Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
File: CkJzuedRDQGfLFMps_NOrvKuvKY.mft (raw, json)
Hash identifier: gw+p71S3rdpClcAnFX6G+plQB7Wn1DeIDzMyFRw4byw=
Subject key identifier: 4F:90:B9:1F:0D:CA:B2:8C:46:93:9B:25:23:E3:70:AE:A5:F5:1C:D0
Authority key identifier: 0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
Certificate issuer: /CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Certificate serial: 019EFB3A6ADD783A96A3A6CA509D2B97E9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
Manifest number: E9
Signing time: Wed 24 Jun 2026 20:02:50 +0000
Manifest this update: Wed 24 Jun 2026 20:02:50 +0000
Manifest next update: Thu 25 Jun 2026 20:02:50 +0000
Files and hashes: 1: CkJzuedRDQGfLFMps_NOrvKuvKY.crl (hash: QerEv242CO4nLFdkel5aj6EROxv4Lj7Z79/bjnBT0cE=)
2: yGVHSJihmK5lz-YBtlg1ypGdz5I.asa (hash: LHCOSJtU6LRqO7/ToKVntknxN1V5181fXBdOKoO29NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 20:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:3a:6a:dd:78:3a:96:a3:a6:ca:50:9d:2b:97:e9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Validity
Not Before: Jun 24 20:02:50 2026 GMT
Not After : Jun 25 20:02:50 2026 GMT
Subject: CN=4f90b91f0dcab28c46939b2523e370aea5f51cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:78:72:b6:4a:35:4f:08:70:e6:c3:80:30:
11:05:0f:ae:bd:8a:3d:19:7c:c0:22:30:5a:9b:17:
34:d7:35:40:a8:57:16:a8:bb:7a:56:35:6c:18:a0:
6a:82:55:37:ae:0b:82:69:40:a8:98:36:e3:10:3c:
cf:22:a6:d5:8b:f1:a0:01:69:12:07:78:c8:51:c6:
38:f8:bd:c5:c5:c0:34:23:ce:a6:93:46:6a:b4:95:
ec:e4:ad:9d:02:09:b7:ea:de:e4:52:51:76:b8:10:
77:56:95:f2:69:15:ac:bd:89:27:02:a4:54:7c:05:
ac:e8:c4:e1:94:0f:7b:dc:90:a8:2c:ef:91:84:f9:
7c:91:73:f7:35:de:89:86:13:cd:02:17:d6:be:85:
6a:dc:3e:7f:60:d5:a9:59:97:7e:34:ea:21:ef:e3:
13:49:c8:3d:0e:49:ae:ec:f3:ac:88:6d:85:86:a0:
38:41:fb:db:85:1f:f1:e8:1a:97:6e:6c:52:9f:ae:
26:e0:0e:b5:1d:b4:0b:a0:86:c7:9f:3d:9c:68:44:
86:61:b6:d6:22:95:8b:7a:db:f6:9c:a4:fe:85:3f:
a9:71:b6:30:e0:78:cc:64:6e:61:e5:da:e6:e9:66:
e8:9d:47:6a:31:00:a0:00:6a:04:cb:8d:20:94:2e:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:90:B9:1F:0D:CA:B2:8C:46:93:9B:25:23:E3:70:AE:A5:F5:1C:D0
X509v3 Authority Key Identifier:
keyid:0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:81:22:94:a7:20:a1:6e:e0:48:4e:c8:24:24:47:d6:8c:7f:
a8:19:17:63:9d:97:a9:a1:cc:20:d1:1f:e3:ea:db:49:d5:bb:
a2:55:c0:b1:02:99:74:61:a8:81:83:09:4e:e6:e5:7f:08:4a:
9f:e0:95:ec:0c:13:18:49:ed:00:88:48:64:51:e1:1e:ae:f5:
a2:6d:5f:f3:7e:95:63:fe:50:31:3b:b2:fa:98:b4:14:21:92:
82:53:77:e0:d7:62:9c:24:39:33:10:d7:7d:04:86:14:49:b0:
e6:56:31:b0:0c:c3:e2:f4:d0:b6:3a:58:17:96:5a:8e:c4:d9:
c5:4e:cb:f9:66:af:87:69:35:a6:b5:a7:40:1d:df:60:bc:d8:
2c:86:77:86:df:30:a8:ca:b5:f3:01:a2:a2:d0:13:26:5d:a3:
91:50:53:2f:17:70:de:4b:12:36:6a:50:7d:d4:24:e2:48:ee:
06:ee:19:e6:aa:3d:ef:89:b8:91:a6:6f:c5:4d:1a:29:14:39:
9a:bf:fc:32:44:ef:62:69:76:e7:e2:7f:0c:1f:60:15:b3:5b:
45:31:8b:12:c1:95:30:48:50:6a:81:a1:07:02:a9:8f:79:dd:
23:b8:c8:27:0e:ab:f6:2f:47:1d:40:a5:50:6d:5c:ac:21:d7:
b3:35:f8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 07:01:15 2026 by rpki-client