Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: CVDdSP7bZhksYBwGV5/j8eTYJozqXFkPNuFBW4537gU=
Subject key identifier: AE:FC:1A:5A:A6:11:DE:34:81:A8:0D:44:24:60:73:13:8C:92:E8:BC
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 019D38D34561E043320DA9A10ED10F7C5CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 17D0
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: YpSZhok7D_iJk1qiU7Mu_hY8E3Q.roa (hash: NxSxMzYasyCjB5BO8JzAFcBo/KBnMoapQAl4A8Q+rNU=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: 91p8Dp+jQQbPXyBAeOVp65mUhp7asFaQRBX8ED7lgn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:45:61:e0:43:32:0d:a9:a1:0e:d1:0f:7c:5c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=aefc1a5aa611de3481a80d44246073138c92e8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:38:90:b9:9f:14:8b:4b:ad:eb:24:37:5c:
48:9e:03:db:08:b8:96:63:fd:9a:83:0e:bb:aa:66:
85:30:13:03:8b:8d:f3:2a:76:b1:dd:eb:6a:94:78:
84:50:d7:42:6a:a7:5d:81:3c:d0:ff:fa:2c:e8:a7:
d8:6e:be:2f:ba:38:bf:90:d7:7d:b3:37:78:a0:e8:
60:c4:31:10:8a:79:12:c8:09:f6:e6:9e:a2:f5:39:
41:85:81:e6:99:36:14:d3:fe:b4:3a:1e:04:6a:a6:
92:78:19:ba:53:57:71:63:1a:a6:c9:40:00:7c:51:
ed:e2:27:8a:15:8c:0b:f8:3e:2e:ff:94:98:d4:6d:
30:71:75:7a:ba:13:4c:25:ef:1a:56:46:32:26:2b:
0b:b6:22:13:37:3e:f4:e9:d6:d6:41:69:b7:c3:f6:
12:6d:a9:f8:63:6e:db:f9:84:45:ef:b8:c2:2e:87:
60:83:af:bf:d0:96:2c:e0:b6:ad:ea:90:07:dc:33:
21:59:b5:88:31:3c:ce:d4:08:04:10:ea:80:2d:ce:
9d:8c:7c:ed:f9:9d:93:27:5a:92:7d:f5:dc:5d:90:
48:cf:df:81:c9:85:a5:f7:b2:4c:6b:a1:13:a7:98:
f9:b9:50:8e:85:8f:ef:a3:ff:7c:48:54:18:9e:77:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FC:1A:5A:A6:11:DE:34:81:A8:0D:44:24:60:73:13:8C:92:E8:BC
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ab:13:0a:92:f7:f1:23:42:02:01:c4:45:0d:21:a7:16:ee:
f7:98:e5:16:59:bb:fa:fc:57:cb:b4:e4:a8:e7:d9:26:a0:81:
20:27:db:8c:49:ce:8f:91:e1:3c:10:8f:3e:89:3f:e5:25:07:
12:0d:3d:4b:a1:4d:9f:bb:f2:7e:73:8a:cf:96:07:28:5f:0b:
e6:36:5f:a7:39:a4:7b:31:ff:91:5c:72:6f:80:24:7a:ea:4a:
52:b7:ac:10:0d:3b:2e:31:ec:fe:e9:e4:9b:75:32:ce:9d:7e:
1a:a8:a1:e5:88:dd:b9:90:94:17:29:73:56:f9:7d:75:8a:83:
97:6b:d8:01:cf:40:3b:0f:44:b4:d1:b6:62:3c:96:6b:5b:0e:
9a:e4:7c:a2:af:e6:c0:eb:3d:29:09:22:97:89:8a:a1:56:6d:
89:58:a0:28:67:fb:f1:52:90:e1:3d:9a:8e:4d:ef:91:f3:ff:
03:8a:52:70:fb:11:80:67:41:4a:9b:1a:41:ed:ca:47:41:d7:
fe:2d:fc:e4:94:6e:09:6b:3b:53:aa:ff:ca:68:8f:00:df:f2:
d4:5c:73:dd:4e:59:27:23:a9:c3:71:da:60:7e:3c:43:b9:b1:
0b:d3:9c:76:29:ed:0e:9d:6b:29:6a:4f:f7:47:bf:e0:f0:42:
ad:13:ad:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:05 2026 by rpki-client