPj+JnoYkLw4C8VvAGWfZyC
AitsS2bLfgKNTN5g8bcs01ZeTYRCbNcozm/3V46gdakpWsDEvpO1xBZfpCL58wPM
O2S+T8e2S9GJY0sAfFGN+Bbx34YWvVhkQHTJsEFAY7Ku3QscP7FEcmQxawANIBaO
SliPbVF2YUphHmaj51XnFkmN0IkSB2cgi+khyC4xY7uzXYEQ2TxErLBBAqN0vy5y
VnyeK46aX+1AUe/UgRxi9dpgho1txXJnvFfb82d8Pg13h/Sqew42sf2YxLq3VGgv
kfG7/1Lzsdse33uoXlLMC6uKh54XDqvLZFZyeE70PrbHKxPCmcoLhJyEZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYLfW/hOiY8toGImRQ+dIjV2mpLMB8GA1UdIwQY
MBaAFAijTaqoh9mKU0jDpGCiH8hOEaTmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNDMzYzMtMTMyZi00ZDY2LWJkMzAt
YzYyY2YyMGE1ZWM5LzEvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mNDMzYzMtMTMyZi00ZDY2LWJkMzAtYzYyY2YyMGE1ZWM5
LzEvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSsAh8Tv
lJEKA6OfYP5Z741INXzuDsUWdR5MyJtoat2A33JrOaCiFQgKRHL9l7RZ6QQGHeUC
AN4AFD3yR9oG8ZwCU8V9145iWqh7AGH05AiVR9WQT1xddgJC1Uyp+UDPDpnKrEXx
mCE6yMqomjXsYF4zF3UcUFrIOn1TPecFOk5hzjMwRPwEqRXanmu8sRtHoYNK3WYm
LZcCGPPg3GD5Hp9D24FbFXuvoTKycTFSToYLuM17b4KsHTAqNvo/vnGk9W2kfswM
z1w6Kks93SQK2aeaLj9Ev75WLHG03mvHbzu9OfHeSMHXN8etvH+CMKAig8Iyfwog
c3h+dWxmmpmSsA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:58 2026 by rpki-client