Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: /bdjuZRmQapYILfMRDcGyIz3dOaZkqSKQElJzH0KQqI=
Subject key identifier: E0:3A:8D:F0:EA:CC:DF:F1:F2:B1:12:66:53:4E:1F:83:30:44:EC:2B
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 019D389C536D76396D7D6F1262182155CCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: BWsQQ/EVZoznEp2lFUCnXMGe2yQfWZEtfcXpEMlkXK4=)
2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:53:6d:76:39:6d:7d:6f:12:62:18:21:55:cc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=e03a8df0eaccdff1f2b11266534e1f833044ec2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:be:0c:d4:7f:7e:e4:75:22:8d:bd:79:76:
95:63:64:23:3e:d0:96:a0:80:89:61:3c:48:db:c4:
9c:1b:44:65:a6:11:f0:c1:75:d6:f4:22:6b:72:86:
e9:f2:a5:c6:4a:7a:50:2a:bb:ee:0c:f8:41:62:5a:
74:32:bc:4e:ec:f5:b1:0b:6b:d6:77:6b:8c:7d:c9:
58:d6:5d:2e:f7:3a:eb:bb:2b:22:80:a2:54:c7:64:
ab:9c:78:8b:20:9c:ba:bf:bb:41:7b:ad:87:65:db:
15:c5:85:ce:59:02:af:ac:cc:8d:67:ea:74:8c:85:
c6:c3:b8:bf:66:05:ec:de:6b:2f:1b:5c:53:9b:96:
35:3c:76:e3:9a:77:a1:e1:a1:62:d1:22:b0:70:de:
ad:d3:4d:2d:c0:76:04:fd:4d:82:02:70:93:3d:05:
36:2d:bc:ba:77:77:49:f4:46:bb:e1:ec:cb:81:58:
a5:bb:4e:77:31:2f:b3:a8:e7:2b:3c:35:5a:ea:5d:
fc:21:b7:a5:54:36:51:aa:1c:90:b0:c5:5d:90:1c:
4f:df:72:69:7b:90:99:5b:76:f0:5a:25:85:a7:13:
83:de:81:4a:fc:6a:13:02:9f:03:47:f5:12:66:48:
4e:ae:ea:a2:9f:80:db:ad:b7:41:be:49:81:05:84:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3A:8D:F0:EA:CC:DF:F1:F2:B1:12:66:53:4E:1F:83:30:44:EC:2B
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:21:6d:17:e0:87:38:04:2b:d2:bd:31:87:0d:67:7d:8f:10:
52:25:2d:3d:8b:32:0c:2b:03:d4:60:4f:12:e7:21:c6:1f:5d:
1d:d5:6d:67:76:7f:84:24:67:09:ec:b7:9d:53:9c:b5:d3:42:
5c:42:39:db:2a:3b:87:93:83:fd:9d:c5:4e:86:24:5f:6b:d9:
9c:34:0d:02:ee:d8:73:42:5c:8f:f3:e5:bc:87:ea:3f:47:33:
87:dd:12:3b:5e:a9:40:f9:a8:1d:e3:85:f3:50:01:86:45:4e:
82:b5:85:62:30:62:57:4e:d2:b0:a2:44:ea:90:24:8a:9a:51:
e9:d8:b0:13:9d:b8:77:0d:4e:a4:40:6d:40:bb:9b:54:4f:ad:
39:0c:09:1b:a2:18:10:ed:26:f7:34:66:f6:2b:38:c6:e0:ad:
ac:4b:89:8b:45:dc:26:0d:40:7e:ac:18:84:68:77:93:c9:3e:
4e:ef:6a:99:a9:e0:08:c7:d5:59:38:b3:2f:8f:12:8d:e1:3c:
d5:85:98:87:35:52:41:cc:3b:f7:f1:3f:ea:b5:ff:f8:d9:70:
44:a5:f8:86:d8:10:56:25:cd:c3:1a:3c:92:51:93:79:bf:30:
29:56:ae:ac:56:e7:94:ae:8d:53:4b:51:d3:63:eb:0d:f4:24:
0e:2a:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:13 2026 by rpki-client