Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
File: CKkhe9gwYnyz5lfAuQY8giNN28s.mft (raw, json)
Hash identifier: pNLV9wVHCV4y1+AER5yqpJfvWEfbBub8XZyfaVKRf2U=
Subject key identifier: 14:BC:CE:2C:63:C7:D0:D0:BA:10:84:C4:FA:F0:19:67:51:AE:B6:05
Authority key identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
Certificate issuer: /CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Certificate serial: 01A11974B42D1777317106E893771B1A7E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
Manifest number: 1A95
Signing time: Thu 08 Oct 2026 03:00:40 +0000
Manifest this update: Thu 08 Oct 2026 03:00:40 +0000
Manifest next update: Fri 09 Oct 2026 03:00:40 +0000
Files and hashes: 1: CKkhe9gwYnyz5lfAuQY8giNN28s.crl (hash: SqwUeHsE2myudd0VUnT4dh6jbTmPBXAHsV5ob5GADsY=)
2: r2staIGPnAB2fC8C0axIG4AKOBk.roa (hash: uFZHYgrj8p1JmsefAGSYoXv3EhDU7aOqOew1OyVD1rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:74:b4:2d:17:77:31:71:06:e8:93:77:1b:1a:7e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Validity
Not Before: Oct 8 03:00:40 2026 GMT
Not After : Oct 9 03:00:40 2026 GMT
Subject: CN=14bcce2c63c7d0d0ba1084c4faf0196751aeb605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:50:40:34:44:27:0d:cf:b4:57:a3:72:a5:
a0:5c:bf:7f:8a:ec:d2:e5:9b:d9:86:7b:d5:8b:65:
e8:9f:c3:71:7e:ee:60:3c:da:21:5b:98:92:15:8a:
7b:c7:82:29:58:17:a3:38:3e:45:33:7a:34:6c:2b:
a8:4e:f5:cd:25:a7:e7:34:98:3d:9f:ca:4b:7b:bf:
07:a7:4b:d3:cf:3e:c1:2f:73:86:cd:ac:dd:32:53:
39:47:8c:be:f4:dc:d8:2a:ed:cc:73:03:77:4a:89:
03:f5:f2:99:85:b0:29:bc:87:4d:71:1f:67:ad:a4:
81:91:4d:fa:80:a0:47:ef:3e:a9:94:09:e3:c0:e1:
ad:75:58:e2:84:7e:c0:61:28:36:6b:9a:69:8f:b4:
60:31:53:0a:ff:ba:5f:ad:5a:37:c9:d2:e2:94:cf:
aa:c1:c2:9d:5f:31:c5:be:72:14:b0:83:7f:f9:0d:
22:7c:50:cd:7b:97:34:ac:83:ee:d1:66:c0:72:0a:
1f:2b:e2:81:14:85:44:e5:10:d8:aa:df:77:5e:9f:
31:9e:2d:ec:bd:73:a8:7c:93:dc:c5:10:4f:bf:f4:
00:86:9b:07:60:7c:7c:58:6f:f7:4f:3c:e1:5a:32:
8a:37:03:47:52:40:0c:1d:8b:f9:5f:27:72:87:99:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BC:CE:2C:63:C7:D0:D0:BA:10:84:C4:FA:F0:19:67:51:AE:B6:05
X509v3 Authority Key Identifier:
keyid:08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b0:2d:77:d3:27:16:76:74:68:33:01:e2:3e:1d:1d:d9:f1:
bd:6e:79:c9:3c:6f:60:99:a1:a4:73:61:1f:ad:e6:e0:1c:02:
19:c4:51:f1:b9:c0:a4:70:0a:96:be:05:ff:9a:f4:81:a0:c3:
14:78:df:f0:1d:1e:63:a8:7e:9d:eb:cc:2e:fd:0a:00:27:42:
02:66:4a:25:45:d4:21:4b:aa:b4:70:51:25:f7:5b:c0:a0:0d:
09:9e:4a:f0:c5:4b:88:c2:6f:af:e1:63:14:9e:f3:50:c9:39:
a6:6c:06:d5:b8:1c:84:a9:15:c0:88:17:f2:04:da:a0:60:e5:
b8:5c:a1:48:78:ab:e5:1d:5c:aa:f8:43:2f:f3:54:63:ba:1a:
85:48:f1:7a:40:69:e9:45:9b:0d:1d:82:25:ab:46:9c:d9:b8:
ba:76:60:b9:60:be:cd:f3:f2:d4:b2:3c:d2:9f:1d:52:cd:b1:
c5:b1:f1:d5:14:b9:fb:ce:b8:f7:43:2d:bb:c0:42:d0:75:62:
1d:c8:50:62:73:12:56:2b:c0:cc:51:d3:a5:cc:5a:f5:6d:b6:
fd:f3:f4:56:7e:e7:30:b0:7f:00:11:2a:e1:6d:7c:ae:6c:99:
7a:cb:6f:09:e5:99:51:1d:30:79:4b:3c:fa:42:2b:fc:02:43:
79:e5:26:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:50:45 2026 by rpki-client