Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
File: CKKX-M-hzm0_4sUmkRxGippjGNA.mft (raw, json)
Hash identifier: T7o3BWFKRIDeV3aejDjIMR+cGPeusbcU4kOCvU24daE=
Subject key identifier: 01:94:6F:E1:01:C1:24:EC:35:EF:30:D7:7B:3A:FE:E9:8E:F9:4E:90
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 01A001DCA99A96216AC420E99FDF298E95A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 20:00:33 +0000
Manifest this update: Fri 14 Aug 2026 20:00:33 +0000
Manifest next update: Sat 15 Aug 2026 20:00:33 +0000
Files and hashes: 1: 5dqgcQc20DZK2fFn6bpH-A8uyQ8.roa (hash: eVKJis7Ad9o9z5jyjcFOLQfOP7WhBCGivw8hyFer3JM=)
2: CKKX-M-hzm0_4sUmkRxGippjGNA.crl (hash: hEVF/PMfHVjhVCijGphEPpBIb0ktrxOEfu+IPcJHaRM=)
3: RMuTV-vXrFsXAt5l344yDIEdodg.roa (hash: 4Y7+XsWOTPcRpIgGXMuxA5FSDFIupn4tgYoKEVmPgqU=)
4: UL14P1AhHlUZzAIOnswglPjo1V8.roa (hash: oIVyB68rjWbYMJyZsMbtBMTHDcN1LK+tN3ZZZFRb1s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:a9:9a:96:21:6a:c4:20:e9:9f:df:29:8e:95:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Aug 14 20:00:33 2026 GMT
Not After : Aug 15 20:00:33 2026 GMT
Subject: CN=01946fe101c124ec35ef30d77b3afee98ef94e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:06:ef:10:a2:40:c1:95:f3:44:3a:42:38:
16:7a:16:2c:ae:5f:49:0a:a4:10:81:b8:1e:9a:16:
b1:ac:1d:9b:8c:46:1d:09:60:f6:5d:6b:7a:ad:81:
af:e0:f1:ea:03:00:1e:0c:51:8e:0d:b6:1b:3c:ae:
9c:c4:88:fa:56:61:d8:ba:d8:8a:f1:c6:33:0d:37:
e0:75:0a:58:df:0d:44:79:85:04:df:d6:b1:ca:e3:
0c:6e:81:b2:4c:07:b9:79:0b:bc:24:2f:c0:4f:85:
a4:3b:6c:18:bf:68:b6:01:ff:40:3f:f5:1d:35:38:
06:31:d6:4c:c6:39:c2:f5:b2:31:af:76:a4:e2:fd:
80:11:6d:cd:87:f2:d1:d8:4c:d3:6d:5d:6d:c8:8c:
80:92:2e:ea:47:0e:00:5b:75:9e:34:0a:45:e4:39:
df:f8:b6:66:32:c2:79:0f:6d:3a:1e:1e:30:28:77:
e9:90:ea:6f:11:b9:d8:9b:d7:b2:17:87:e5:ec:42:
77:a1:32:47:22:0a:69:3b:55:38:57:f7:cd:be:12:
f3:8d:12:09:f0:78:14:4c:b3:33:a9:42:cb:08:ce:
29:94:24:fd:f8:08:f4:6a:85:eb:b4:18:25:c4:4f:
f7:da:9d:b1:d8:24:25:a4:93:60:5d:a7:46:6b:c7:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:94:6F:E1:01:C1:24:EC:35:EF:30:D7:7B:3A:FE:E9:8E:F9:4E:90
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:10:9e:4f:07:5e:71:82:02:42:1f:a6:cc:b9:01:22:6d:c1:
ce:e3:85:ee:f6:57:ef:f2:df:93:03:89:c2:c2:df:0d:60:2f:
b2:2a:7d:94:74:e9:5c:be:b9:09:7e:21:7b:73:8d:8a:c4:1b:
d4:6e:2c:4f:aa:7d:56:cd:5e:40:29:7a:b4:80:1a:f3:ec:54:
fa:de:ea:62:d1:a4:59:1f:7d:d4:48:a7:bb:fb:71:a7:fb:71:
d3:fe:e8:be:93:26:bc:56:78:06:4e:17:32:48:2c:82:ed:ac:
fa:78:33:27:a3:f3:76:0b:22:f2:27:b6:94:e6:20:a1:de:7f:
86:ee:0b:fc:34:83:26:49:7b:3a:29:12:5c:8e:28:ab:97:d6:
f2:d1:16:8c:5d:9d:88:bc:c7:21:14:c2:cf:96:1d:7e:12:88:
fe:45:13:5e:08:fd:94:c8:df:07:f2:0f:d1:ca:02:bf:dc:ba:
90:a2:89:b8:50:2f:4c:0a:09:28:12:ed:10:4a:c3:79:2a:83:
67:dc:4d:ee:62:5c:43:25:76:48:17:ca:28:0b:e5:94:6a:d2:
5c:30:c4:2b:81:87:3c:53:40:19:41:ba:07:f8:52:76:30:0a:
d2:d3:d4:d7:7f:eb:d8:a5:43:f5:80:b6:20:82:30:c0:f7:7c:
f1:e7:bb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:08:37 2026 by rpki-client