Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: AaQwlFLI5Cg/Qr/bPxBLF/+zFQAH5OFjTRsMLHQc38c=
Subject key identifier: 81:07:CA:CE:8C:51:62:19:A8:F1:AA:E4:6D:75:1F:8D:1E:45:30:EC
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019E30E081656BA725166C9078B7F623A85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 13:01:19 +0000
Manifest this update: Sat 16 May 2026 13:01:19 +0000
Manifest next update: Sun 17 May 2026 13:01:19 +0000
Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=)
2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: iD2GCSyy8sj5tN5iAs77XLPEk9cY9PkJ+8dFzTR0M/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:81:65:6b:a7:25:16:6c:90:78:b7:f6:23:a8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: May 16 13:01:19 2026 GMT
Not After : May 17 13:01:19 2026 GMT
Subject: CN=8107cace8c516219a8f1aae46d751f8d1e4530ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:b0:ce:f3:e4:20:a7:d9:27:73:d9:6d:a9:
95:32:86:fc:0c:bd:0d:98:91:37:0a:0f:e8:59:c4:
e4:bc:7e:0b:f3:b4:ef:09:d2:9e:f1:0d:d8:11:37:
6c:0e:27:3e:8c:16:6a:05:b2:f1:58:f0:af:3c:91:
5d:18:59:72:a9:a0:e8:fa:1e:b1:97:b5:22:d5:a7:
a1:ef:e7:9b:9a:73:c9:68:31:c6:69:ea:bd:e4:3c:
06:01:7d:e9:6d:f2:c7:25:c0:96:33:38:bb:e4:b8:
df:12:0c:b4:85:11:7b:c8:a0:17:8b:d4:1a:79:77:
d8:dc:2c:70:87:92:6c:c8:27:90:34:1d:db:a6:73:
a5:9a:d1:5d:d1:14:6e:5e:7d:0f:46:f7:0e:1c:23:
01:7e:51:fd:25:29:bc:97:0f:04:7f:4e:c0:73:de:
fe:16:89:f5:5f:2d:f1:e7:7f:fe:a8:8f:81:5d:d9:
74:60:30:8a:74:b0:9f:9f:b7:81:87:9c:35:a5:3b:
bb:39:1c:79:57:4c:7c:5b:96:e4:38:8b:f9:04:52:
c6:c6:0a:b9:14:76:a2:2d:a0:05:fc:89:6a:44:3b:
fc:8a:4f:56:23:8b:75:aa:41:77:7e:58:8d:8f:63:
b4:8b:63:47:08:83:c8:59:e5:ae:81:46:73:9a:2e:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:CA:CE:8C:51:62:19:A8:F1:AA:E4:6D:75:1F:8D:1E:45:30:EC
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e1:45:83:1b:fc:80:b7:75:3f:98:d4:72:3c:7f:5a:f0:e2:
ba:4a:1f:bf:cb:91:5f:c4:a4:d1:e5:3c:59:0e:33:6b:9e:50:
99:0c:fa:45:75:bb:f3:41:d5:81:24:92:4d:bd:43:47:6b:91:
7d:8b:49:a0:53:82:88:39:f6:50:98:31:03:62:7c:41:17:26:
b7:85:91:bf:6c:0b:4b:1c:a0:36:a5:40:16:af:a4:5d:9b:6d:
2e:28:80:05:98:cd:bb:a7:53:97:6c:57:98:eb:c0:e4:14:fb:
a9:ca:6c:b3:df:40:c0:03:d6:7c:7e:80:01:b6:58:6e:a9:11:
78:a6:5a:a7:31:3a:63:dc:de:86:d9:6b:02:7f:60:96:1e:4d:
23:70:29:a8:c2:fc:1c:a2:e0:33:8f:0f:4b:74:3a:f3:63:1c:
b9:4e:fa:55:10:a4:03:31:e7:c1:a8:7b:4f:da:e3:a6:21:2a:
9b:a3:e9:a5:2c:78:f4:fb:5d:e9:a2:54:ca:2c:ce:cf:23:1c:
38:e2:51:d9:b9:1f:a5:92:c1:aa:7a:7b:6d:ec:a5:73:f7:d1:
ea:57:24:34:df:3f:11:c3:05:6e:66:88:e7:96:a6:fb:b5:70:
77:e7:08:ee:87:63:ba:28:3e:af:e8:2b:c9:fd:cb:a4:b4:fb:
fe:b3:1d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:46 2026 by rpki-client