Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
File: CKKX-M-hzm0_4sUmkRxGippjGNA.mft (raw, json)
Hash identifier: D/TmZcl8TH9x4m70dVAb7TwVa6UJrMqDlDITA4TubIk=
Subject key identifier: 51:E3:B1:0E:28:07:55:D2:24:A3:D7:32:A2:CF:F4:4A:E0:21:42:32
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 019E307257B51C9952B16E262F06A5ACD6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 11:01:00 +0000
Manifest this update: Sat 16 May 2026 11:01:00 +0000
Manifest next update: Sun 17 May 2026 11:01:00 +0000
Files and hashes: 1: 5dqgcQc20DZK2fFn6bpH-A8uyQ8.roa (hash: eVKJis7Ad9o9z5jyjcFOLQfOP7WhBCGivw8hyFer3JM=)
2: CKKX-M-hzm0_4sUmkRxGippjGNA.crl (hash: /IDLazzfYSw1hGNTDjgV7HGFsyLWnGlVrn0xY2ERA7I=)
3: RMuTV-vXrFsXAt5l344yDIEdodg.roa (hash: 4Y7+XsWOTPcRpIgGXMuxA5FSDFIupn4tgYoKEVmPgqU=)
4: UL14P1AhHlUZzAIOnswglPjo1V8.roa (hash: oIVyB68rjWbYMJyZsMbtBMTHDcN1LK+tN3ZZZFRb1s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:57:b5:1c:99:52:b1:6e:26:2f:06:a5:ac:d6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: May 16 11:01:00 2026 GMT
Not After : May 17 11:01:00 2026 GMT
Subject: CN=51e3b10e280755d224a3d732a2cff44ae0214232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:4a:d3:bd:af:a1:0b:37:90:dc:52:4e:f7:
3d:1b:e7:2f:5f:c3:5b:25:1f:38:98:70:0a:c0:ac:
8f:9d:ea:69:56:af:e3:91:d1:e1:48:d8:ce:84:f0:
17:d2:a1:30:cb:ab:a6:8f:ea:8e:87:77:0a:1d:2c:
26:65:ec:d6:30:2b:6f:c8:1b:7f:45:c3:a5:2e:03:
46:01:e5:0b:be:00:6c:2b:58:44:f4:11:ae:39:90:
9b:04:a8:85:ef:0e:b7:fb:79:5b:40:4b:ed:3b:f1:
8b:51:71:9d:f6:60:f4:44:95:bf:42:2b:bb:33:8e:
88:fc:67:25:dc:9d:aa:27:d3:85:dd:e4:37:b5:40:
fb:91:43:0b:20:6f:12:82:19:c7:2a:5c:4e:e2:1f:
9f:ae:14:12:22:da:f9:b9:b4:3b:cc:76:ec:1c:4d:
e2:53:7d:4e:cb:0a:b4:d8:bf:01:aa:bd:3a:2c:b7:
c6:e9:d8:1b:f1:c7:ba:4f:49:fe:58:ab:d2:e4:96:
bd:36:e8:5a:fa:b7:ee:a5:1f:2e:fb:9a:ca:27:0b:
4d:fe:18:04:a7:a2:2e:bd:db:20:52:74:61:b9:82:
cf:10:e0:16:78:69:58:ed:fc:44:70:45:fd:92:4b:
63:f2:97:76:9c:e3:64:46:84:c0:2f:b5:b0:41:88:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E3:B1:0E:28:07:55:D2:24:A3:D7:32:A2:CF:F4:4A:E0:21:42:32
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:db:3e:23:ab:56:c9:1f:eb:7d:73:bd:ae:f8:2c:f9:27:6f:
f7:ab:a3:15:20:54:aa:a9:13:ac:1b:f8:42:72:1c:34:79:3c:
a5:60:b6:92:b1:d8:0b:da:19:16:e1:22:32:e5:d9:e1:fd:0b:
b7:2b:6c:e5:4e:87:66:d8:cb:03:08:8c:8e:6e:db:f9:1c:4a:
a7:48:3a:46:f2:77:39:14:47:1f:c0:0f:3e:6c:75:af:09:b7:
9c:8f:d6:57:d6:5c:3e:3e:d2:d1:68:ec:0a:50:77:9c:2b:c6:
c9:59:b8:9b:bf:f8:36:32:d0:12:4d:1b:98:9c:7e:b2:74:54:
90:02:f1:e2:95:0e:27:34:d6:bb:0d:c6:38:30:92:c0:bf:ee:
22:0d:78:45:cc:92:be:ba:b8:3a:ec:5d:82:44:33:29:13:64:
cd:33:65:d5:0a:ab:36:b2:3c:c2:2e:01:de:03:c1:41:45:5d:
ed:66:d3:e8:03:22:0f:61:5f:97:c6:3c:e9:f4:6b:af:bf:5f:
a7:0f:da:63:61:9d:5a:99:6d:51:d9:12:75:13:51:52:a8:12:
0d:6c:92:6c:2c:25:fd:6b:3c:46:40:30:65:8b:17:d0:b7:37:
65:86:43:e7:7e:21:77:f3:d2:18:7d:3b:33:1e:b3:e8:43:ae:
64:90:15:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:56 2026 by rpki-client