Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier: AZf1jjtrbu8Xz+zU7EaJUXtmdjtQ5Sr4IxcmxHEmUIA=
Subject key identifier: 42:C0:F1:11:46:A2:24:63:42:43:94:8E:03:CC:59:61:E8:76:D7:C7
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial: 019D3865C0CBDFB09A035A323D67B1015EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number: 069E
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: /vqlVHWBFgySVGv2rrcBYOAGCAb6qH24ZvZORPuTwvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c0:cb:df:b0:9a:03:5a:32:3d:67:b1:01:5e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=42c0f11146a224634243948e03cc5961e876d7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:21:7b:53:ed:5c:89:b5:b3:b4:7d:ab:00:
2b:38:95:84:14:00:cf:2f:16:cd:3c:8f:4a:be:52:
6a:a7:96:34:7c:22:1b:21:4a:6a:9c:30:74:4f:7b:
61:71:67:57:48:b2:12:24:2b:e9:cc:68:82:67:89:
c3:71:a6:41:62:92:b4:e2:e0:f5:3c:91:05:0f:e1:
10:9f:94:d3:ae:60:b5:19:26:da:19:09:b4:9e:86:
4b:cd:4d:db:07:d5:eb:a2:4d:e6:f4:f7:1f:e2:26:
e8:db:8c:f4:12:a9:e2:31:fa:f0:f8:b7:56:82:5d:
16:71:6a:2c:f8:db:9d:69:97:3c:5b:4f:5a:e2:f3:
02:23:38:e9:f5:2b:1e:62:d1:8d:2b:73:84:f1:64:
78:bf:a1:83:f8:3e:0a:7c:d7:ca:39:26:f4:c3:43:
6d:14:5d:84:68:46:b1:82:73:ac:6b:0d:f0:04:4d:
47:9c:04:99:f9:17:f0:78:c4:12:f8:b5:7a:94:59:
2e:83:36:1a:7a:f1:81:64:a2:84:76:2e:9c:aa:4a:
6e:31:e0:5f:06:35:91:6c:b6:d1:d7:73:eb:29:e6:
c1:d2:6e:20:b7:c8:a0:f3:f6:76:73:20:b7:ad:aa:
ed:f0:dd:78:9c:4a:6d:da:1e:bb:3e:18:8d:a5:08:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C0:F1:11:46:A2:24:63:42:43:94:8E:03:CC:59:61:E8:76:D7:C7
X509v3 Authority Key Identifier:
keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0e:a0:15:b8:63:ad:f6:4a:d9:bf:ee:3b:9e:92:54:65:02:
2c:05:12:aa:89:29:3c:b5:ac:7c:01:ad:62:5a:f4:50:5b:fc:
c5:9b:67:48:15:d7:1e:bf:7d:35:fc:db:bb:84:35:5d:e8:be:
1b:e6:c2:79:54:cf:a9:52:46:c9:90:74:e3:24:16:77:9b:db:
87:29:c9:da:c4:49:63:2a:44:ce:9d:d7:6a:51:71:30:62:61:
76:10:4f:d8:73:e7:f4:da:93:e0:43:e1:e8:05:c1:57:99:69:
5d:51:41:45:27:64:22:55:a5:42:7b:25:3e:b4:06:5a:86:ba:
44:0b:d2:41:39:89:ae:06:56:ad:cf:66:47:55:bf:df:12:78:
f7:9f:0f:56:29:64:47:33:69:28:34:93:d1:58:05:af:8c:fc:
34:1c:37:3f:4d:cd:16:d7:d5:32:25:59:7c:df:c3:8d:e6:b0:
25:db:85:3b:70:e4:87:26:19:62:20:ce:ca:0a:db:9b:f6:9a:
8d:42:ba:34:e7:7b:fb:18:ec:97:b8:31:88:9b:4b:41:02:d4:
a0:25:91:18:06:28:43:45:96:4c:03:42:68:49:b1:1e:17:c0:
36:a8:d9:e2:a9:cb:f6:63:36:83:4a:83:20:86:64:0b:21:81:
3e:d3:61:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:56 2026 by rpki-client