Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: CO4zVE2kBJRumB984UlYJR0QhoKUUFP4lHVLObEEHns=
Subject key identifier: AF:E8:D9:94:06:72:E0:33:81:A6:02:09:A0:6F:7E:5A:86:0F:54:9A
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 019EB958C7CE15A865E71CC579D9ED0A9534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 063B
Signing time: Fri 12 Jun 2026 01:01:03 +0000
Manifest this update: Fri 12 Jun 2026 01:01:03 +0000
Manifest next update: Sat 13 Jun 2026 01:01:03 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: s+2UT/A9TwoZ/+Iq/AcRptG6NvU++GSlpfGghbcRK/I=)
2: LNCbK6oFpSX7VrazVm0NKmkZQwE.roa (hash: 8I25wabiQRp4293K2/OnqVhvqWH+P1esMFI9OKX+Mkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:c7:ce:15:a8:65:e7:1c:c5:79:d9:ed:0a:95:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Jun 12 01:01:03 2026 GMT
Not After : Jun 13 01:01:03 2026 GMT
Subject: CN=afe8d9940672e03381a60209a06f7e5a860f549a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:5f:61:9f:e8:65:d3:18:ee:6a:8b:04:78:
03:cb:56:10:e5:83:81:0d:9d:a9:92:02:eb:e4:32:
42:bc:a5:6d:87:41:68:32:a4:1e:00:9f:20:9e:39:
26:de:d5:14:99:b7:bb:34:7b:45:40:47:37:9a:50:
96:d1:6f:7d:e2:36:80:d5:88:c1:8a:cd:a8:b1:b5:
a1:c8:85:32:40:6a:df:53:19:4d:55:9d:d1:2d:eb:
35:e0:5b:90:9c:5a:06:23:3e:cf:99:01:51:a5:73:
1b:cf:19:42:3a:5b:ed:78:84:7a:db:93:76:70:c7:
c5:1a:24:22:ca:59:44:19:79:34:08:e6:ae:09:2f:
8d:5c:73:31:b1:3d:33:72:5d:37:23:33:32:57:db:
97:2d:1d:0e:a7:56:75:cc:4a:f8:5e:c2:fc:76:1b:
95:8f:d9:3b:2b:f2:2e:63:c3:b7:01:b8:e7:31:b1:
ea:3d:0f:7d:c3:d5:12:c6:b4:bb:e2:b0:bb:5c:38:
ef:37:45:4a:36:4b:a7:4b:49:a4:8a:9e:41:e9:7b:
cf:a1:62:b6:27:82:bf:13:18:93:6b:d9:be:16:06:
90:de:aa:bf:be:75:9e:d6:d0:a7:ec:59:42:9f:a5:
e1:38:12:1d:45:0e:4b:67:1d:79:57:0a:36:74:01:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:D9:94:06:72:E0:33:81:A6:02:09:A0:6F:7E:5A:86:0F:54:9A
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f0:d7:b8:a4:a4:eb:98:4d:17:27:6a:cc:28:93:f3:44:49:
70:32:38:e7:e2:22:94:7a:c9:6a:60:80:45:b4:1f:37:c3:0f:
97:95:e1:74:a7:6a:89:71:ab:e3:17:5a:41:f1:9d:50:3b:a0:
b9:e7:19:bb:d1:65:7f:f4:e0:bb:14:d5:6d:51:e6:ec:70:e6:
7e:73:1c:01:0e:46:81:ed:3b:7a:61:81:f6:dd:5c:aa:21:6e:
6f:9f:92:98:66:37:6d:30:f0:1a:17:66:ca:bd:f0:1b:7f:2a:
c6:cf:b6:30:88:37:e2:54:96:c4:94:d0:c2:2e:26:87:33:82:
06:f3:4c:02:11:a9:2e:f5:b2:d4:48:79:75:0c:d4:60:87:ea:
83:20:b4:3f:cf:17:87:05:c1:00:4b:90:9b:47:e8:cf:a4:87:
b1:bf:97:9d:4a:35:e3:a4:2e:ae:eb:3e:f9:d0:60:5e:40:24:
20:b4:fe:20:ae:e0:c4:4b:d3:cd:20:83:67:59:8d:41:27:45:
c6:c8:24:4c:4c:e5:b9:38:29:de:2d:5e:bb:ca:f8:1d:44:64:
70:1c:a7:3c:fe:80:fb:7f:14:2c:e9:f0:76:eb:7b:10:e1:78:
a8:78:33:21:d6:52:54:94:e9:7b:d6:8d:d1:b6:ae:39:33:2a:
c0:db:93:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:34:06 2026 by rpki-client