Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: HKcitPieD5bHL0I/lJ5r/zmwjG+qmqwR1PwqQyPy+24=
Subject key identifier: AC:DA:86:5B:9B:1A:99:D7:8B:9E:C5:73:42:47:29:49:55:3E:1F:E1
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 019FA7197073AC353F4D77EB303ABCC57FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 198C
Signing time: Tue 28 Jul 2026 05:01:29 +0000
Manifest this update: Tue 28 Jul 2026 05:01:29 +0000
Manifest next update: Wed 29 Jul 2026 05:01:29 +0000
Files and hashes: 1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: OH5JiSBOmN7o+RZG3fT0GWb+9bev4tpuCV4L4s74mUE=)
2: PCXd-9EviSUuR2-KbIZUWi0riBQ.roa (hash: nefgPfEo2Djt4hqoZTxg0xbxcxTGKZQtmu/1O0o4rzc=)
3: SaY7wOsMp2MJxwq5R4bQXJX5cKQ.asa (hash: 6aCmS8ZJo5oF+zi2/gpyJE6v5ir07/SV3sv2+dwp8nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:19:70:73:ac:35:3f:4d:77:eb:30:3a:bc:c5:7f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Jul 28 05:01:29 2026 GMT
Not After : Jul 29 05:01:29 2026 GMT
Subject: CN=acda865b9b1a99d78b9ec57342472949553e1fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f6:49:2c:cb:04:dc:35:70:b0:26:4f:0c:98:
3e:2d:27:d5:94:d7:17:51:ef:1a:90:db:f7:a9:e4:
69:27:c1:f3:03:26:c6:85:6b:d1:55:9e:3d:0b:bc:
5b:2e:89:27:e2:81:3a:4f:7f:d4:b8:42:14:d4:d5:
7b:6c:f3:7a:d0:31:0e:1c:4b:33:18:7e:e6:ca:4b:
f5:ba:ee:c7:f3:20:34:5e:43:59:67:2d:54:56:25:
71:71:06:11:40:2b:c4:3e:ad:75:29:34:45:e0:ad:
4e:76:ab:df:22:58:eb:f3:74:fe:63:cf:7e:1b:d0:
9d:0f:08:70:40:34:5e:f0:0d:0d:e5:db:b3:d1:01:
71:9d:9d:09:58:65:34:20:a1:b0:21:9c:81:47:a0:
ca:64:cc:0b:2d:f0:13:08:2c:48:64:59:82:4e:85:
6d:d6:bc:18:f6:be:58:8d:a2:58:3c:ff:55:e1:b1:
da:b5:41:4f:c2:df:69:bc:d4:7b:a0:4a:62:81:20:
64:08:1e:50:a9:f2:9b:08:1a:45:ed:bd:5c:85:ac:
d7:b3:75:74:2f:fd:28:0a:f9:b4:09:57:ef:04:05:
c2:d2:e3:07:7b:55:fb:0f:68:e1:6a:90:1d:0f:33:
1b:2b:83:61:21:5c:cc:4e:3e:c6:f5:71:23:54:27:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DA:86:5B:9B:1A:99:D7:8B:9E:C5:73:42:47:29:49:55:3E:1F:E1
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fa:98:71:71:2f:44:44:47:3a:e4:86:9b:ac:7f:4a:98:f5:
64:3c:81:83:9c:d0:1c:fb:da:c4:25:61:ab:66:dc:be:e4:24:
70:d2:39:d4:db:c0:53:76:29:35:c5:17:de:f5:a7:93:8c:66:
d1:15:a2:48:1f:3d:40:85:d4:ea:79:1c:c5:58:16:83:d3:bc:
d4:53:b3:24:20:67:df:44:e7:6c:5a:2e:09:b3:cf:cd:7c:02:
29:4b:cc:42:fd:65:98:1b:86:51:c5:ac:83:8e:82:f4:ca:8e:
15:a8:78:a9:1d:c6:5b:d1:88:81:71:0a:92:03:c8:27:c9:ec:
9e:26:c0:f3:dd:80:6b:01:b5:f2:f6:af:75:81:28:ab:90:47:
00:26:a4:95:2b:06:f3:2c:8b:26:23:fa:ca:1a:72:66:92:47:
ea:98:0a:f6:94:6c:23:ac:ae:b5:09:ff:55:34:6b:85:52:01:
fe:f0:5a:78:dd:8a:56:49:4f:a8:c9:21:a2:07:24:db:2f:ea:
1d:85:05:14:d5:bb:b3:e8:69:7b:eb:b4:56:ce:88:c4:3b:c1:
fd:d5:91:9f:b4:cb:5c:6e:22:03:28:bc:52:c9:fd:3b:92:44:
3f:3c:01:2b:1f:55:69:9e:3b:ea:3e:b7:4d:80:24:39:05:6a:
3a:e3:63:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:37:31 2026 by rpki-client