Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: t264MDbmUkmxtULH0jZKUpVcZIzkQpjGKzHNHIf1Tig=
Subject key identifier: 86:13:71:5E:A3:7A:AC:D5:B8:93:F3:32:ED:66:80:4F:62:A3:6E:EE
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019FCC383E1B6DE1E51906F1C68B1C380F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 19E6
Signing time: Tue 04 Aug 2026 10:01:05 +0000
Manifest this update: Tue 04 Aug 2026 10:01:05 +0000
Manifest next update: Wed 05 Aug 2026 10:01:05 +0000
Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=)
2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: PUlyWRKWzh5Bkco0DX/YzjOoITHcwGzdF0EJ4AcqfCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:38:3e:1b:6d:e1:e5:19:06:f1:c6:8b:1c:38:0f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Aug 4 10:01:05 2026 GMT
Not After : Aug 5 10:01:05 2026 GMT
Subject: CN=8613715ea37aacd5b893f332ed66804f62a36eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:28:ea:a6:f9:df:71:00:60:03:6c:1b:cb:
cc:60:46:b3:e1:91:e2:a4:1e:8c:40:64:e5:80:73:
ac:61:23:fa:73:75:2f:86:3e:67:6c:b1:96:9a:ca:
17:ec:e3:f3:b8:99:52:a9:1a:bf:16:8f:76:9d:ca:
75:51:2c:ed:df:5f:e7:c5:ba:e4:e6:57:71:9d:58:
99:91:a6:a1:d1:52:2d:45:c1:8e:c7:86:fa:92:61:
d4:0c:2e:88:b0:cf:7b:a0:fb:4d:c7:86:6e:0c:d7:
60:5c:2b:54:88:c2:7d:2c:0a:f6:31:e3:13:96:f8:
16:01:ad:5c:c7:05:1a:e6:a0:5e:88:8b:ad:c2:dc:
75:ff:b5:58:4b:90:a7:76:86:d1:31:fb:36:94:32:
71:b9:07:14:7f:fc:1f:48:ad:59:ac:81:b9:b9:54:
7c:a4:d6:cc:6b:65:cb:1c:94:ee:5a:9c:a8:b7:71:
85:54:a2:4b:93:d7:12:78:5e:e8:81:e6:96:0b:41:
0c:fd:ec:7f:e4:a0:ff:29:25:18:cf:d1:2b:64:50:
5c:3c:f6:61:5d:26:3e:0e:2a:76:52:8b:55:63:ce:
06:29:2d:c7:c5:24:6b:7e:b1:8e:4c:cb:be:19:e1:
3e:c3:ae:74:ba:b3:98:4f:10:08:ec:6b:b3:87:2f:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:13:71:5E:A3:7A:AC:D5:B8:93:F3:32:ED:66:80:4F:62:A3:6E:EE
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9d:88:41:f7:1a:27:2f:8c:b7:4b:64:3d:f9:3e:12:18:b0:
89:b5:0f:53:51:f2:59:20:84:f6:91:62:d8:6b:51:5b:f6:32:
75:01:ec:ee:ff:d3:dc:68:a0:3e:d3:ed:20:77:ca:c2:ca:23:
44:8b:02:26:1e:14:2c:8d:d1:7e:b1:98:a2:41:ae:e8:9d:dc:
60:39:71:99:81:99:04:85:ab:b9:f2:44:2f:10:f4:0a:47:7a:
50:c5:01:17:24:9f:dd:24:2e:4d:42:83:3e:5c:2e:88:3c:60:
ab:7d:bf:f7:2c:39:12:4d:14:53:55:e1:d1:e6:09:08:b6:4f:
d6:b3:d2:77:0a:7f:4b:3c:5b:06:18:b4:41:ec:5d:3a:55:e3:
b2:a0:c5:4c:4a:cb:e6:9b:e9:d9:2a:b4:be:bf:01:17:06:c4:
f6:6d:03:03:76:7d:98:2b:b2:43:5b:e4:88:50:38:bc:e1:f1:
bd:59:0e:0d:41:fc:01:8f:18:04:5c:42:04:97:0b:86:ca:cd:
3f:5a:c4:92:ea:6f:fa:9b:be:0a:71:93:de:95:a4:f6:6d:d1:
4f:bb:c4:d6:dd:ec:94:a2:4d:61:3f:62:5d:9b:43:73:0f:93:
8e:c4:d0:61:8e:b6:e5:06:32:3d:93:8b:c2:a9:9b:e1:bf:00:
31:77:14:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:12:54 2026 by rpki-client