Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: lkBWf41LOtpcRyNJheQurvImv8XqMsl2mFw7TIgMATs=
Subject key identifier: 93:54:07:66:A2:3B:A0:81:51:AE:1F:81:0F:27:A6:9F:A5:CB:95:A1
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 01A13FDDD60C9BA07B51B94EF22B72DDD4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 1AAE
Signing time: Thu 15 Oct 2026 14:01:05 +0000
Manifest this update: Thu 15 Oct 2026 14:01:05 +0000
Manifest next update: Fri 16 Oct 2026 14:01:05 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: fWjCgW8bWZkkBCGrQUOYHhB9sxjWyQllOwdQQbW5dK8=)
2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:dd:d6:0c:9b:a0:7b:51:b9:4e:f2:2b:72:dd:d4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Oct 15 14:01:05 2026 GMT
Not After : Oct 16 14:01:05 2026 GMT
Subject: CN=93540766a23ba08151ae1f810f27a69fa5cb95a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:ef:61:c3:cd:4c:58:2e:a4:fb:97:c3:58:
93:5b:a4:d8:a6:b1:89:43:62:f2:d5:df:c9:0f:86:
26:23:bf:b9:cf:be:1d:11:4f:6b:cf:0d:98:3e:3e:
2d:65:91:5b:66:08:19:57:80:fe:21:b0:13:a1:7d:
67:33:f6:9f:ff:15:72:2b:be:2d:77:65:7c:15:92:
91:40:72:83:10:36:69:d0:3c:36:97:6a:3b:32:16:
25:f8:4f:41:7e:0d:3d:a6:16:9f:78:9f:ca:93:5b:
81:0a:db:22:3c:ab:d2:ad:98:b9:9c:0b:50:1a:86:
e3:aa:50:56:ba:14:a7:44:14:4d:28:21:9b:32:d0:
ff:b5:10:80:96:20:27:c2:df:d5:eb:47:14:f3:d4:
af:48:a5:7a:8c:4b:d8:98:24:83:2a:6a:65:7b:dc:
48:ad:7b:29:09:de:59:cd:9d:fd:05:c8:31:a4:a9:
cd:86:ac:60:08:45:81:6a:37:42:6e:48:ef:fa:07:
5d:69:6c:9f:95:bf:33:c8:c1:e9:18:3c:85:fb:0a:
db:7e:df:81:a0:3c:b7:0b:87:3b:fa:b3:fa:5a:bb:
e7:a9:e7:cf:e1:08:34:79:68:ce:f3:38:a2:58:00:
d8:b9:66:b8:e0:59:c0:0e:a1:2d:72:90:35:d6:e4:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:07:66:A2:3B:A0:81:51:AE:1F:81:0F:27:A6:9F:A5:CB:95:A1
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:dd:67:6a:bc:14:28:01:c6:6d:24:da:0f:a7:a0:6e:1c:31:
68:4c:40:01:af:bf:d7:2f:92:3e:2e:72:46:30:ba:13:de:43:
21:c5:af:96:7d:00:d3:a3:64:06:8f:90:0a:a1:d5:0b:07:5d:
52:16:f0:07:eb:c3:1d:a5:75:34:a5:a3:89:17:63:e6:ab:dd:
68:cb:1c:8d:78:9c:59:20:bf:ae:91:8d:d3:fc:af:3e:ee:b6:
44:31:54:bb:03:3b:ae:42:8b:e0:f7:65:90:c7:d7:44:14:4f:
f7:8c:77:79:1f:93:22:b4:c1:3a:69:af:ec:aa:f2:29:9a:bb:
9d:9c:e0:a7:8b:88:7a:91:37:50:8e:2b:50:bc:83:f2:e0:e5:
bb:85:8e:22:35:26:1e:69:c8:d6:a1:f1:05:30:5b:24:00:e7:
02:c9:c1:b7:3c:db:dc:89:8d:57:cc:fb:78:b1:cf:e5:54:eb:
c0:22:33:64:4a:c8:50:5e:ae:ca:59:3a:a2:3b:3b:d9:f4:70:
90:2c:00:36:51:f4:bb:4e:a5:3b:6f:37:84:7d:fe:97:55:63:
a0:e7:cd:29:7c:e3:b4:ff:6c:a4:60:77:fb:19:b8:7b:a4:34:
c0:49:d9:60:a1:c2:bc:af:72:2e:c2:06:ce:7a:f5:00:c4:5a:
5e:73:0c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:40:28 2026 by rpki-client