Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
File: CkJzuedRDQGfLFMps_NOrvKuvKY.mft (raw, json)
Hash identifier: 1CqXdp+nrOqt3wnR72+kE1vtMycjDaOLawi0eOru+H4=
Subject key identifier: 80:61:A5:45:E1:9C:0E:A0:E5:15:E3:F4:6C:2B:05:59:CB:C5:D0:2B
Authority key identifier: 0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
Certificate issuer: /CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Certificate serial: 019DDD67F765ED80D95641E5C5E17F682521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
Manifest number: 55
Signing time: Thu 30 Apr 2026 08:01:11 +0000
Manifest this update: Thu 30 Apr 2026 08:01:11 +0000
Manifest next update: Fri 01 May 2026 08:01:11 +0000
Files and hashes: 1: CkJzuedRDQGfLFMps_NOrvKuvKY.crl (hash: h39Yy/yz+BCCBO83QARrFJsk9vf/KbqD3i55JkmtzVM=)
2: yGVHSJihmK5lz-YBtlg1ypGdz5I.asa (hash: LHCOSJtU6LRqO7/ToKVntknxN1V5181fXBdOKoO29NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:67:f7:65:ed:80:d9:56:41:e5:c5:e1:7f:68:25:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Validity
Not Before: Apr 30 08:01:11 2026 GMT
Not After : May 1 08:01:11 2026 GMT
Subject: CN=8061a545e19c0ea0e515e3f46c2b0559cbc5d02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:c0:d7:65:14:f0:b3:93:c0:7a:97:9f:a6:
39:ce:1e:af:8d:75:01:05:cd:9a:73:11:67:58:d8:
82:a4:82:ff:a4:7d:9d:c9:f8:a6:c7:75:ff:86:b6:
35:47:32:50:12:b0:3d:3d:0f:cb:be:23:23:2d:6c:
4b:a3:13:d3:c8:37:d1:6f:1c:08:06:a9:31:ac:98:
3a:02:ff:18:b0:31:74:5f:13:7d:fd:fc:62:3a:6b:
70:42:f2:1d:6d:5a:ce:f2:f2:35:05:fd:a9:15:03:
30:4a:43:26:74:20:46:b7:79:79:d2:cf:68:e6:f0:
d1:8b:a7:ac:92:8d:11:0d:db:ab:a0:ff:e1:44:19:
bd:03:90:76:c6:cc:01:b2:71:eb:f8:75:00:19:1d:
44:79:b1:e5:d7:62:04:4b:3c:b3:af:b2:71:10:85:
3e:f3:9b:85:a7:8c:b8:45:27:19:78:f5:86:0d:61:
33:fd:59:8d:11:34:32:50:2a:04:e5:98:5f:20:b9:
0c:76:e9:73:e8:fe:3b:cf:29:cd:a0:9f:67:a7:bd:
85:25:fc:a5:6f:64:16:0f:c7:ec:22:37:65:78:e4:
15:29:cd:49:d8:64:c2:b0:59:dd:75:80:fa:84:7d:
a4:f9:73:8e:77:bc:11:b4:fb:40:72:ea:68:13:c1:
d9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:61:A5:45:E1:9C:0E:A0:E5:15:E3:F4:6C:2B:05:59:CB:C5:D0:2B
X509v3 Authority Key Identifier:
keyid:0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2c:21:f1:37:0f:db:13:b4:f3:cc:34:6a:40:8c:71:1a:b1:
75:2d:0f:5a:f1:59:50:71:bd:b3:17:75:8c:bd:a9:ea:d2:c1:
90:5c:28:e1:59:71:7c:b9:d3:cf:f2:73:00:94:97:17:e6:02:
01:a5:13:85:db:33:2d:64:4d:4d:bb:4d:9a:de:75:9e:de:85:
85:df:c1:a8:fd:17:c2:6b:9b:1a:ba:ef:00:b5:37:19:5a:47:
90:f3:e9:09:13:17:f9:95:67:69:f4:6d:45:84:d9:71:b7:fa:
09:cd:24:7b:b4:59:82:85:fd:fd:3b:15:3a:2f:b7:f7:70:cf:
93:cf:90:b0:bc:af:db:e6:4c:a4:c2:5a:40:c1:0c:88:2b:b0:
c6:8f:31:12:13:fd:42:4b:e3:06:d7:9a:bd:a3:0a:37:91:22:
0c:1e:20:3e:4a:8a:47:99:93:99:24:75:2f:50:11:01:b7:e2:
00:f7:e6:93:50:dd:0e:42:46:43:bf:bc:72:2e:0b:01:ad:0c:
7a:56:6b:d2:6a:6e:13:7f:e7:80:b9:81:d4:a5:0d:67:34:1f:
34:53:8c:c2:0e:59:37:d0:25:99:80:d2:04:fb:4b:99:37:eb:
fe:45:c0:b9:35:7a:ac:8e:89:17:eb:9a:6c:cf:f1:e9:ef:ed:
28:55:36:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:46:35 2026 by rpki-client