Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json)
Hash identifier: 3/dsT5xGeXfSQBkhDrUsAIWjCvQjSPnnshaVkXQEOYc=
Subject key identifier: 86:D4:D9:67:71:DD:21:94:DD:33:52:F3:ED:86:11:27:DA:46:2F:C4
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial: 019D3977F55025805103AFB02A790915F1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
Manifest number: 14E8
Signing time: Sun 29 Mar 2026 12:00:55 +0000
Manifest this update: Sun 29 Mar 2026 12:00:55 +0000
Manifest next update: Mon 30 Mar 2026 12:00:55 +0000
Files and hashes: 1: YHvvyK4ZKR8SZ6aC_FLps6Aqe0s.roa (hash: gm42s7vK+4MOMqCS31qZX96qjCMC7m5X5ZwK72bSkdc=)
2: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: trQe1IouqUU0jUKUYm5EsRbNhxhUjVwbzlZLVHAuu74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f5:50:25:80:51:03:af:b0:2a:79:09:15:f1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Validity
Not Before: Mar 29 12:00:55 2026 GMT
Not After : Mar 30 12:00:55 2026 GMT
Subject: CN=86d4d96771dd2194dd3352f3ed861127da462fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:2c:99:2a:1b:60:9c:9c:6a:dd:1e:b1:8e:
57:10:0a:d9:a8:20:d7:3b:69:ac:a3:37:22:26:cb:
4e:5e:6e:33:59:19:73:51:20:13:ce:98:8f:9b:44:
09:de:56:8a:36:f1:53:74:9b:9a:05:0d:38:27:fe:
73:e1:f9:8d:75:9f:af:51:8a:91:a8:09:9b:f0:6e:
9e:9a:4f:3d:2a:6d:e5:5d:5c:00:e3:94:03:a6:2a:
c6:be:38:a4:a0:0b:1f:83:0d:52:bb:02:b6:07:b5:
dc:d1:80:10:a1:be:7f:5f:1b:1f:52:bc:58:2a:ac:
10:cf:60:71:a0:e4:be:e2:0f:02:7e:fe:93:7a:00:
35:c2:e1:9f:0c:75:26:e8:2b:c7:a4:05:25:b1:8d:
dd:07:44:d8:03:0d:94:94:c1:4d:09:37:d0:92:33:
a7:e0:47:54:b9:35:50:ac:45:b0:53:42:09:20:a4:
b0:77:41:43:0a:d4:1f:f6:8b:4d:32:cd:10:0e:79:
98:81:48:6e:ce:72:73:6b:00:be:bf:3f:cf:3a:31:
02:c3:72:e9:cf:ba:42:b3:4c:64:f9:dc:b7:51:c7:
ba:ae:0b:f6:76:dd:75:8f:e5:19:77:2b:e1:58:32:
3b:47:03:46:df:02:84:87:8c:cd:8e:ff:3c:ea:59:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D4:D9:67:71:DD:21:94:DD:33:52:F3:ED:86:11:27:DA:46:2F:C4
X509v3 Authority Key Identifier:
keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:46:c1:d9:5e:79:7f:13:55:18:d8:5c:6c:db:33:22:fa:55:
02:a3:ae:33:07:0a:91:a3:9c:4c:2b:33:4e:a7:29:20:25:68:
bc:f3:7e:2f:7e:fa:8e:71:e1:34:a0:62:3e:23:94:62:a2:fd:
c0:4a:e5:e2:2d:5f:86:b8:ae:be:db:2b:e2:4e:c0:28:1f:2d:
c0:08:56:84:d2:29:69:69:d5:fc:92:cc:40:09:a6:18:08:54:
8c:f0:8f:d7:f8:67:5d:83:86:b0:7f:e0:36:97:33:90:9c:4d:
84:15:ee:35:bf:cc:ae:d5:8c:81:8a:e5:e8:ab:5d:a9:9c:86:
a0:23:c7:cb:05:fe:bd:13:a6:5f:f6:70:ba:46:a9:dd:1e:aa:
91:9a:10:ba:f2:c9:ba:47:13:15:50:de:21:3e:16:b0:1a:57:
c1:d9:76:27:db:df:47:71:66:e5:30:d9:76:75:30:2f:f7:69:
4a:09:cd:83:49:34:b7:64:6e:fc:cd:08:c9:31:1d:40:d8:40:
70:cb:14:0a:70:38:a4:9b:52:ea:b3:ca:1c:84:02:4a:f8:5e:
db:e8:30:26:84:dc:16:16:94:7c:56:32:86:ae:dc:44:bc:15:
e7:bb:af:40:5c:d3:6f:96:07:75:07:8e:20:e3:8d:55:d3:58:
82:6a:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:14 2026 by rpki-client