Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
File: ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json)
Hash identifier: T3maU1j2iJ6/zgCKvNYCuo4wNmA3V9RuUh3Vdjgvvi8=
Subject key identifier: 70:B4:A1:65:3A:49:38:A1:17:04:C5:CD:B2:62:68:FC:10:5A:39:04
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial: 01A17BF2B126543C9B6F1E1021E6844E1045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
Manifest number: 0D29
Signing time: Tue 27 Oct 2026 06:01:04 +0000
Manifest this update: Tue 27 Oct 2026 06:01:04 +0000
Manifest next update: Wed 28 Oct 2026 06:01:04 +0000
Files and hashes: 1: b7voUZ91irBy-SIdwQFXM1Mmisg.roa (hash: u5pJ8/7+RE55Lx1+l+Oy8gg74nJnCPyFku6WokUubNU=)
2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: L0HeJEHQATjktkkKg4IUcVP/qysUhEMYWf37pvsUAQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:b1:26:54:3c:9b:6f:1e:10:21:e6:84:4e:10:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Validity
Not Before: Oct 27 06:01:04 2026 GMT
Not After : Oct 28 06:01:04 2026 GMT
Subject: CN=70b4a1653a4938a11704c5cdb26268fc105a3904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:ba:b7:d3:44:95:fa:95:b9:3b:97:ca:48:
3c:95:7c:92:e0:d5:27:46:2d:32:00:aa:26:01:3b:
1d:95:db:b3:6f:3d:b7:b8:36:c2:08:eb:c2:91:ea:
b9:71:8b:fe:6b:01:ed:9a:18:e4:8b:db:6d:f4:fa:
eb:89:e5:02:65:37:26:f4:5f:a9:1f:24:1d:5a:6a:
da:ba:7d:6d:68:ea:48:ba:84:b3:f1:68:2d:e4:c6:
60:79:28:c0:07:84:63:dd:ab:b6:d4:19:c0:f4:3a:
83:3f:67:7a:b9:c9:26:09:48:3e:67:da:45:67:36:
63:13:88:e0:86:c4:70:c0:d4:7e:1f:ca:8f:2b:62:
71:60:8e:1a:b4:d2:ae:2f:37:a9:10:6a:67:ab:04:
61:5a:6f:74:24:b6:88:ee:bb:fa:d6:cd:72:b6:17:
24:d5:5b:4e:fa:26:2e:27:ad:ba:f2:0a:c9:ac:1e:
da:97:f7:1a:46:7d:52:da:85:19:05:08:fa:b4:d6:
8a:56:7b:c1:73:34:84:6a:57:82:04:b6:dd:9a:03:
62:a0:dd:c1:e6:3d:74:d6:dd:cd:c3:1e:7a:4a:7d:
28:1e:0e:e4:28:79:45:49:d6:70:27:1e:71:52:ea:
1f:5b:f5:0e:d0:d6:88:ac:bb:77:7a:88:f7:9c:b1:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B4:A1:65:3A:49:38:A1:17:04:C5:CD:B2:62:68:FC:10:5A:39:04
X509v3 Authority Key Identifier:
keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:43:a5:a4:1f:66:a1:21:19:51:27:d1:75:b5:96:72:93:56:
d1:ac:03:db:5f:d5:71:04:c3:e4:3f:32:ad:5a:bf:4b:6d:ca:
be:59:3f:71:58:f7:6b:9a:bc:01:c3:b1:08:a6:16:a1:7d:c4:
20:72:4f:52:a6:98:a2:5d:8a:14:00:0d:24:b1:20:d4:97:19:
28:4a:d5:c8:30:3f:8c:4f:5e:f1:c3:2a:62:35:db:6a:53:b6:
12:90:67:8a:30:58:14:34:c8:63:39:1e:b0:3f:9d:49:f3:d8:
2a:a9:89:ab:5c:ce:ef:19:6a:94:8e:d6:b8:db:cc:d2:51:b8:
ff:89:37:bc:ba:fd:64:10:62:0d:0e:ec:ca:91:a1:6f:b0:3f:
de:bd:31:ef:33:35:06:a7:c6:cb:a7:4c:36:58:8f:2f:08:fd:
32:11:6e:5c:fb:ea:b5:2c:25:a9:40:54:37:d3:02:15:7b:aa:
b0:ab:94:82:4c:2c:4b:f8:3f:8c:fa:04:e5:4a:4b:97:41:db:
32:ef:d7:91:55:69:8f:ce:e6:f4:28:88:f6:4b:d3:ff:91:39:
4c:8c:ad:0e:f3:94:78:a6:08:65:e1:75:3f:0d:e1:08:76:c6:
1d:72:17:be:b8:d8:e8:05:45:4e:8d:17:fc:77:2a:83:76:35:
07:cd:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:30:24 2026 by rpki-client