Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: o38X769MkdE3tI5e40rcVOXZsziK+9XDOvyAZkv9kX0=
Subject key identifier: BF:DD:C3:67:46:10:A8:CA:82:9F:A6:D1:31:B8:EA:1E:2B:F2:A5:AD
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 01A132FE7AC3998B092261CB701EFB0B091B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 1AA3
Signing time: Tue 13 Oct 2026 02:01:40 +0000
Manifest this update: Tue 13 Oct 2026 02:01:40 +0000
Manifest next update: Wed 14 Oct 2026 02:01:40 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: jZwz3y4LCG+HAI4lNTswsSe567OsnLPUsSlneg3DOcE=)
2: cDoC-jSYN7u0frpLx2bXUSxluu0.roa (hash: 0c+KBOgKhiecSN5vnMV9D8GmEY0jyIF5LXtXoNSNf7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:fe:7a:c3:99:8b:09:22:61:cb:70:1e:fb:0b:09:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Oct 13 02:01:40 2026 GMT
Not After : Oct 14 02:01:40 2026 GMT
Subject: CN=bfddc3674610a8ca829fa6d131b8ea1e2bf2a5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:6e:e1:4e:ae:52:fa:d8:ca:24:13:77:40:
be:18:d4:74:56:0b:38:59:f1:f7:3e:68:2e:2b:3f:
bd:cc:6c:59:aa:f8:d4:90:25:da:94:e5:5f:07:9c:
53:23:f7:0b:2a:72:30:a7:47:5b:28:1e:0b:1a:4c:
a2:23:82:a6:5d:44:a5:86:58:af:5c:f6:cb:98:6f:
d9:b0:5a:9b:8f:67:fa:a3:f5:0b:f5:b7:05:da:76:
53:e3:93:bb:55:a3:ae:c2:97:f3:df:15:73:85:94:
07:6b:44:1c:3d:e0:ca:4c:98:d0:1e:11:fc:10:7d:
96:ec:60:94:d0:d9:f0:b0:e0:e3:ab:46:96:86:69:
64:b8:6a:16:fc:25:8c:ae:7f:d4:0b:fd:ab:0a:d1:
d6:e4:15:46:a6:28:5d:e1:24:e5:bf:54:8d:4e:e8:
dd:bb:42:7b:51:90:a6:39:06:00:10:10:84:5a:ce:
a7:75:41:cb:62:93:87:62:b8:c1:8c:9e:7b:8e:7e:
85:50:22:54:29:c3:cd:48:e4:9f:ad:f6:c3:6f:30:
d1:89:cb:d8:36:b7:e5:10:e0:46:1c:e1:1b:cb:4b:
aa:3f:e5:48:2b:e7:3b:4b:79:4d:4e:47:2c:c0:12:
16:b7:a1:a3:fe:e8:c1:70:22:94:da:3b:94:ba:84:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DD:C3:67:46:10:A8:CA:82:9F:A6:D1:31:B8:EA:1E:2B:F2:A5:AD
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:50:fe:98:54:c2:f3:d8:e5:35:a9:fb:e6:75:f4:e6:46:ab:
bc:b9:90:ee:10:bc:91:df:a2:d5:cc:9c:d2:c9:c0:ae:4d:03:
75:77:58:84:8c:20:a9:c4:61:6a:f7:1f:d6:f2:ba:e4:20:84:
7e:14:f0:5f:44:26:88:ae:1f:e1:eb:05:b5:b8:68:9c:48:87:
cb:27:df:8d:46:2d:e1:16:6c:d4:75:e5:5f:7c:69:be:89:65:
c7:a4:58:7b:5b:8a:28:ad:e6:f5:a8:36:58:ca:54:f0:98:a9:
9f:65:10:86:c9:6a:86:37:9b:3d:22:8c:b5:ce:e0:18:80:73:
6a:16:07:ca:8e:d9:7c:76:86:63:b3:07:0b:49:31:5e:68:ab:
19:04:7e:75:82:20:2c:83:69:23:3b:e5:75:77:4f:85:4e:5c:
ec:f7:18:f9:6b:7c:3a:9b:64:c2:ee:18:b8:79:ea:40:3a:31:
c3:93:46:65:54:a5:ab:0d:5b:3c:94:93:a6:85:74:aa:ec:24:
7a:ee:c3:ac:50:c5:f2:31:cd:9d:a3:a6:80:bd:03:79:8f:1b:
f1:ae:41:57:a8:84:4e:99:4c:83:b7:b4:0e:2e:19:76:66:80:
65:71:68:23:9b:ef:76:7e:d0:73:c2:86:c2:4c:1c:52:6f:9e:
dd:27:5b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:27:02 2026 by rpki-client