Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: +pfu/88j1wSzwhiFkuQjqKKz05B533K+0MsNbe6Ywxo=
Subject key identifier: 2F:62:7D:26:44:4A:77:0D:06:06:BE:74:9B:E7:7D:E3:ED:72:A0:23
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 019F13413145ABF47B79B775BF9349BDC9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 12:01:07 +0000
Manifest this update: Mon 29 Jun 2026 12:01:07 +0000
Manifest next update: Tue 30 Jun 2026 12:01:07 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: T06qWFzL48VLjldkl155tEhjzECUjw6gdHwX1iYd+24=)
2: LfBxCi_T6d0bglwaFaNfqmxOUo8.roa (hash: nCJqjZS1Ks0JHWJEQU7QcXEZQwSVxL2fqIOkUlaTeGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:41:31:45:ab:f4:7b:79:b7:75:bf:93:49:bd:c9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Jun 29 12:01:07 2026 GMT
Not After : Jun 30 12:01:07 2026 GMT
Subject: CN=2f627d26444a770d0606be749be77de3ed72a023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:6a:75:fd:85:9c:bb:70:98:6a:9b:bf:45:
40:1c:b3:f6:81:c5:f5:64:d1:86:af:2d:11:4a:19:
57:24:6b:3d:75:0e:26:5a:e5:9b:72:eb:08:50:e3:
14:e1:23:f8:d2:93:dd:e7:87:6d:c1:9e:53:a8:44:
e7:9c:dd:27:df:3a:bf:59:04:60:03:cf:87:73:44:
7d:03:e8:fe:e9:fd:bf:48:dc:70:ea:49:2b:b0:32:
6c:7d:90:93:87:75:1e:7c:f6:07:e5:74:f8:e4:d9:
1b:8d:89:08:b6:41:d8:51:df:c4:04:5b:a9:ab:ba:
2d:0a:ea:28:83:85:bf:13:1e:ba:b0:5a:e5:04:33:
27:ff:47:cc:23:e1:2a:69:34:7b:2f:6e:08:99:a2:
82:ab:3a:34:ba:a8:7e:ac:c4:94:fc:1d:9b:da:73:
71:25:fe:ce:ad:79:c0:f8:8e:6e:a6:93:ff:b3:f9:
5c:19:fe:2c:ab:ae:91:f3:d7:ab:cb:57:48:19:36:
5b:ca:e5:be:01:84:e4:40:5b:84:cf:56:8e:f9:98:
da:c7:df:b7:a7:34:bf:15:07:f4:92:97:11:b4:a5:
b5:b5:79:72:b7:d9:28:9a:89:f1:69:8d:2f:f0:c7:
4a:24:17:e4:46:87:c8:21:d9:80:02:e1:10:9d:cd:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:62:7D:26:44:4A:77:0D:06:06:BE:74:9B:E7:7D:E3:ED:72:A0:23
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:38:26:e3:dc:ae:40:82:b6:12:b6:a3:0b:50:b9:d8:02:2e:
b5:37:98:78:83:11:75:7a:f0:b8:a0:5e:d3:9e:ef:f9:dc:69:
90:a5:53:9a:b6:96:ae:65:7d:b5:f6:62:38:ec:f6:92:8d:2c:
31:d2:87:a4:6e:99:d0:8a:06:2b:ee:03:f7:09:3f:98:0c:21:
5e:12:28:19:17:18:b0:f2:71:d3:cb:21:f0:73:c5:dc:58:49:
4c:24:1e:3c:34:5c:7c:59:22:86:d3:4a:af:c0:5b:b8:d9:f1:
6d:e7:e4:bb:a8:42:59:06:9b:96:10:8b:86:b3:72:10:79:0d:
39:9b:9e:91:5c:7f:d2:59:ff:e2:8a:1a:1c:c2:4b:b1:c2:39:
f8:c2:17:14:74:bf:66:6c:30:1e:f5:bc:e5:de:fb:0e:a7:ae:
3d:96:4b:4e:05:71:ed:04:fd:80:92:5d:74:93:e0:ed:56:82:
d0:d7:c3:ce:26:9c:42:02:ec:03:79:ae:a2:8a:ae:89:e8:fd:
46:f0:06:ed:3e:ca:be:4a:be:29:2b:a7:ca:d9:21:7c:61:ca:
f7:f6:dd:8b:6f:0b:85:37:b6:61:0a:55:b8:52:10:6c:cd:7a:
b4:4c:6a:3e:ec:6c:49:04:9b:8a:74:4b:c2:7e:b6:64:3c:46:
a3:7c:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 20:25:47 2026 by rpki-client