Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: ux4+tFkMe3RL2+6EM08YhkpfDvN8tn7r3Vn6sCp88/A=
Subject key identifier: 41:B0:07:C8:F8:40:B3:67:DE:59:71:93:81:CD:F6:3B:58:CF:E7:51
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 01A00137F52E8E8C804E6BC861D6765E062B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 1A09
Signing time: Fri 14 Aug 2026 17:00:39 +0000
Manifest this update: Fri 14 Aug 2026 17:00:39 +0000
Manifest next update: Sat 15 Aug 2026 17:00:39 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: blkuxFhLimJbpHWgJfxRbOO+7kmYcboOtLtQrmA5Lgs=)
2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:37:f5:2e:8e:8c:80:4e:6b:c8:61:d6:76:5e:06:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Aug 14 17:00:39 2026 GMT
Not After : Aug 15 17:00:39 2026 GMT
Subject: CN=41b007c8f840b367de59719381cdf63b58cfe751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:ac:27:8d:99:2d:00:f0:5e:9c:5e:d8:cc:
59:d2:1d:ba:0f:64:f3:e6:12:98:fd:e3:f4:1d:6a:
48:11:62:74:a7:80:3c:43:d8:fe:1a:b1:80:a8:20:
49:77:23:cc:3c:25:bd:33:d4:3d:05:d8:1a:de:6f:
14:20:ec:0e:63:5c:31:f8:fc:11:82:61:0e:36:57:
6c:93:41:76:3b:46:1f:95:06:31:1b:82:c4:37:f9:
95:8a:d3:f8:8a:66:0a:da:54:19:83:e1:49:92:df:
25:35:f3:af:c5:65:f1:a8:fd:12:55:4c:70:1c:53:
68:8a:64:7a:dc:24:1b:a7:c9:d8:5c:1a:4d:c5:30:
2f:f9:a6:a3:ad:08:96:c4:f7:5a:b8:1c:07:a7:2d:
c5:66:d3:21:8b:ae:c3:02:36:05:e3:ff:bd:1a:63:
e9:56:f0:91:bc:af:43:f9:1e:05:b8:30:1e:e1:c9:
35:41:51:28:b5:cd:cd:31:a1:ea:ed:3a:8d:62:6a:
cd:3b:21:7c:6e:51:67:50:41:41:36:aa:90:99:f0:
eb:e1:25:f1:ca:83:70:98:15:f7:a8:25:6d:e3:6e:
3f:94:3b:f9:36:6f:f2:3a:9c:fc:71:33:0f:fa:82:
3a:9c:8f:35:de:a6:0b:f9:80:5a:20:0e:74:a7:66:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B0:07:C8:F8:40:B3:67:DE:59:71:93:81:CD:F6:3B:58:CF:E7:51
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f8:9c:05:6b:8c:33:38:b0:3d:9f:11:1f:5b:54:30:0b:f6:
b0:4d:92:b1:92:be:9f:db:b8:a7:d9:56:7a:89:59:39:bd:ff:
26:03:5f:f0:7f:d4:e2:5b:05:04:de:b7:0a:2f:10:40:77:0c:
0f:04:99:64:1a:88:f6:ad:45:da:3b:e7:19:87:c6:1c:5b:d9:
8b:db:43:16:8d:c0:95:7a:b0:bf:b8:8d:61:d4:a6:17:39:82:
fc:72:5e:6b:29:5a:76:24:dd:43:0a:25:6b:b0:6c:41:96:39:
38:6a:2e:f7:e6:c1:a8:5e:38:04:bd:03:d0:ed:1e:1b:bc:89:
e5:eb:8f:9c:be:16:7d:11:b6:a7:59:f5:ea:5c:08:ac:5c:45:
75:30:9e:fd:83:8a:eb:02:53:c5:6a:c9:0b:a3:46:73:1a:5b:
80:a5:89:17:3d:cf:b4:33:d0:f0:48:ef:b6:d1:cc:ec:39:ad:
c1:c2:01:f3:92:8d:30:e6:5e:ee:16:75:8b:73:57:e4:6a:58:
3c:18:b0:9a:60:04:be:4c:cc:98:c4:94:72:51:df:d1:bd:75:
94:19:be:c6:bd:de:97:ea:aa:c0:78:04:93:26:d1:47:5e:51:
13:67:23:07:c8:ad:5d:a2:a1:65:ec:07:62:f5:0a:8f:78:72:
d0:76:61:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:31:14 2026 by rpki-client