Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: ZYndXyYp71XtI5cuD5ypiWNr0zOk110+EBcYkHBfCek=
Subject key identifier: C0:46:CA:C5:C9:D2:DA:15:CF:A1:01:7C:55:8D:70:C9:AD:33:DF:47
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 019F197A8E3AA4C9FEDCE23C086F3B0975FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 1991
Signing time: Tue 30 Jun 2026 17:01:29 +0000
Manifest this update: Tue 30 Jun 2026 17:01:29 +0000
Manifest next update: Wed 01 Jul 2026 17:01:29 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: 9cWRvDIe9xXjd1MLm/hiLNhjF/kf9yUzEGfhaCc9Bp0=)
2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:8e:3a:a4:c9:fe:dc:e2:3c:08:6f:3b:09:75:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Jun 30 17:01:29 2026 GMT
Not After : Jul 1 17:01:29 2026 GMT
Subject: CN=c046cac5c9d2da15cfa1017c558d70c9ad33df47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9c:2e:3e:f8:82:75:4a:d8:54:cd:86:90:41:
26:23:c2:42:c3:13:97:f3:d6:59:99:8d:d5:0e:0c:
66:8b:3d:b2:82:2b:27:a0:27:58:66:de:e8:36:e4:
9f:f7:1f:62:8a:90:b8:8c:14:5c:5f:1c:f5:4d:2d:
83:39:7f:0e:ed:a5:61:c6:e4:b5:69:e6:58:0a:64:
48:ff:0c:67:0c:72:67:a4:a3:4d:27:f6:dc:2e:e4:
74:ab:4d:02:1b:76:b9:a0:28:2f:29:f4:15:80:c7:
70:37:41:c7:34:1b:3c:71:86:e4:17:6a:d3:fa:f9:
81:e3:9b:23:e9:15:89:08:a9:d1:f7:00:86:f0:a5:
6a:71:a4:eb:a2:90:32:ff:24:32:68:15:b2:c2:c7:
f6:81:01:2c:3d:67:b0:48:6b:2d:06:bd:ce:62:48:
7f:13:09:4f:c7:26:f8:cf:08:a8:c7:42:97:b4:e1:
3f:3b:b1:b8:44:2b:31:dc:13:90:b6:09:5e:74:3e:
b0:e5:7b:20:1a:e4:6c:64:fe:34:ae:c2:81:d6:3c:
cd:e3:3b:a8:71:22:59:6c:34:90:1c:75:3c:52:e3:
fd:a2:60:ab:5f:47:b9:91:3f:c0:4f:ef:83:ef:ce:
65:ff:05:77:bc:5b:ff:9a:4c:67:6c:58:8e:c8:5f:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:46:CA:C5:C9:D2:DA:15:CF:A1:01:7C:55:8D:70:C9:AD:33:DF:47
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e0:b1:72:24:75:52:95:03:91:92:72:59:32:19:61:71:46:
fe:00:fa:23:08:61:84:40:37:08:92:d9:b8:33:bf:9d:39:b9:
97:a5:5e:25:36:5c:7e:3e:38:a1:a5:1c:b4:e7:b3:57:48:fd:
ea:37:63:b5:17:68:eb:2f:16:5b:a4:f0:c7:95:33:d1:b2:dc:
62:3a:d5:db:86:9d:30:70:e5:b6:99:59:37:a4:b6:b5:dd:1a:
19:be:50:a6:48:f8:56:d6:35:88:ca:90:c6:64:8c:05:6b:d8:
9e:ca:e1:34:eb:96:98:cf:a2:ed:fe:58:21:55:e9:e7:0b:3f:
f9:3d:1b:d7:c4:48:d6:97:d1:4a:56:f1:13:e1:79:a3:52:75:
b1:6c:e5:b5:3e:13:ec:21:68:88:46:3f:14:7a:43:09:c4:80:
46:37:bc:b3:d6:19:57:79:ab:f2:f1:90:a4:b0:15:42:09:ff:
94:1a:05:0a:9b:22:43:d7:dc:47:f1:29:f8:07:8d:cf:7b:9a:
f7:f6:e3:68:57:74:d4:82:52:53:81:6c:f0:a6:ea:e2:99:12:
85:e0:a0:9a:44:31:65:55:f2:d8:26:71:e3:d6:53:13:bf:43:
52:ed:03:a4:9a:ae:80:37:fd:2f:43:85:fc:e7:42:4a:7f:59:
7c:52:ea:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:24:27 2026 by rpki-client