Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: +AYvMIm1hsqysZnMyoqM6HASMKG0oiNmbgr3OtBlC34=
Subject key identifier: BB:E5:DB:70:CA:BB:22:09:DC:85:1D:CE:A9:6B:3F:57:A7:80:09:3B
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 01A1852CDC4AEA80C83006A286FDB789B923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 1AD1
Signing time: Thu 29 Oct 2026 01:01:11 +0000
Manifest this update: Thu 29 Oct 2026 01:01:11 +0000
Manifest next update: Fri 30 Oct 2026 01:01:11 +0000
Files and hashes: 1: 1WFjwMGMePlEAC8bm7XUOdRFj34.roa (hash: fW2dzpRcyQ80IgEJ6uR/Uw++9kayO/2mr9G7qpsC/1w=)
2: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: XFIkGE/2f3aRRVi7lBYFerBjPVcyDfMRBYP07pBJaP8=)
3: TImJJUhHSPbQkRUq3GD4PoxkHbQ.roa (hash: 8czZJ0iGrV8f7eo8Glrc6/FdpLKC2UfW5wYgtnaT0dA=)
4: rHFkeLh05qkzhm3XqYX2jCr6Jwc.roa (hash: rLIRPVEJIS1dHp/fkMSEkxmJ0YQCqnoXU1iytE3RgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:2c:dc:4a:ea:80:c8:30:06:a2:86:fd:b7:89:b9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Oct 29 01:01:11 2026 GMT
Not After : Oct 30 01:01:11 2026 GMT
Subject: CN=bbe5db70cabb2209dc851dcea96b3f57a780093b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:c7:9f:70:b6:c9:5b:e0:f9:dc:03:bc:3b:
42:00:b1:da:65:d4:0e:83:2e:f6:92:4a:c8:9b:47:
95:f1:2f:e6:9f:ee:52:d1:86:c2:4f:3f:a2:ab:a1:
07:ac:37:1b:2c:1c:36:93:f5:a8:29:24:77:86:af:
13:6e:c7:4e:a7:12:25:49:1d:f7:00:0c:98:81:8d:
3b:6c:a9:f7:47:7d:06:bd:35:0e:06:58:c6:16:a8:
a1:1c:2f:81:1f:81:32:23:33:b6:9d:ad:d1:9b:7d:
93:00:79:2b:2e:1d:a4:e5:ad:f1:99:ee:f9:d0:d1:
4f:65:f5:07:e6:b4:4a:a4:d4:11:36:98:9e:4a:b6:
24:c0:21:f7:c8:88:1f:f5:89:50:18:92:76:73:5b:
51:04:fa:c9:fb:ba:9e:88:37:04:02:55:40:d5:0b:
bf:ae:cb:e9:5c:18:0d:89:54:d3:bd:97:46:00:41:
d5:a2:fb:4c:54:fb:f7:1a:b0:63:22:6c:01:b6:24:
22:5a:9b:d4:bf:ff:28:27:03:18:ed:b9:20:d9:bc:
a6:7f:3b:76:32:27:6b:f9:13:35:ac:a9:5c:11:18:
c0:52:e5:5d:ec:db:f4:95:80:a7:67:3d:81:f1:92:
28:f1:c8:eb:6c:02:99:42:07:54:3f:71:f5:1f:00:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E5:DB:70:CA:BB:22:09:DC:85:1D:CE:A9:6B:3F:57:A7:80:09:3B
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:02:3f:a7:a7:86:39:fc:27:04:70:d0:c2:80:9e:fa:c1:b1:
08:01:9b:04:bd:6f:a4:ed:d0:06:92:c3:e9:99:6d:72:ce:ea:
b6:7d:6e:f3:35:68:56:c2:81:dd:21:7c:1a:d6:46:88:37:d4:
30:6d:d1:e5:ca:64:9c:0f:77:f1:89:49:d7:b7:f3:6c:93:32:
29:15:ec:fa:68:c2:cc:53:32:5b:17:7b:4b:58:b8:66:28:e9:
f5:91:70:ec:1f:b3:5c:3a:1d:5c:22:8a:8b:e0:5c:98:39:cb:
19:01:8e:df:e5:d3:29:e6:9a:bd:02:c3:94:b9:85:9c:f5:b6:
ae:6e:71:6b:82:86:9f:85:9e:3f:0b:f7:37:b9:d2:8c:3a:2c:
6c:9e:6a:a5:7a:62:56:1b:60:18:44:1d:82:c6:3d:04:6a:77:
5f:cf:07:d4:88:79:86:c7:ff:11:83:09:f8:6a:1b:96:88:f6:
7f:a3:2b:1a:3c:d9:67:21:a2:8b:ae:e5:47:df:be:99:bc:61:
a0:63:d0:7a:c1:fd:2e:d5:8e:5f:ec:c9:28:c4:fd:27:cc:a5:
6f:20:76:44:73:d3:e7:89:56:09:30:c2:bf:12:28:ed:6f:d1:
6e:9a:26:3e:35:8f:3f:82:28:1f:a2:48:41:af:c2:03:fc:42:
62:e6:63:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:09:13 2026 by rpki-client