Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: EbMUJtQNNqqGHLfF/L9ib4Au1KE4X7zZ6rvPaQH9OQ4=
Subject key identifier: 79:25:A2:BC:F4:47:91:76:70:04:02:A0:FA:9B:61:97:F8:59:FC:2C
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 01A0B5E3F70D5FA738A822FC936E5F06C1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 1A5F
Signing time: Fri 18 Sep 2026 19:00:10 +0000
Manifest this update: Fri 18 Sep 2026 19:00:10 +0000
Manifest next update: Sat 19 Sep 2026 19:00:10 +0000
Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=)
2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: 67qKSfHpjCbrn+qC44XCo6z/+bFarCatlgifeNXMVfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:e3:f7:0d:5f:a7:38:a8:22:fc:93:6e:5f:06:c1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Sep 18 19:00:10 2026 GMT
Not After : Sep 19 19:00:10 2026 GMT
Subject: CN=7925a2bcf4479176700402a0fa9b6197f859fc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:23:0d:08:34:ba:c6:0c:bb:f7:1e:7c:0a:
77:f6:6e:93:d1:e1:9b:0a:bd:c4:03:f7:9c:23:ee:
58:1b:01:9e:d4:25:af:4a:fb:a9:a9:d4:f4:c4:67:
24:6b:92:1e:2c:50:c7:bc:d1:51:89:f3:e6:22:e2:
35:44:e4:6f:f2:72:ad:04:7b:9c:e2:5e:d7:bd:0b:
e1:da:07:69:41:15:0a:4e:47:2c:be:b3:9c:2f:74:
3e:e6:be:8b:e5:00:7a:f3:52:b1:f3:e1:09:02:75:
74:5e:0b:12:11:97:d6:3c:d3:dd:14:11:b7:20:64:
50:99:90:07:87:0a:c2:37:55:8f:2a:81:21:50:76:
60:24:bd:3e:66:1c:5c:91:88:57:fe:a2:f3:51:72:
1b:91:63:a0:f0:f7:0d:9d:7d:01:a0:cf:92:e7:92:
04:7b:23:37:0a:bf:be:85:15:54:1f:3c:49:07:81:
5f:74:1f:1b:35:fb:21:b6:e5:3f:4f:1d:13:21:77:
38:30:0f:d5:dd:30:20:65:c3:3e:1b:0f:ac:5a:1a:
05:1d:f2:20:16:13:87:1c:49:5e:ae:d5:53:fb:3e:
5d:30:eb:29:7e:25:14:98:53:92:a7:23:f7:d8:1a:
26:32:50:f5:5a:3d:f6:f3:20:92:bb:28:cb:9c:bf:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:25:A2:BC:F4:47:91:76:70:04:02:A0:FA:9B:61:97:F8:59:FC:2C
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1f:9a:32:da:e5:8e:d8:1a:77:08:12:bf:de:36:74:8a:e7:
30:ad:00:f2:f1:7d:1d:69:73:20:78:1f:c5:58:59:4d:cf:04:
31:69:a4:bf:06:ab:af:70:65:be:9e:d3:b3:5d:4c:70:96:d4:
e8:ea:33:5b:f3:7e:93:5d:de:4d:29:bf:f8:de:92:4c:fd:4a:
1b:5d:1a:98:38:19:b8:bf:6a:3e:37:e8:2f:9c:24:08:e8:c5:
4a:8a:4f:ac:d9:51:03:18:be:5c:40:a4:18:42:55:88:2e:ab:
f9:7d:40:65:65:8a:48:d0:c3:01:a5:8b:67:6b:6a:72:80:f7:
fa:c0:35:11:ec:9f:12:27:66:6e:d3:fd:08:16:d2:ac:3a:d6:
27:90:ae:a6:59:bf:76:1e:33:0b:45:d0:f7:63:68:b3:2b:0a:
f4:b1:4f:00:69:03:46:04:e6:2e:ba:11:bd:b8:3a:9a:f5:11:
43:f1:d9:8e:96:a7:72:58:7a:a3:a1:f5:32:f8:67:57:8d:3b:
e4:2a:18:2b:b9:ba:26:8a:b8:ac:8a:fb:ec:04:0c:3c:af:2c:
ae:5c:a9:46:6a:01:e9:5f:1a:7c:1a:80:ad:4d:a6:4b:c9:5a:
f7:69:b0:c8:f8:35:47:9f:9d:d1:34:21:d6:e5:c5:7f:df:21:
e7:6a:64:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC14/cNX6c4qCL8k25fBsGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGJkMWQzMGY3MjM1Y2Q3MTczOWMwNDIzMTBkYzI2MDgw
NzM4ZjYwHhcNMjYwOTE4MTkwMDEwWhcNMjYwOTE5MTkwMDEwWjAzMTEwLwYDVQQD
Eyg3OTI1YTJiY2Y0NDc5MTc2NzAwNDAyYTBmYTliNjE5N2Y4NTlmYzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdIjDQg0usYMu/cefAp39m6T0eGb
Cr3EA/ecI+5YGwGe1CWvSvupqdT0xGcka5IeLFDHvNFRifPmIuI1RORv8nKtBHuc
4l7XvQvh2gdpQRUKTkcsvrOcL3Q+5r6L5QB681Kx8+EJAnV0XgsSEZfWPNPdFBG3
IGRQmZAHhwrCN1WPKoEhUHZgJL0+ZhxckYhX/qLzUXIbkWOg8PcNnX0BoM+S55IE
eyM3Cr++hRVUHzxJB4FfdB8bNfshtuU/Tx0TIXc4MA/V3TAgZcM+Gw+sWhoFHfIg
FhOHHElertVT+z5dMOspfiUUmFOSpyP32BomMlD1Wj328yCSuyjLnL9XVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHklorz0R5F2cAQCoPqbYZf4WfwsMB8GA1UdIwQY
MBaAFApL0dMPcjXNcXOcBCMQ3CYIBzj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEt
Mzg4NDQzZDVmMDBmLzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEtMzg4NDQzZDVmMDBm
LzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdx+aMtrl
jtgadwgSv942dIrnMK0A8vF9HWlzIHgfxVhZTc8EMWmkvwarr3Blvp7Ts11McJbU
6OozW/N+k13eTSm/+N6STP1KG10amDgZuL9qPjfoL5wkCOjFSopPrNlRAxi+XECk
GEJViC6r+X1AZWWKSNDDAaWLZ2tqcoD3+sA1EeyfEidmbtP9CBbSrDrWJ5Cuplm/
dh4zC0XQ92NosysK9LFPAGkDRgTmLroRvbg6mvURQ/HZjpanclh6o6H1MvhnV407
5CoYK7m6Joq4rIr77AQMPK8srlypRmoB6V8afBqArU2mS8la92mwyPg1R5+d0TQh
1uXFf98h52pk5A==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:35:39 2026 by rpki-client