Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: 5uXW6l7AexdPeEUUdg2uIvmX7P6J42cmXP0QhWB1amg=
Subject key identifier: D2:90:4D:3F:1E:48:F4:F8:04:2C:D6:89:E1:91:AD:97:C3:A0:23:2A
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 019CA945D6A4B3DDBD5D1916DFC6E58F8B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 17FF
Signing time: Sun 01 Mar 2026 12:00:52 +0000
Manifest this update: Sun 01 Mar 2026 12:00:52 +0000
Manifest next update: Mon 02 Mar 2026 12:00:52 +0000
Files and hashes: 1: BZsgeYjNsI-TrRFg5BP7kG-awrA.asa (hash: ufP7A3glS5C1ttJSNJgnaiCLyGOMe/t4RYLh1fKQTdc=)
2: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: 6cuh86zwkzqo6hkefFUwjNlMa41tGaxnXUyWc3tPSlU=)
3: PCXd-9EviSUuR2-KbIZUWi0riBQ.roa (hash: nefgPfEo2Djt4hqoZTxg0xbxcxTGKZQtmu/1O0o4rzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:d6:a4:b3:dd:bd:5d:19:16:df:c6:e5:8f:8b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Mar 1 12:00:52 2026 GMT
Not After : Mar 2 12:00:52 2026 GMT
Subject: CN=d2904d3f1e48f4f8042cd689e191ad97c3a0232a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:ca:61:5c:d3:5a:4a:57:f6:9c:21:8c:7a:
cc:19:3a:18:1f:5a:63:eb:c0:e8:14:17:20:4e:a4:
18:af:b6:63:e5:42:95:50:8c:37:e2:40:98:3b:a3:
9f:57:de:0c:eb:93:ae:7d:5a:82:a2:d7:0a:45:8f:
24:32:e4:d2:5f:77:f4:8c:ee:46:5b:a2:eb:93:33:
70:39:46:65:d0:6a:d4:60:42:09:1f:d8:47:4b:08:
ee:d8:a2:77:ae:f4:db:56:7d:f9:ef:64:94:29:d3:
a5:6b:fb:19:c3:78:e8:9e:8b:cc:b4:12:93:b0:72:
68:b8:28:f9:d4:c4:fc:6c:dd:d5:e1:c7:31:a4:7b:
4c:76:31:b0:df:73:84:b9:b1:9b:e1:0e:3a:65:df:
70:91:3e:43:96:fa:c5:c3:7f:a3:55:3c:70:c1:38:
1b:c4:e3:72:7c:f3:55:3e:25:f8:7c:fb:d1:27:65:
3f:77:01:d3:62:6a:59:4c:e5:12:12:d0:9e:8a:95:
f3:f4:28:79:2c:ca:d6:29:d3:79:0c:f6:94:47:c8:
ab:3a:bd:f2:2c:d0:b9:5f:b1:91:dd:ea:a7:32:76:
29:5d:82:88:be:a4:56:78:72:83:92:45:7c:fa:49:
2f:a1:14:31:4d:e3:ce:73:fa:1c:be:69:d5:3f:61:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:90:4D:3F:1E:48:F4:F8:04:2C:D6:89:E1:91:AD:97:C3:A0:23:2A
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b1:c9:e3:97:58:e8:52:28:eb:2f:0c:0d:89:e3:38:ae:82:
7c:80:78:02:41:d0:92:4c:5c:6f:8c:77:e0:96:85:fa:eb:46:
0d:00:70:55:04:56:fc:33:4a:dd:fe:db:58:af:dc:b8:c5:08:
44:47:1b:d8:81:75:34:c7:20:81:78:96:57:b8:c0:3c:c5:e5:
c8:5a:7a:5a:b3:f7:00:d2:d4:4e:b4:15:31:35:ad:70:8b:06:
a8:d9:33:00:b2:65:fc:9a:02:f9:0a:16:f3:ec:e3:ae:8e:50:
85:57:8e:af:82:c5:05:75:28:0b:69:36:be:84:e5:ac:05:ac:
46:1b:8e:07:f3:65:d2:f1:d1:ae:5d:d4:70:e7:ae:a4:62:00:
a4:2b:e6:1f:dd:b1:4c:d9:66:6f:ab:ae:62:a3:e9:cd:ba:f6:
a9:e1:b4:19:a4:5f:f4:8d:e2:b8:fc:00:49:34:98:fc:2d:50:
c0:83:02:9b:9f:18:21:0f:b7:f5:88:aa:69:08:59:36:7b:b5:
75:53:34:93:b9:20:bd:87:b3:f2:21:6f:dc:84:c5:32:6b:86:
9c:c9:56:52:41:72:1b:6a:ae:47:c3:3a:94:62:60:79:5b:b1:
9a:c9:6e:cd:ba:6b:c3:de:19:b6:f5:c4:19:3c:8f:1d:c9:3c:
6d:cb:21:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:36:29 2026 by rpki-client