Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
File: CkJzuedRDQGfLFMps_NOrvKuvKY.mft (raw, json)
Hash identifier: 9sg8ljwtNvi24rxkwLt/b+EU9G+gR3oxHgSS0EVoIPE=
Subject key identifier: 29:71:E3:D4:EA:42:AC:EB:96:91:B9:F3:6B:69:EA:29:BB:8E:56:FD
Authority key identifier: 0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
Certificate issuer: /CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Certificate serial: 01A0E7AE79D8AB8D8518AD52015EF36390CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
Manifest number: 01E8
Signing time: Mon 28 Sep 2026 11:02:46 +0000
Manifest this update: Mon 28 Sep 2026 11:02:46 +0000
Manifest next update: Tue 29 Sep 2026 11:02:46 +0000
Files and hashes: 1: CkJzuedRDQGfLFMps_NOrvKuvKY.crl (hash: dldjvqeaRuvn1FqP944ICiSPbcJzQU6qsmuZ0RbfPYY=)
2: yGVHSJihmK5lz-YBtlg1ypGdz5I.asa (hash: LHCOSJtU6LRqO7/ToKVntknxN1V5181fXBdOKoO29NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:79:d8:ab:8d:85:18:ad:52:01:5e:f3:63:90:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Validity
Not Before: Sep 28 11:02:46 2026 GMT
Not After : Sep 29 11:02:46 2026 GMT
Subject: CN=2971e3d4ea42aceb9691b9f36b69ea29bb8e56fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:b6:0b:80:68:b5:c8:e7:14:ff:1a:4e:2d:
56:47:6b:f5:a4:4e:b8:f2:9f:bc:59:df:ff:a3:9b:
db:88:1d:b2:e6:c5:60:03:2f:11:4a:b9:25:f7:72:
93:f7:a1:0c:5d:3f:88:87:1f:0c:36:c3:60:51:ec:
a1:01:09:56:17:d3:f6:e4:cc:a8:bf:eb:44:1e:64:
dd:4b:cf:da:ff:83:ff:e0:b2:2b:e2:19:08:10:b7:
4a:2d:7c:14:02:1f:46:56:b5:49:e7:55:af:52:47:
94:8a:83:07:c1:94:84:19:0a:11:96:20:c5:5e:e2:
2f:62:f5:09:00:69:d3:86:0e:e5:7a:62:91:74:c9:
9a:4c:52:db:c9:cf:ce:98:cb:e8:d4:39:b0:da:b9:
4c:62:a7:80:bd:51:a4:4d:a4:71:63:30:ee:09:64:
cb:05:a6:fd:44:f6:91:e9:02:86:92:b7:f0:dc:1a:
ee:ac:41:cd:15:79:a2:c9:88:0a:60:e5:85:1b:c5:
60:f2:02:ec:81:93:38:e6:89:59:3b:5c:b5:af:45:
c2:ca:b6:20:48:f4:3e:e1:92:df:b0:86:73:20:bf:
af:eb:de:b2:3e:20:d3:34:ad:0d:68:d1:1b:e4:e4:
6e:76:b4:59:af:48:e2:e2:9a:da:2b:36:49:f3:28:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:71:E3:D4:EA:42:AC:EB:96:91:B9:F3:6B:69:EA:29:BB:8E:56:FD
X509v3 Authority Key Identifier:
keyid:0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:dc:86:5d:82:28:89:2a:e3:58:25:ae:d9:11:cf:c8:19:a1:
c2:a1:3b:b4:06:6c:e0:a6:90:2b:d8:d0:27:39:e3:2c:e6:9e:
