Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft
File: ckaDTR5JovonRtw_ZtcMItUPRvk.mft (raw, json)
Hash identifier: XyKCd7rtRHMjBow6lEWjlaf9p3loxVRjzIbfeOxeXuI=
Subject key identifier: 27:CA:95:32:63:79:06:EB:FB:81:A9:10:3D:49:8F:EF:AA:57:E0:4B
Authority key identifier: 72:46:83:4D:1E:49:A2:FA:27:46:DC:3F:66:D7:0C:22:D5:0F:46:F9
Certificate issuer: /CN=7246834d1e49a2fa2746dc3f66d70c22d50f46f9
Certificate serial: 019D389C09A6944AE3CE95CDBBC42200D45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft
Manifest number: 0180
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: D0YVmo9mr1QCrJsZ4C4hDCzezLM.roa (hash: UdjfDamS4qs4bhJckWQ8N8fInzYyEcckWpGaP0ttl4k=)
2: ckaDTR5JovonRtw_ZtcMItUPRvk.crl (hash: 7DbKr5rY1abwyTgmxLKzp2Oy50qaPGcVRUdFoqMs3Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:09:a6:94:4a:e3:ce:95:cd:bb:c4:22:00:d4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7246834d1e49a2fa2746dc3f66d70c22d50f46f9
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=27ca9532637906ebfb81a9103d498fefaa57e04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:90:a4:f3:76:e6:61:be:01:8b:22:cb:b6:
ea:50:82:63:1c:4c:01:7d:7d:55:00:fd:77:b3:2d:
f3:85:a5:54:d7:c6:40:f9:25:b8:4d:60:bc:92:26:
ee:a5:24:4a:73:1b:f5:10:46:55:bb:3f:0a:e6:a3:
e2:72:64:23:76:f3:19:cc:77:28:a9:6b:66:48:fa:
81:d8:87:aa:35:fc:14:5f:a0:76:cd:91:29:15:a0:
39:e5:e9:df:72:de:e7:f8:6a:97:ef:a6:a3:69:6d:
ad:77:8f:3c:1a:f5:6a:0b:85:55:2e:de:00:d6:15:
fb:2f:0c:2c:1d:05:a1:50:fd:43:4f:5d:da:a4:76:
0b:88:a0:e3:1c:2c:80:f1:1d:59:00:db:c1:53:cf:
56:36:ea:d7:5d:90:a9:ad:22:51:a6:83:89:d6:2f:
04:b7:a9:f0:6e:8c:95:fb:09:db:b9:3a:29:63:77:
8c:3a:96:d5:f5:59:dd:2a:3e:d0:02:31:9d:70:b0:
62:81:87:9e:0c:a1:60:70:fb:eb:a4:5e:af:fe:e2:
56:19:ce:9f:7a:08:27:c5:d2:9f:e3:61:fd:be:ef:
ba:74:fb:7b:ea:c0:d6:9e:b9:ab:94:3b:7d:7b:17:
93:53:c7:78:d9:0e:ae:ed:ea:14:78:bb:48:cf:fb:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CA:95:32:63:79:06:EB:FB:81:A9:10:3D:49:8F:EF:AA:57:E0:4B
X509v3 Authority Key Identifier:
keyid:72:46:83:4D:1E:49:A2:FA:27:46:DC:3F:66:D7:0C:22:D5:0F:46:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9b:ce:51:c9:b0:ad:e3:03:40:3d:5a:b8:93:0d:e2:7e:04:
4d:9b:c2:bc:0c:cf:f2:f2:eb:4d:c1:b0:f6:d1:19:89:3f:ed:
0b:40:bf:11:c4:7b:a3:a7:c7:01:5b:4b:73:94:14:92:46:c7:
d7:d8:63:cb:e3:78:7a:8a:69:21:a6:f0:70:25:19:ac:e7:78:
db:f7:62:6b:80:1e:52:e7:48:b8:c8:81:63:74:8f:4d:44:c6:
20:1a:e7:8d:eb:7e:86:d8:54:fb:bf:fb:07:d1:65:c5:97:4b:
e2:82:c9:9b:26:48:3a:08:b7:89:e3:0b:5c:9c:03:38:9c:f6:
10:94:44:fd:95:f8:73:c0:7c:fd:47:2e:70:4d:33:ce:28:57:
2a:13:d4:b1:f3:6d:3c:84:0d:4b:8c:df:47:b0:c9:ce:ce:31:
2c:7f:84:a4:8e:67:14:ad:7f:1f:d9:f5:78:d2:ee:ab:2d:b8:
d5:a1:29:c1:6b:f7:e4:09:cc:27:11:4b:6f:fb:47:a3:b8:66:
aa:95:e7:77:f9:ff:2a:98:6c:d1:a8:7c:90:af:0e:06:39:0d:
a3:42:62:d5:85:ec:78:67:10:7b:47:ec:ca:37:1a:3c:bd:06:
fd:e3:04:cc:8b:5a:ba:fa:7d:12:05:dd:ba:c3:69:85:a8:20:
72:2c:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:08 2026 by rpki-client