Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: tf3VGRtaBVI+0Gk1Z93TE4i+aC/s1cN9QIX+HYPzQHY=
Subject key identifier: E5:46:2A:DC:13:9C:1E:58:81:47:4C:EC:CC:0A:57:A3:FE:EA:B1:62
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019D37C02F60D1ED34B2E360193E08B4D9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:34 +0000
Manifest this update: Sun 29 Mar 2026 04:00:34 +0000
Manifest next update: Mon 30 Mar 2026 04:00:34 +0000
Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=)
2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: BQrVCBANsJCqZ67uSwkP/VY1qtYYCjqOev97CZ29n5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:2f:60:d1:ed:34:b2:e3:60:19:3e:08:b4:d9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Mar 29 04:00:34 2026 GMT
Not After : Mar 30 04:00:34 2026 GMT
Subject: CN=e5462adc139c1e5881474ceccc0a57a3feeab162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:91:2b:1f:7e:1d:e0:60:e4:3f:b8:51:4a:
7c:a1:03:9e:16:19:04:6b:76:2e:4c:73:9a:86:98:
cd:69:6f:8f:42:65:22:ff:be:0c:90:4a:9e:1e:6e:
90:2c:b1:b5:2a:b3:5b:4e:59:19:c1:4e:b4:fd:10:
14:f3:41:b6:8b:c1:e9:68:ac:78:be:45:f4:9d:7e:
aa:64:3c:49:38:ec:fd:62:8f:df:70:75:ae:27:3e:
db:bc:89:d1:63:34:02:23:fe:c8:63:d9:ee:a9:0b:
05:2e:16:4a:25:ea:30:9f:91:18:1a:c3:7c:31:bd:
43:76:59:61:c9:87:b3:25:e3:c5:1b:33:fd:d4:ce:
e1:da:af:74:d4:c6:16:02:b6:37:39:0c:f9:9f:54:
f9:09:05:ea:3d:e1:5f:86:88:06:98:23:cf:96:37:
dd:33:71:4d:48:20:4d:32:5f:77:6c:0f:01:40:d1:
93:44:9a:9b:c0:e3:4d:5f:6a:fe:5f:f8:0d:ae:35:
29:e6:5f:cf:dc:68:ae:f2:3d:6b:1d:18:73:5e:e0:
66:0f:45:0e:b1:30:da:9c:b8:c5:66:a4:90:de:d2:
84:8a:bd:1a:f8:06:8c:81:21:0f:91:40:46:aa:55:
8d:f0:74:86:d0:b2:7c:ff:a0:d7:62:fe:fa:b9:7c:
8b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:46:2A:DC:13:9C:1E:58:81:47:4C:EC:CC:0A:57:A3:FE:EA:B1:62
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7d:cf:01:02:30:43:29:6e:d9:d7:1d:fc:35:99:61:2e:55:
1a:9f:6e:c3:0e:2c:a4:28:93:41:d2:c3:98:27:86:49:d4:fc:
9a:14:1b:95:d5:df:36:e9:c4:e0:74:c6:b1:04:f5:d5:87:ee:
9c:15:57:e6:71:fd:3e:62:3e:aa:7a:74:8a:2b:0b:00:58:e4:
6e:1f:c4:51:d3:8c:5e:2b:0c:d6:f2:19:af:80:14:60:97:df:
9c:30:c8:01:bf:13:e2:d9:34:c4:2a:b0:1e:7d:14:31:62:df:
39:6e:4a:7d:93:aa:70:8b:43:60:45:18:57:4e:d0:74:56:78:
09:b7:e4:df:20:a3:c1:82:65:84:84:e9:77:a5:84:84:0d:ba:
bc:87:ad:c0:fc:c1:1a:c5:cf:c0:92:dc:99:45:a0:ea:2d:66:
42:65:a6:ae:69:75:4b:f1:a4:2f:30:68:40:46:34:63:93:77:
6e:e7:20:b6:62:b4:52:97:be:26:9e:f2:f3:1a:31:dd:7f:35:
c1:d6:e9:dd:d8:e2:ef:a7:cc:70:a0:94:be:9d:f7:fb:50:f6:
bb:da:51:3c:28:b2:99:21:52:88:ba:d6:ca:17:6e:1b:51:a2:
52:ad:86:fa:16:f9:b6:fd:de:23:32:90:a2:2e:db:c2:54:6e:
48:c4:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:09 2026 by rpki-client