Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: tQTriZsRAjrhOyQ7Wi5nCLS65VRa9vCreN6ePaMfzMQ=
Subject key identifier: C2:D5:F5:58:D7:71:C0:67:19:43:36:A3:41:68:4D:51:E2:81:DD:14
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 019CE7EE1E2F8DFFCB4D6994945DC90BCBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 054A
Signing time: Fri 13 Mar 2026 16:01:07 +0000
Manifest this update: Fri 13 Mar 2026 16:01:07 +0000
Manifest next update: Sat 14 Mar 2026 16:01:07 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: x1dsg0j73HnDvg1vXeW7eWATLEE30q597wA05Zcwtkg=)
2: LNCbK6oFpSX7VrazVm0NKmkZQwE.roa (hash: 8I25wabiQRp4293K2/OnqVhvqWH+P1esMFI9OKX+Mkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:ee:1e:2f:8d:ff:cb:4d:69:94:94:5d:c9:0b:cb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Mar 13 16:01:07 2026 GMT
Not After : Mar 14 16:01:07 2026 GMT
Subject: CN=c2d5f558d771c067194336a341684d51e281dd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:d7:0c:db:1a:59:d9:59:bc:a2:76:ea:f1:
99:70:dd:68:12:aa:9b:33:fe:a8:4b:65:88:6f:c6:
3a:bc:4e:e3:13:00:59:1e:03:b5:ca:bd:8a:f4:ce:
e8:67:f5:b5:71:2d:ba:8c:21:6a:85:ec:eb:fa:4f:
d1:9a:ff:73:e5:0e:81:c0:e0:7c:c8:02:40:eb:66:
da:7d:43:44:33:38:9d:cc:96:8c:94:77:6a:d7:1e:
88:e1:b8:3a:70:a4:71:56:41:c9:60:7b:01:50:a3:
8f:8a:c2:3a:55:e5:cc:ce:c6:2b:6f:f0:fb:0e:30:
c2:02:c4:fa:96:1c:98:43:0b:dd:35:25:23:4b:40:
18:c1:d5:ad:b7:61:b4:41:74:ed:64:6e:9c:a2:87:
4a:4b:3e:6b:e3:4f:36:67:80:47:c1:d7:e5:60:74:
6e:00:dd:e2:da:df:3f:04:12:68:15:fa:b1:ca:2f:
b4:84:a4:af:0c:05:02:a8:e8:10:88:be:15:d9:be:
1b:3f:f3:ef:ed:9e:ea:19:94:56:a7:5b:07:7e:a9:
c9:f5:68:df:f1:81:c9:f7:1a:8f:25:73:03:83:b2:
57:b4:40:df:a8:82:b9:3c:f2:de:59:5f:71:06:f0:
2d:67:ca:44:08:bc:99:57:a5:b9:3b:17:ab:72:3a:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D5:F5:58:D7:71:C0:67:19:43:36:A3:41:68:4D:51:E2:81:DD:14
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e8:50:4b:c2:d8:2e:b7:ef:74:d9:78:ac:e4:f9:f4:fb:48:
cc:74:11:51:30:73:cc:8e:35:8d:9a:91:2e:25:98:ec:01:fd:
7e:15:d4:26:5e:e6:56:fa:51:71:50:e6:f1:23:4e:9d:38:94:
10:6c:45:0c:7a:48:02:37:a8:a7:78:1f:38:1f:f3:69:54:89:
6e:c0:db:1d:a4:89:0e:1f:b5:db:21:57:31:ed:a5:87:df:76:
d7:b8:19:a6:73:7b:61:f0:7b:96:e0:10:74:82:17:dd:d0:42:
3e:59:16:d8:9f:8f:16:b1:91:c6:05:4b:03:72:fd:59:8e:69:
5e:8c:bf:26:e7:02:fb:d0:b6:ec:fc:e4:ab:b0:e9:29:ca:2a:
d5:4b:51:2d:c2:ba:ae:8f:f6:6b:1a:99:a3:df:b3:ba:9d:84:
02:02:44:fd:bb:0f:93:74:0c:f4:02:23:34:96:8d:44:9b:9c:
7b:1e:44:88:18:4c:ce:62:5c:b5:46:24:84:09:9f:10:8a:a8:
a7:8c:7c:0f:e5:11:ef:a5:04:e7:f3:7f:61:5f:df:e1:6d:7c:
0d:36:bf:8a:2b:3f:85:5e:3f:be:79:a8:c4:6c:41:fb:57:54:
cf:58:08:44:2c:08:cc:71:23:02:be:5b:a7:0d:5c:37:f7:a6:
3a:72:0a:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzn7h4vjf/LTWmUlF3JC8vpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh
NjUxZjQwHhcNMjYwMzEzMTYwMTA3WhcNMjYwMzE0MTYwMTA3WjAzMTEwLwYDVQQD
EyhjMmQ1ZjU1OGQ3NzFjMDY3MTk0MzM2YTM0MTY4NGQ1MWUyODFkZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1zXDNsaWdlZvKJ26vGZcN1oEqqb
M/6oS2WIb8Y6vE7jEwBZHgO1yr2K9M7oZ/W1cS26jCFqhezr+k/Rmv9z5Q6BwOB8
yAJA62bafUNEMzidzJaMlHdq1x6I4bg6cKRxVkHJYHsBUKOPisI6VeXMzsYrb/D7
DjDCAsT6lhyYQwvdNSUjS0AYwdWtt2G0QXTtZG6coodKSz5r4082Z4BHwdflYHRu
AN3i2t8/BBJoFfqxyi+0hKSvDAUCqOgQiL4V2b4bP/Pv7Z7qGZRWp1sHfqnJ9Wjf
8YHJ9xqPJXMDg7JXtEDfqIK5PPLeWV9xBvAtZ8pECLyZV6W5Oxercjrs2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLV9VjXccBnGUM2o0FoTVHigd0UMB8GA1UdIwQY
MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt
MzFhZWMwN2U5NDVhLzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh
LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOhQS8LY
LrfvdNl4rOT59PtIzHQRUTBzzI41jZqRLiWY7AH9fhXUJl7mVvpRcVDm8SNOnTiU
EGxFDHpIAjeop3gfOB/zaVSJbsDbHaSJDh+12yFXMe2lh99217gZpnN7YfB7luAQ
dIIX3dBCPlkW2J+PFrGRxgVLA3L9WY5pXoy/JucC+9C27Pzkq7DpKcoq1UtRLcK6
ro/2axqZo9+zup2EAgJE/bsPk3QM9AIjNJaNRJucex5EiBhMzmJctUYkhAmfEIqo
p4x8D+UR76UE5/N/YV/f4W18DTa/iis/hV4/vnmoxGxB+1dUz1gIRCwIzHEjAr5b
pw1cN/emOnIKcw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 17:58:02 2026 by rpki-client