
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier: ARegz178EDkh1V+GXPP0iV8ogRS+uHq/k16bfEMl3sI=
Subject key identifier: 65:F0:B4:6A:FB:14:95:A0:91:F6:44:63:B0:17:0B:62:87:5A:FD:93
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial: 01A141956062B5EEF6D3B345E5BBCD9208FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number: 08B5
Signing time: Thu 15 Oct 2026 22:01:10 +0000
Manifest this update: Thu 15 Oct 2026 22:01:10 +0000
Manifest next update: Fri 16 Oct 2026 22:01:10 +0000
Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: vFxoYKlJk/wHnv5Vu3Fp/vl4mQd3WnApug+oRRdWy74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:95:60:62:b5:ee:f6:d3:b3:45:e5:bb:cd:92:08:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Validity
Not Before: Oct 15 22:01:10 2026 GMT
Not After : Oct 16 22:01:10 2026 GMT
Subject: CN=65f0b46afb1495a091f64463b0170b62875afd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:75:e8:e6:ca:d0:31:2f:64:25:bc:6a:83:
59:ab:0a:63:df:88:b7:e9:7f:96:88:a8:ab:86:e0:
fb:6f:0b:2c:c6:2a:be:d6:8c:e1:1e:bd:a5:df:ff:
ec:7c:02:0c:79:f4:47:24:25:a3:f1:80:a7:91:63:
75:40:67:9b:ab:bb:57:89:e4:a5:72:ed:ce:ac:be:
9e:07:12:57:59:3b:02:6c:da:95:fb:16:39:90:6a:
ae:59:8f:71:ef:bf:09:29:a4:35:be:cb:37:bb:00:
c4:55:64:f8:57:8f:e4:c2:3f:ad:e3:8d:35:25:bd:
d2:53:2c:8d:3d:ad:fb:8a:9d:d9:a1:79:43:90:6d:
3e:bc:8b:b6:43:fb:68:a9:08:d3:cf:38:17:bf:b5:
8b:0a:6a:c1:b0:ac:c6:c6:cc:f1:bf:37:49:b6:65:
51:de:29:c2:3a:e9:e3:14:6d:00:9c:b7:78:a5:12:
38:31:33:e2:ac:9e:e4:9b:68:5d:8d:8f:ad:fd:fa:
ff:a6:37:40:d0:b0:da:ee:4e:7f:6c:e5:ff:5e:7e:
b3:8d:49:ed:48:cf:48:45:cd:14:76:64:e9:65:8b:
48:20:79:2f:b2:71:e1:19:6a:43:a0:81:13:b0:55:
2c:ac:67:d8:4c:21:f9:71:b2:d9:0f:43:68:54:22:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F0:B4:6A:FB:14:95:A0:91:F6:44:63:B0:17:0B:62:87:5A:FD:93
X509v3 Authority Key Identifier:
keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:26:eb:34:d5:b7:f8:83:8d:5b:c2:a9:97:25:96:b1:13:c2:
f3:3b:a1:60:a2:68:e2:c0:5d:64:0c:14:4a:05:0a:b1:c4:1d:
d1:5e:76:7f:5e:cd:5c:45:21:95:f7:fc:1a:10:7f:a4:14:a8:
0f:6f:f6:7f:90:aa:28:da:45:5a:4e:ca:38:35:ff:98:0d:01:
ff:91:7f:07:e6:10:e6:59:24:de:c5:35:20:05:ab:2e:44:21:
6b:db:60:0b:78:c5:2b:fc:de:70:fa:df:50:bb:9d:44:09:47:
81:5d:f6:28:02:e1:3c:aa:14:2d:af:64:18:ac:73:9a:f4:54:
92:f2:e3:3a:48:af:27:29:8b:b9:ea:6a:7a:e0:42:18:83:cc:
fe:ef:36:d5:db:f6:8e:34:a1:0e:9b:71:83:31:f9:12:88:ca:
03:99:19:7f:54:cc:21:70:7e:72:35:97:0f:e7:9d:45:c5:9e:
14:89:41:72:c8:2e:f0:1c:d7:f0:7c:8e:12:a4:c9:24:af:46:
53:53:7e:c5:70:46:27:67:92:88:7e:c6:43:55:51:72:fe:98:
95:e4:81:4f:b1:65:3e:03:c1:3f:f7:eb:24:f9:df:97:6f:33:
53:78:36:1b:eb:f1:0c:d5:70:b5:47:8f:5d:c7:4c:1f:09:17:
ce:d1:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 07:07:26 2026 by rpki-client