Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: JpCEmY7J4MSB8/XulP/xBUr7IwAKDoBBWJfc301KFCY=
Subject key identifier: 37:E5:B9:59:2F:55:34:7A:FA:3B:EA:5A:46:46:80:79:D2:A0:1E:22
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 019DCFABFED715A0A0801FAEF3D566DFD63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 05C2
Signing time: Mon 27 Apr 2026 16:00:48 +0000
Manifest this update: Mon 27 Apr 2026 16:00:48 +0000
Manifest next update: Tue 28 Apr 2026 16:00:48 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: LrLr21PwDbwnPbqoj1MmygikAiPuf49rUnKKoHz77X8=)
2: LNCbK6oFpSX7VrazVm0NKmkZQwE.roa (hash: 8I25wabiQRp4293K2/OnqVhvqWH+P1esMFI9OKX+Mkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ab:fe:d7:15:a0:a0:80:1f:ae:f3:d5:66:df:d6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Apr 27 16:00:48 2026 GMT
Not After : Apr 28 16:00:48 2026 GMT
Subject: CN=37e5b9592f55347afa3bea5a46468079d2a01e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:91:1d:6b:ee:0a:1e:35:b7:07:78:c8:06:
fb:20:79:27:87:79:ce:73:a9:b7:d3:a1:94:d6:d4:
61:5d:4c:81:4d:40:95:1e:ad:9f:eb:0e:d7:2d:5b:
09:f6:02:e3:75:69:41:d9:5e:a0:1d:84:a1:a5:0f:
6a:63:0a:00:d2:0b:5d:65:e8:4e:cb:3d:16:d7:af:
a1:94:0d:5c:1e:96:7b:47:a4:54:59:29:23:28:94:
47:b9:91:91:13:d0:67:85:c1:7b:0f:ea:46:23:d9:
a0:48:10:4a:ea:b8:f3:24:66:48:4e:85:43:0d:5c:
5d:b3:d5:19:6c:93:19:fa:f4:be:d2:1e:51:e6:5a:
e9:83:f3:30:41:f7:29:71:1a:da:65:82:a0:10:f5:
23:10:a5:41:63:98:e2:1a:3e:2c:84:f7:2c:b9:d4:
7b:b7:e9:a9:7e:e1:82:93:d8:55:d8:de:ce:4f:33:
c3:50:88:33:14:49:ef:2c:a7:31:0c:6d:89:b2:c0:
51:87:79:34:b8:4d:02:3f:8d:11:5c:48:91:67:46:
6d:68:45:19:84:f5:2d:c0:0f:97:0a:69:4d:2c:30:
9b:82:be:d2:71:f9:62:e9:fb:b5:bf:42:b7:88:b3:
ec:a2:03:81:13:c8:fd:c0:1d:69:b2:e0:ad:d7:ad:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E5:B9:59:2F:55:34:7A:FA:3B:EA:5A:46:46:80:79:D2:A0:1E:22
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:97:9c:6c:13:e4:17:e6:02:41:3a:d5:57:30:b5:e2:fb:1e:
2b:b8:71:10:94:5b:bb:65:f0:09:28:f1:22:e9:1f:44:8c:84:
4b:ba:28:e5:b3:fd:61:c4:99:56:34:a1:8c:3f:83:9d:2a:a5:
7f:8c:8a:ad:ce:58:d4:53:3d:3d:30:d9:93:08:88:d1:e1:ad:
11:8b:a5:9f:6d:5a:27:1d:8d:72:cd:de:d9:16:00:c6:df:32:
58:bb:8d:72:0a:47:96:20:ae:f5:c9:3f:06:dc:8d:c9:63:12:
3a:66:8e:5e:5e:bf:9e:41:53:dd:54:b4:a6:31:02:7b:fb:b1:
09:64:90:68:fe:5b:90:95:18:00:2d:f2:da:8a:99:2a:e0:e5:
42:7a:69:33:6f:92:46:82:a2:71:5e:f8:53:40:24:91:b9:89:
92:92:cb:09:d5:c4:4e:12:2c:eb:33:29:b0:d0:9b:22:03:53:
6d:76:6a:18:ca:c6:f6:b0:24:18:ba:3a:f9:9e:a4:53:20:2d:
b9:bf:cf:b8:22:9d:4a:6e:1c:c5:26:2f:70:5c:12:f7:e9:53:
30:c9:ee:81:bb:69:c6:f2:0b:24:b4:99:a3:f6:14:5e:fa:6e:
10:c9:45:82:1a:28:4f:0f:ef:0f:db:06:d0:c7:00:88:9d:39:
9e:81:39:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Pq/7XFaCggB+u89Vm39Y9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh
NjUxZjQwHhcNMjYwNDI3MTYwMDQ4WhcNMjYwNDI4MTYwMDQ4WjAzMTEwLwYDVQQD
EygzN2U1Yjk1OTJmNTUzNDdhZmEzYmVhNWE0NjQ2ODA3OWQyYTAxZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpKRHWvuCh41twd4yAb7IHknh3nO
c6m306GU1tRhXUyBTUCVHq2f6w7XLVsJ9gLjdWlB2V6gHYShpQ9qYwoA0gtdZehO
yz0W16+hlA1cHpZ7R6RUWSkjKJRHuZGRE9BnhcF7D+pGI9mgSBBK6rjzJGZIToVD
DVxds9UZbJMZ+vS+0h5R5lrpg/MwQfcpcRraZYKgEPUjEKVBY5jiGj4shPcsudR7
t+mpfuGCk9hV2N7OTzPDUIgzFEnvLKcxDG2JssBRh3k0uE0CP40RXEiRZ0ZtaEUZ
hPUtwA+XCmlNLDCbgr7Scfli6fu1v0K3iLPsogOBE8j9wB1psuCt160NnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfluVkvVTR6+jvqWkZGgHnSoB4iMB8GA1UdIwQY
MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt
MzFhZWMwN2U5NDVhLzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh
LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJecbBPk
F+YCQTrVVzC14vseK7hxEJRbu2XwCSjxIukfRIyES7oo5bP9YcSZVjShjD+DnSql
f4yKrc5Y1FM9PTDZkwiI0eGtEYuln21aJx2Ncs3e2RYAxt8yWLuNcgpHliCu9ck/
BtyNyWMSOmaOXl6/nkFT3VS0pjECe/uxCWSQaP5bkJUYAC3y2oqZKuDlQnppM2+S
RoKicV74U0AkkbmJkpLLCdXEThIs6zMpsNCbIgNTbXZqGMrG9rAkGLo6+Z6kUyAt
ub/PuCKdSm4cxSYvcFwS9+lTMMnugbtpxvILJLSZo/YUXvpuEMlFghooTw/vD9sG
0McAiJ05noE5Kg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:14:20 2026 by rpki-client