Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier: +YPhV8L1qqwG+/WRpd1txL506JHnzN6zUpA7VakG+Vk=
Subject key identifier: 0D:07:27:BA:A0:E5:C9:2A:77:63:84:1F:9D:89:8F:D3:A6:8A:72:B2
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial: 019E31852B088B95022891C96560BA19E01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number: 071F
Signing time: Sat 16 May 2026 16:01:11 +0000
Manifest this update: Sat 16 May 2026 16:01:11 +0000
Manifest next update: Sun 17 May 2026 16:01:11 +0000
Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: 4PCR7uf9ioQb7nU5O3+TFtEvv/eDDrFaLc34qgFf16o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:2b:08:8b:95:02:28:91:c9:65:60:ba:19:e0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Validity
Not Before: May 16 16:01:11 2026 GMT
Not After : May 17 16:01:11 2026 GMT
Subject: CN=0d0727baa0e5c92a7763841f9d898fd3a68a72b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:09:9c:40:e7:06:d2:e1:04:82:df:78:98:
c0:a0:93:6f:c3:e4:03:74:a3:21:22:66:87:a6:10:
5d:f1:43:65:45:b3:18:03:f7:15:32:29:37:50:7a:
04:32:2a:a3:ee:9b:2d:c4:54:04:34:05:a7:78:46:
69:a2:23:ce:c6:85:42:b3:95:6a:69:70:93:be:52:
a0:44:1f:eb:f4:8c:d4:b8:ab:a1:9f:49:5c:2d:5e:
fc:91:c3:8c:de:37:e8:45:0e:82:98:a9:35:c1:6a:
ab:d6:bd:40:27:24:da:6c:4e:ea:dc:df:00:dc:02:
dc:51:d2:03:a1:9a:01:7d:d8:d9:5c:b8:c6:6c:cb:
a5:eb:38:74:9a:c7:50:13:ca:95:f8:b5:4b:cd:9e:
78:8e:05:52:eb:d5:c3:66:70:8b:56:b7:d5:ec:54:
4d:40:df:73:cd:29:44:1d:79:a3:b1:ec:37:24:27:
07:8f:f6:cf:dd:2d:d3:31:15:dd:82:a0:46:8d:29:
a6:69:9e:5a:95:c3:bd:22:03:5d:79:8d:ee:d2:83:
89:2d:92:07:d7:74:42:e7:f0:79:bd:25:44:bb:02:
19:51:61:ff:ff:af:e7:0a:e5:49:fc:50:93:f1:97:
68:31:0f:a7:3b:89:19:de:a4:c9:4d:25:44:80:cf:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:27:BA:A0:E5:C9:2A:77:63:84:1F:9D:89:8F:D3:A6:8A:72:B2
X509v3 Authority Key Identifier:
keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c8:46:1b:82:03:2c:9f:b2:1a:0d:40:44:86:65:24:7b:97:
75:22:b3:48:a6:2c:34:7a:3e:7b:eb:1e:1e:19:0a:8e:30:e0:
b7:4c:a6:1e:16:d9:dd:ba:2a:12:e7:a4:34:b7:d8:63:fa:cd:
69:c9:9b:ce:6f:dd:f5:b5:fc:1a:b1:a8:68:3f:5d:5b:29:a0:
d8:9f:c4:92:7e:ed:50:ae:0a:a4:84:cd:fc:fe:30:f0:2b:f2:
23:9f:91:90:f4:f8:00:0e:eb:8f:ca:46:38:af:7f:26:a6:2c:
11:31:4b:8f:1c:75:e3:80:d9:61:df:31:f2:c6:f7:1c:8e:5f:
5b:9d:d9:49:22:da:ad:e1:38:21:6d:ba:5c:8e:80:4b:64:ca:
a1:2b:f5:da:15:b5:10:d1:99:bb:9f:05:b5:2a:02:ba:22:d3:
f9:4d:cf:15:d3:6f:b9:0d:be:c5:a0:a4:50:0a:a3:21:3a:c5:
7b:04:f3:b8:7d:5c:9c:dd:f9:03:bc:f3:71:73:de:35:f4:30:
e9:5a:03:63:63:83:ae:f6:11:33:c8:86:aa:41:85:49:d8:b0:
73:64:2a:fd:7c:52:33:59:9c:f4:60:d6:fd:59:5e:f7:cd:0c:
5e:2d:97:01:37:cd:ce:6d:2d:64:fb:5a:36:a0:5f:2e:8e:7b:
b7:fa:15:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:10 2026 by rpki-client