Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
File: ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft (raw, json)
Hash identifier: nzCY47JgGL1I24ovdezRQX6Wua0Un2qiP3cwuSTgeR0=
Subject key identifier: EA:0A:D5:31:F7:F2:F4:70:F8:32:7A:D8:B2:A0:43:DA:F8:CC:ED:73
Authority key identifier: 72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2
Certificate issuer: /CN=724f14189ab7105620375daf9baa814d6dd937a2
Certificate serial: 019D3866119437A5B6808A75026AA4D8F316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
Manifest number: 09FD
Signing time: Sun 29 Mar 2026 07:01:46 +0000
Manifest this update: Sun 29 Mar 2026 07:01:46 +0000
Manifest next update: Mon 30 Mar 2026 07:01:46 +0000
Files and hashes: 1: ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl (hash: /SANTwIqvojlvB+ArZdqaISGJidDDCblbM64OxuqqLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:11:94:37:a5:b6:80:8a:75:02:6a:a4:d8:f3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724f14189ab7105620375daf9baa814d6dd937a2
Validity
Not Before: Mar 29 07:01:46 2026 GMT
Not After : Mar 30 07:01:46 2026 GMT
Subject: CN=ea0ad531f7f2f470f8327ad8b2a043daf8cced73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:e8:17:99:a3:ec:ad:a7:9d:a6:a9:18:a1:
ba:15:a1:74:30:35:45:82:f4:23:b2:b1:f3:14:ad:
2b:d5:50:9c:83:e3:95:8b:d1:aa:1a:fb:35:9e:75:
83:38:32:aa:df:a2:ec:83:56:c3:77:4a:50:b7:55:
f5:83:e3:8b:5a:99:67:23:8f:56:0c:1b:3f:c3:ff:
f0:c6:52:b3:14:0a:ab:ab:1b:0a:30:e3:1c:0c:0e:
d3:68:d6:14:7f:0d:60:2d:62:06:1c:95:3f:2e:0e:
5f:8b:ea:bc:0f:39:10:d0:6f:3d:fc:e7:26:18:4b:
f8:cf:86:b8:d1:72:0c:97:70:fc:d0:69:84:f8:b6:
32:d9:8f:f0:a9:bb:79:6f:43:98:5f:e8:fc:7d:a3:
16:4d:79:4d:5d:19:d1:3d:c4:49:70:8d:cd:a2:aa:
1a:b3:df:b1:e5:a8:e4:c0:c1:c5:49:be:0c:a6:7c:
df:cb:a2:c2:0a:96:ff:94:e1:c2:70:72:a9:85:8b:
2a:aa:cc:6a:3a:b4:c3:41:3c:f1:6e:a7:ce:61:18:
02:cb:71:d0:27:f5:32:3a:20:54:58:d7:4c:7e:c0:
a2:55:e6:a5:0e:33:a7:7f:3d:6c:79:7a:04:06:a4:
05:62:e6:ec:43:77:4e:07:93:4b:b9:d7:85:26:19:
ab:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0A:D5:31:F7:F2:F4:70:F8:32:7A:D8:B2:A0:43:DA:F8:CC:ED:73
X509v3 Authority Key Identifier:
keyid:72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4e:32:dd:23:b8:5e:13:ae:1a:94:68:b5:ea:16:89:0d:bf:
e9:21:a6:98:ec:75:0f:bc:16:fb:4e:9c:d6:97:c9:ea:99:f1:
52:88:b2:df:b7:45:e4:74:08:08:c2:65:a6:c5:bd:1e:43:97:
30:b5:e4:65:77:ca:e5:cb:f7:06:b6:b8:3f:33:51:d1:2d:49:
c2:65:88:0d:7c:74:d3:e0:d7:2b:86:50:46:74:6b:fa:d4:ba:
c8:dd:fb:c8:6e:be:2f:d9:19:ea:e1:48:51:d4:77:5c:f1:6c:
a0:65:39:f5:44:e5:1d:fe:03:03:7d:7e:d5:b5:62:3c:d8:ad:
11:8c:dc:3e:b1:cd:59:db:f5:cb:e4:a8:22:c8:fa:b6:37:9b:
ae:8e:a4:81:d3:ac:66:7f:fe:b1:e9:a2:19:d4:77:d3:20:e9:
92:22:76:ee:2a:d0:ad:31:1f:19:f4:52:29:58:80:07:5b:1c:
b9:a2:ee:ba:95:69:e4:5e:8b:0f:a2:82:28:9a:5a:de:1b:28:
dd:2f:0f:9e:4f:b4:25:27:93:e6:e1:7e:0d:67:33:b1:69:cb:
aa:1b:0e:b0:ac:6a:5e:a3:67:47:bb:4c:f4:3d:9e:0a:cf:ea:
b4:2a:68:6e:76:7a:ec:28:50:01:a4:9b:6f:67:d3:c2:f8:fd:
b3:12:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:11 2026 by rpki-client