Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
File: CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft (raw, json)
Hash identifier: /95M43Puij7dsR3Kk9ipfH6qhJ8vk0ssgC5BaowdxQs=
Subject key identifier: 83:2E:A7:44:86:12:BA:C5:82:5D:BD:BE:AD:49:C8:F9:90:57:6F:1F
Authority key identifier: 08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
Certificate issuer: /CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Certificate serial: 019E30A96D48B55E04DC4BFDE5E14864ABC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
Manifest number: 1577
Signing time: Sat 16 May 2026 12:01:10 +0000
Manifest this update: Sat 16 May 2026 12:01:10 +0000
Manifest next update: Sun 17 May 2026 12:01:10 +0000
Files and hashes: 1: CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl (hash: hqg7YwGjn0JINjvelRyOapFQJtdxjVIzUKY11JUBNsM=)
2: S6WAJx7TbU110k_g0oyFg1H_34U.roa (hash: toyst882a1xCVx/3FvwHIaERW16kFo9wkqRcGIDeq00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:6d:48:b5:5e:04:dc:4b:fd:e5:e1:48:64:ab:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Validity
Not Before: May 16 12:01:10 2026 GMT
Not After : May 17 12:01:10 2026 GMT
Subject: CN=832ea7448612bac5825dbdbead49c8f990576f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:c8:38:90:ca:f2:7c:04:ac:f4:ee:74:15:
58:fe:61:b5:04:35:76:61:2b:b5:2f:a1:9e:04:e8:
3c:b1:eb:55:b0:73:34:61:a3:4b:cf:e0:af:65:9e:
af:39:4f:87:25:ab:68:89:9d:c2:44:a4:40:3c:ec:
e9:5e:b3:18:91:33:cc:1f:48:56:c4:fd:90:2a:94:
3c:10:99:34:31:cc:b8:be:d6:10:4d:29:56:9c:97:
37:64:1b:a5:ea:f8:ad:16:ea:40:68:c2:9d:d1:80:
70:fd:68:5c:4e:18:d7:32:d9:2a:f1:7c:13:d3:c0:
4e:30:3f:2b:89:42:83:56:de:47:6e:da:cf:00:c0:
14:e8:6c:b9:dd:e0:58:b7:b5:7e:70:ba:6e:de:db:
8f:f2:b5:04:75:1b:3a:be:26:6c:cc:7b:6d:5c:ed:
e1:6a:2d:71:fb:f3:dc:6c:7a:c8:59:62:16:8c:ba:
e5:58:cb:8d:e7:b1:a1:40:f7:b2:63:a5:5e:38:f7:
3b:f0:3d:46:0d:b1:5e:f0:93:35:32:d2:db:3e:12:
d6:fc:d5:08:68:4d:98:af:ec:26:16:41:4d:4e:34:
2d:e1:53:2f:42:ee:37:22:9f:01:6c:f6:33:2f:f1:
7e:6f:b2:48:36:a9:a9:64:d9:75:ea:44:7b:d1:05:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2E:A7:44:86:12:BA:C5:82:5D:BD:BE:AD:49:C8:F9:90:57:6F:1F
X509v3 Authority Key Identifier:
keyid:08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:01:50:62:ce:15:f3:0d:1b:11:9e:60:6c:8b:09:73:f7:92:
13:11:af:e8:33:e5:17:d6:f0:00:05:4c:b5:5e:18:a1:27:09:
71:a6:de:19:c6:f9:45:1a:da:9b:26:0e:3c:65:4b:1d:8d:01:
b9:c4:d1:56:f1:9c:7c:7d:ab:1c:39:44:f9:6b:e3:5f:55:4c:
b4:c9:a3:ae:71:1e:90:71:ac:95:a1:81:99:a0:34:50:a4:04:
f3:69:49:20:44:47:3d:ab:66:ef:37:a7:52:af:07:6a:d7:28:
77:70:b6:c2:65:d7:5d:f7:af:b7:87:e8:fb:8f:96:47:3f:f8:
0d:c4:e4:ef:89:a5:ce:0c:c1:5e:1d:9d:b7:e1:a4:11:c3:92:
52:34:d6:08:92:7f:92:20:bd:38:a4:80:22:11:e8:d7:f0:cd:
d8:e9:ab:f2:df:d1:2d:3d:bc:5b:2c:e0:56:4a:06:6e:94:63:
7c:e0:50:6e:07:d5:53:85:3a:9c:bf:05:76:b4:3e:0a:9a:b6:
d7:3a:94:6e:f1:19:b3:59:40:10:be:82:fe:11:1a:ad:24:c6:
c7:5b:9b:02:84:04:07:a2:f7:b9:f0:f4:ee:15:02:14:92:0e:
ea:9f:51:2e:aa:33:ce:fe:c7:db:89:a1:31:5f:58:0a:0e:fc:
73:06:8a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:44 2026 by rpki-client