Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: yPYTnMWgCuefk5+4SJMmw7EOWEoM6aucsltxbdowXTA=
Subject key identifier: 0F:9E:F9:98:26:24:55:96:47:41:97:84:38:24:E9:66:32:88:80:E3
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 01A001DCB7B5D0C54B651C8B540201CD82B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 20:00:37 +0000
Manifest this update: Fri 14 Aug 2026 20:00:37 +0000
Manifest next update: Sat 15 Aug 2026 20:00:37 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: uCQSTnQKysetr7Yu+U9Rdq062l/XUINqnYTRgZ8t8ZA=)
2: cDoC-jSYN7u0frpLx2bXUSxluu0.roa (hash: 0c+KBOgKhiecSN5vnMV9D8GmEY0jyIF5LXtXoNSNf7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:b7:b5:d0:c5:4b:65:1c:8b:54:02:01:cd:82:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Aug 14 20:00:37 2026 GMT
Not After : Aug 15 20:00:37 2026 GMT
Subject: CN=0f9ef99826245596474197843824e966328880e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:f7:02:85:f7:44:35:ae:0a:99:96:15:5e:
41:00:07:73:9a:60:5f:77:a8:cf:db:3a:0d:42:d1:
1b:fb:83:32:5b:94:91:3d:db:21:07:10:a3:44:42:
87:26:07:91:3a:64:5f:d6:aa:86:99:44:82:cc:32:
e2:6e:73:4e:2c:14:06:a9:ae:c4:58:6f:74:d3:4b:
83:a1:7c:57:10:06:de:8a:94:10:8e:24:bd:d6:48:
de:6c:b7:97:38:33:7d:13:3f:e6:11:15:a1:20:b1:
bd:b6:30:89:2b:ae:9d:ac:f7:82:57:cd:90:47:63:
5e:a9:cb:5f:1c:ee:68:d3:7b:02:bd:72:a7:18:c4:
24:4a:fb:ae:6b:39:aa:2c:2b:52:82:8e:d4:21:92:
d9:23:80:27:0f:2f:e7:af:31:59:f3:dc:50:bb:d0:
13:67:12:bc:9d:17:a4:ac:b6:2f:fa:00:28:46:e6:
c1:d1:27:da:64:4e:d7:67:b4:97:0d:4d:7c:f2:76:
2c:41:6c:e4:7f:38:f0:4e:5b:44:ca:8f:f0:6e:2a:
43:0c:0d:6d:2d:ed:ac:67:0c:cf:ca:d7:c4:84:22:
12:5c:b9:8f:9b:58:dc:21:44:f9:34:c6:e0:83:c1:
e3:d2:44:0f:b1:85:0d:32:b7:6c:77:95:01:53:84:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9E:F9:98:26:24:55:96:47:41:97:84:38:24:E9:66:32:88:80:E3
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:73:ee:24:ee:39:23:1d:3b:ba:4c:4f:fd:f1:37:2e:2a:64:
70:68:4a:a9:57:01:44:ed:ad:f8:73:18:e1:7a:ac:8a:19:f2:
89:4c:65:8c:c3:5a:f1:29:2c:e6:a3:46:9e:e4:74:d5:7c:94:
9d:dc:b0:e0:82:77:d9:2a:14:4c:d8:32:8d:8a:e2:c5:35:1a:
48:b9:3f:21:5f:b0:f0:7c:f6:38:50:99:2c:36:85:5f:e6:5a:
9d:7d:14:c8:c6:7a:9f:a0:ad:b6:f0:d4:86:b0:82:29:03:1f:
e0:44:36:93:2f:22:cb:3c:9f:13:b1:c7:5f:7d:99:a1:33:af:
c2:e3:7d:e0:57:a2:a9:7e:0e:cc:fd:7b:de:74:2e:d0:97:90:
1d:26:72:b0:d0:33:5c:ed:c4:fa:9d:68:da:01:13:81:86:48:
2c:67:4b:7d:2f:bc:33:ec:8d:74:7c:75:0c:a1:ca:f2:bb:2a:
46:86:7c:41:6f:97:23:fb:2e:8f:67:94:76:20:41:a5:97:b0:
49:85:af:9f:cc:1a:8b:b4:25:0b:ad:59:f1:87:7e:70:f0:e9:
84:d4:7b:26:a4:8e:77:70:f5:b7:c7:67:4a:0f:bc:79:9e:58:
81:f3:ff:21:97:b5:26:3a:43:95:b2:d5:ce:59:c2:2e:e9:38:
8a:09:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:05 2026 by rpki-client