Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
File: CKkhe9gwYnyz5lfAuQY8giNN28s.mft (raw, json)
Hash identifier: RXfX5Tn25V0I5Zj5jLqXzFWB8euh3ssi0oVoqDGicdg=
Subject key identifier: B5:18:F4:3A:EB:A1:A2:CB:96:8B:EF:E2:E8:0F:32:04:69:D8:7D:43
Authority key identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
Certificate issuer: /CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Certificate serial: 01A0016F9542AF7C39DDE4690A86DBD3ED13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 18:01:24 +0000
Manifest this update: Fri 14 Aug 2026 18:01:24 +0000
Manifest next update: Sat 15 Aug 2026 18:01:24 +0000
Files and hashes: 1: CKkhe9gwYnyz5lfAuQY8giNN28s.crl (hash: k1lAAjnduxv37hY4BU7D3W/L+Fq1o+ueiTjEr7wvoqU=)
2: r2staIGPnAB2fC8C0axIG4AKOBk.roa (hash: uFZHYgrj8p1JmsefAGSYoXv3EhDU7aOqOew1OyVD1rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:95:42:af:7c:39:dd:e4:69:0a:86:db:d3:ed:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Validity
Not Before: Aug 14 18:01:24 2026 GMT
Not After : Aug 15 18:01:24 2026 GMT
Subject: CN=b518f43aeba1a2cb968befe2e80f320469d87d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c8:bc:d4:ec:3b:b1:3b:34:53:17:70:f9:e5:
02:ba:db:d3:75:c2:ac:54:b3:21:08:46:0d:70:1d:
12:72:67:db:7e:b5:6c:a8:55:bc:e9:b5:09:bd:16:
c7:79:b6:f4:89:50:ef:c3:83:3f:0f:63:31:9e:d5:
a0:23:a2:ce:4b:dc:08:e3:de:6c:cd:6d:be:68:06:
6f:01:13:91:3c:82:45:b4:d3:9d:bc:36:c3:d4:7d:
d2:85:d3:16:22:75:92:01:9a:67:c8:d3:c4:fa:3a:
67:be:12:a5:c7:0e:fb:c1:bb:5c:0a:22:f7:29:9e:
b7:28:9f:89:85:11:0e:fd:2e:d5:56:6c:94:39:8d:
9d:fa:97:fc:c2:f7:5c:a9:eb:3d:a7:3f:fc:0a:43:
1a:07:f0:f9:37:1f:56:34:78:d9:20:00:7f:68:90:
1c:d4:79:cb:d7:7b:f2:5e:96:f5:f4:96:8a:bf:a0:
ff:7d:21:ad:8e:cb:be:bd:8f:57:9a:b9:41:f5:45:
15:12:38:6b:49:21:75:fd:01:0e:56:e9:45:2a:f8:
5f:1f:fe:71:4a:a0:39:6b:ab:c9:37:b6:a8:66:fa:
20:f7:fa:a7:c8:e7:60:ed:cf:a7:f2:e5:e6:6d:4b:
7d:9b:63:1f:a3:84:c0:60:14:ea:8d:bd:49:b3:2f:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:18:F4:3A:EB:A1:A2:CB:96:8B:EF:E2:E8:0F:32:04:69:D8:7D:43
X509v3 Authority Key Identifier:
keyid:08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:49:45:70:e3:63:de:1d:a9:d9:e3:22:f0:0a:89:26:30:82:
2f:84:11:86:46:2c:23:c1:df:15:cc:a8:ed:1c:f1:a0:c0:59:
f6:51:e6:76:9d:7f:36:c8:21:ef:61:fc:0a:0b:ff:00:46:84:
a1:ac:8c:85:3d:1a:68:e3:72:b6:f2:b0:c9:e3:98:c6:73:7f:
65:ef:d9:20:2a:ee:7b:96:c3:b5:3f:90:6c:c8:b8:16:c3:51:
03:2b:e4:20:79:b1:74:11:e9:6d:81:a6:3a:7b:07:e6:4d:5b:
8f:80:4b:46:90:26:69:07:2f:17:1f:14:80:49:ad:e0:78:13:
2a:4a:58:35:6c:a2:8e:8d:76:b6:c5:d6:17:d5:22:c2:b5:41:
dd:be:1d:80:4c:ed:f0:cd:eb:e4:55:f2:e4:08:72:7f:ca:e1:
65:ef:6f:e4:a7:e9:43:9f:6e:9d:73:d1:1b:8e:54:fd:e1:50:
7e:e9:90:38:4d:aa:37:88:7b:a3:ac:32:db:bd:34:56:10:6c:
04:7b:83:6b:93:17:da:b8:dd:58:05:79:1c:1f:83:42:c9:24:
04:82:65:a7:0a:8d:11:37:cc:a6:62:f5:bb:e1:a5:cf:25:64:
f8:c7:b6:9c:9e:9c:25:ea:41:65:1b:19:ef:0a:30:8d:0e:2b:
25:a2:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:14 2026 by rpki-client