Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: yFatcN4ZKG8alN2F1vZH25yZ7lNosmlQxlORw77aMnc=
Subject key identifier: CC:C4:0D:74:A3:86:74:4C:04:FD:86:41:56:3A:0C:FA:C3:7B:B1:CC
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 019FA184BF327422D9EC2C743023BFC8E730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 19D6
Signing time: Mon 27 Jul 2026 03:00:59 +0000
Manifest this update: Mon 27 Jul 2026 03:00:59 +0000
Manifest next update: Tue 28 Jul 2026 03:00:59 +0000
Files and hashes: 1: 1WFjwMGMePlEAC8bm7XUOdRFj34.roa (hash: fW2dzpRcyQ80IgEJ6uR/Uw++9kayO/2mr9G7qpsC/1w=)
2: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: 5OK53nztO6ywVG7QIYlRtj+294ekK+B1PPGFcl7wuPA=)
3: Z0Yd5ryo6CVHolrVfgTJW3VNRio.roa (hash: qAoF6R0Ct6kB3sTz/3lrppb3yX+381mHA9jGPvlKM8Y=)
4: rHFkeLh05qkzhm3XqYX2jCr6Jwc.roa (hash: rLIRPVEJIS1dHp/fkMSEkxmJ0YQCqnoXU1iytE3RgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:bf:32:74:22:d9:ec:2c:74:30:23:bf:c8:e7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Jul 27 03:00:59 2026 GMT
Not After : Jul 28 03:00:59 2026 GMT
Subject: CN=ccc40d74a386744c04fd8641563a0cfac37bb1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:e5:8b:91:4e:4b:25:37:8d:6b:14:bf:4b:
f8:1e:8e:08:2c:29:9f:03:76:8c:ce:50:6f:3b:ff:
ab:2d:90:d4:c2:bc:f6:ee:3c:e4:59:bd:af:30:fa:
8c:a5:20:33:ea:98:07:3b:a8:e4:f0:db:e1:11:30:
b6:40:7e:dc:b9:e6:f5:46:79:04:24:26:f1:ae:80:
fb:e4:82:2c:ae:a8:14:d3:59:5d:7b:3e:0e:e6:1e:
c0:69:c2:0d:69:9a:ea:f6:a0:9b:04:4f:fa:e4:45:
f0:e2:3d:92:c0:52:7a:24:42:38:04:6d:96:a8:31:
56:87:cc:9e:96:e1:2e:78:02:f4:fe:e4:a6:e5:81:
aa:48:70:2e:4b:a0:ac:59:9d:40:fd:cb:b4:92:55:
bb:53:a9:35:38:d1:e3:c5:30:35:9a:b6:c0:b1:24:
8d:4a:b5:74:ad:33:f4:4c:f4:10:6d:41:64:dc:70:
1c:a6:eb:6c:d3:cb:a8:e2:b0:53:0d:61:a1:c1:ea:
12:03:82:ae:93:44:54:56:fd:4b:48:27:41:bb:55:
04:09:f9:47:10:7e:d6:5a:14:9b:41:20:1f:41:23:
06:40:d4:5e:96:1f:01:7a:6e:d5:df:e7:2d:97:4e:
ab:ba:ed:e9:ee:73:d3:45:11:1d:64:0f:c8:7e:15:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C4:0D:74:A3:86:74:4C:04:FD:86:41:56:3A:0C:FA:C3:7B:B1:CC
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b1:22:f4:f4:34:fb:5a:a5:9c:9c:f3:d1:c3:e4:96:97:e6:
5f:a8:88:98:f1:fc:41:5b:52:66:c8:25:7d:48:17:22:88:50:
9d:f5:dd:62:67:50:43:3a:91:e7:fd:96:8c:5a:d6:85:30:70:
33:d8:cd:03:be:75:a8:ea:50:82:88:f8:57:2a:25:be:f1:1c:
25:0b:de:ea:b4:53:dd:42:58:44:cd:75:65:ac:fe:3b:9e:de:
61:3e:d9:18:86:d6:bd:81:76:8e:39:58:71:bd:a4:39:df:df:
b6:fc:3f:fb:c6:a4:29:d1:95:4d:dc:a4:52:fb:e5:7f:1f:8c:
d1:a1:71:c8:c7:82:0b:db:fd:a8:ce:31:be:7b:38:c9:cc:04:
7c:d2:23:9c:8e:3a:20:6d:cc:2d:69:55:bc:95:a3:7a:2c:bc:
aa:b5:4e:ed:6f:b3:3b:4d:97:eb:75:c3:59:f9:54:dc:ef:16:
8f:e9:9d:f4:a5:d9:17:c4:8a:bc:99:8e:7a:92:3d:d6:3a:0d:
ea:20:1e:f4:89:04:03:a1:67:ba:0a:4d:d3:e9:79:89:c1:f8:
c1:59:0e:5c:bc:64:7b:c0:26:5c:09:68:b1:87:d4:ba:ef:82:
35:ea:02:e0:cf:51:e5:3a:d1:64:cc:9e:20:85:6d:56:98:f7:
b5:eb:86:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:23 2026 by rpki-client