e3:23:0c:ab:2e:ce:62:83:2a:c2:f1:71:e3:17:59:2c:d3:07:
4a:8c:69:57:f7:40:77:e6:89:71:5e:28:70:76:bc:80:b6:ce:
28:0e:50:7c:30:ec:6d:b5:11:aa:d8:48:41:75:d9:a2:a3:4c:
b4:30:0e:2b:f5:4c:ba:e9:ad:f5:76:aa:95:d3:2f:51:05:d7:
a3:47:a9:31:ff:b2:df:c4:45:a0:8b:36:52:9e:15:97:88:3c:
6c:b2:12:a8:61:bf:fd:92:ed:1e:f4:a0:f7:c0:8b:8e:e1:91:
6e:a7:73:39:67:b9:71:79:dc:00:23:5d:32:e1:e6:43:57:f4:
ed:b8:a7:81:f3:5c:6e:82:92:4a:0c:2d:5a:32:be:93:22:8d:
14:8d:5a:4d:6a:9d:cf:db:c9:89:d8:e2:3d:d0:96:34:a3:90:
62:15:c8:74:8f:ff:bd:91:2c:0c:0c:85:ee:ec:2b:4b:37:5b:
2d:10:b9:d1:6a:a4:4d:c9:15:9e:6c:d8:52:bc:4b:40:fb:78:
e8:bd:d9:1f:31:b2:90:8c:22:94:54:0f:49:4c:b3:db:1a:ca:
3a:a3:81:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnrnnYq42FGK1SAV7zY5DPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDI3M2I5ZTc1MTBkMDE5ZjJjNTMyOWIzZjM0ZWFlZjJh
ZWJjYTYwHhcNMjYwOTI4MTEwMjQ2WhcNMjYwOTI5MTEwMjQ2WjAzMTEwLwYDVQQD
EygyOTcxZTNkNGVhNDJhY2ViOTY5MWI5ZjM2YjY5ZWEyOWJiOGU1NmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYe2C4BotcjnFP8aTi1WR2v1pE64
8p+8Wd//o5vbiB2y5sVgAy8RSrkl93KT96EMXT+Ihx8MNsNgUeyhAQlWF9P25Myo
v+tEHmTdS8/a/4P/4LIr4hkIELdKLXwUAh9GVrVJ51WvUkeUioMHwZSEGQoRliDF
XuIvYvUJAGnThg7lemKRdMmaTFLbyc/OmMvo1Dmw2rlMYqeAvVGkTaRxYzDuCWTL
Bab9RPaR6QKGkrfw3BrurEHNFXmiyYgKYOWFG8Vg8gLsgZM45olZO1y1r0XCyrYg
SPQ+4ZLfsIZzIL+v696yPiDTNK0NaNEb5ORudrRZr0ji4praKzZJ8yj6MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClx49TqQqzrlpG582tp6im7jlb9MB8GA1UdIwQY
MBaAFApCc7nnUQ0BnyxTKbPzTq7yrrymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tKenVlZFJEUUdmTEZNcHNfTk9ydkt1dktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xNTJmMGYtNjkzNS00MWMxLTliNWYt
MWVmOWExMTY3ZWQ0LzEvQ2tKenVlZFJEUUdmTEZNcHNfTk9ydkt1dktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8xNTJmMGYtNjkzNS00MWMxLTliNWYtMWVmOWExMTY3ZWQ0
LzEvQ2tKenVlZFJEUUdmTEZNcHNfTk9ydkt1dktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtyGXYIo
iSrjWCWu2RHPyBmhwqE7tAZs4KaQK9jQJznjLOae4yMMqy7OYoMqwvFx4xdZLNMH
SoxpV/dAd+aJcV4ocHa8gLbOKA5QfDDsbbURqthIQXXZoqNMtDAOK/VMuumt9Xaq
ldMvUQXXo0epMf+y38RFoIs2Up4Vl4g8bLISqGG//ZLtHvSg98CLjuGRbqdzOWe5
cXncACNdMuHmQ1f07bingfNcboKSSgwtWjK+kyKNFI1aTWqdz9vJidjiPdCWNKOQ
YhXIdI//vZEsDAyF7uwrSzdbLRC50WqkTckVnmzYUrxLQPt46L3ZHzGykIwilFQP
SUyz2xrKOqOB2Q==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:31:24 2026 by rpki-client