Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: VgxbjWTEe02TrFWaufwc3Kh6ESu8tYHtPl2plNZrd1w=
Subject key identifier: 51:BF:F4:11:DC:8F:0D:6B:FA:6C:7E:48:BF:52:57:55:62:AC:23:2C
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 01A08C0D1DF4798F616C019D8C5DEE7FDA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 1A50
Signing time: Thu 10 Sep 2026 16:01:04 +0000
Manifest this update: Thu 10 Sep 2026 16:01:04 +0000
Manifest next update: Fri 11 Sep 2026 16:01:04 +0000
Files and hashes: 1: 1WFjwMGMePlEAC8bm7XUOdRFj34.roa (hash: fW2dzpRcyQ80IgEJ6uR/Uw++9kayO/2mr9G7qpsC/1w=)
2: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: D3QiJ8+Cti4DYvuOZMj529PeHoxuvF/0qj5vl6Z3ZrY=)
3: TImJJUhHSPbQkRUq3GD4PoxkHbQ.roa (hash: 8czZJ0iGrV8f7eo8Glrc6/FdpLKC2UfW5wYgtnaT0dA=)
4: rHFkeLh05qkzhm3XqYX2jCr6Jwc.roa (hash: rLIRPVEJIS1dHp/fkMSEkxmJ0YQCqnoXU1iytE3RgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:1d:f4:79:8f:61:6c:01:9d:8c:5d:ee:7f:da:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Sep 10 16:01:04 2026 GMT
Not After : Sep 11 16:01:04 2026 GMT
Subject: CN=51bff411dc8f0d6bfa6c7e48bf52575562ac232c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:b4:c1:2f:6d:46:ea:4e:12:ad:0e:af:b9:
c4:3b:9e:70:ad:fd:05:43:c1:5b:05:a9:88:a0:15:
89:25:ad:99:37:c0:25:82:63:46:7d:4a:72:fe:1f:
0e:9e:d9:b1:3b:77:9b:f8:91:cd:ff:fa:fd:d0:17:
d2:9b:65:ad:fe:a9:f0:50:dd:1f:ca:c6:f4:97:b2:
1d:e1:a1:3f:f1:a2:d2:19:48:a7:7d:b3:49:d7:30:
4f:4d:1b:dc:50:e0:c3:34:4d:13:34:f9:9e:5c:d3:
dd:1d:40:be:6c:ff:0a:02:2d:8c:25:bd:05:2d:90:
79:89:7c:b1:45:a6:ab:38:ce:b4:86:27:6d:d7:79:
f8:d0:9e:b1:87:e9:55:1c:36:f7:b2:8d:cb:f7:4f:
b3:c0:ba:10:06:65:8d:4c:b9:b3:b0:33:39:36:8a:
a0:b9:39:e5:b0:31:d0:75:7d:ab:54:96:70:c4:19:
46:3e:9e:67:f1:55:b5:fa:18:34:ed:c5:0d:2d:f6:
e2:74:5c:f4:6c:fb:52:a4:27:ab:87:e5:a8:29:ec:
30:9d:19:4f:41:1e:ee:5a:eb:f7:22:ec:9c:cf:8f:
65:2d:18:f7:fb:0d:41:64:87:ab:c9:4c:df:b1:7b:
c3:43:3f:67:da:3e:75:31:e6:51:f3:17:74:15:31:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BF:F4:11:DC:8F:0D:6B:FA:6C:7E:48:BF:52:57:55:62:AC:23:2C
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d8:06:bf:2e:eb:34:4f:d2:1b:61:dd:b1:f4:c1:96:3a:52:
c4:3b:78:1d:82:68:4e:d8:cf:2e:51:94:32:50:b0:ed:05:36:
e0:5e:eb:db:c6:a4:f6:4e:8f:f2:ac:ca:11:f4:8f:6a:a5:d4:
84:79:68:50:02:75:04:41:90:75:a7:60:3f:7b:6e:05:06:25:
e2:6a:4e:63:f0:41:0c:4d:29:13:2a:d9:ec:16:ef:61:b7:5e:
88:72:2b:ad:3d:d3:0b:dd:e6:ac:30:f5:92:75:9f:08:98:12:
fb:ab:94:33:21:67:3a:57:4f:6d:b8:58:38:a8:02:cf:a8:46:
cb:92:6c:61:c1:4f:1a:6a:ae:69:51:36:24:f2:45:21:a6:81:
bf:fe:c3:5a:4d:28:93:d5:82:7d:74:14:50:b4:ec:c0:33:c3:
2a:c3:3d:21:50:22:5f:4a:81:26:7c:4a:e0:a1:69:9a:07:03:
04:55:90:17:00:41:d6:10:67:60:fd:31:39:4e:be:2e:2d:a1:
2b:1f:c5:ad:36:c1:3b:19:87:45:92:35:0e:12:2a:04:9d:17:
4a:11:c2:fa:b8:08:2f:e2:ec:86:ed:d2:f1:7d:e0:6b:91:34:
a0:13:10:b0:28:ab:6e:22:d9:ef:59:3d:b2:dd:88:7c:eb:47:
bc:9d:c1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:21 2026 by rpki-client