Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: ydg+YHl6u2UrB6Vc7CNaghsHMpqibF8I06kQZ7oGu/E=
Subject key identifier: 75:D3:7F:9D:ED:30:9B:60:C0:AB:86:0D:C0:37:16:E7:0C:29:11:11
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 019D98BDCCE977A88D43F023763285E53CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 1760
Signing time: Fri 17 Apr 2026 00:01:08 +0000
Manifest this update: Fri 17 Apr 2026 00:01:08 +0000
Manifest next update: Sat 18 Apr 2026 00:01:08 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: uJnPxe3rxV/lyx1bOjJmIcNjreEKK3drGqJRCnxtBbQ=)
2: nZWVrpkktVLvbn1tQxNa0DXWXX8.roa (hash: Po7W+yP4HlMRBc7RVFcp2+NXeQgCvfW3njKkUPa+zOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:cc:e9:77:a8:8d:43:f0:23:76:32:85:e5:3c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: Apr 17 00:01:08 2026 GMT
Not After : Apr 18 00:01:08 2026 GMT
Subject: CN=75d37f9ded309b60c0ab860dc03716e70c291111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:be:4c:3c:71:1a:04:49:45:04:ab:26:dd:
d4:2d:b2:2f:74:95:4c:bb:89:b3:6f:e6:73:b0:c4:
8e:ab:3f:c3:c3:f1:b8:69:71:12:42:a5:e5:f0:14:
93:91:d3:06:39:72:4f:bc:2a:f1:5a:87:ed:54:8d:
10:8d:e7:8c:3e:26:f0:28:45:c7:b1:3c:6c:78:a6:
42:53:b7:39:de:21:a1:d2:94:89:d8:b5:c7:ad:9e:
0d:ea:5e:c9:50:c6:7f:47:d8:52:77:8d:96:3f:40:
d4:c4:93:df:6e:0e:0e:39:79:86:2e:be:20:bf:81:
f5:0f:9e:2c:08:3a:80:34:9d:3f:73:f9:0d:a7:7e:
68:0c:8a:f7:2a:b2:bd:04:74:19:53:d4:6b:e9:02:
cc:17:e6:c0:a2:87:32:0a:5d:2c:26:3a:9d:b3:86:
0f:78:89:7f:a6:c6:7f:03:b3:b1:a1:ac:77:d0:69:
3b:f1:84:5e:a2:33:ee:6e:5c:ea:7a:9e:79:eb:de:
6e:63:14:52:45:05:b5:df:53:dd:c9:1a:97:1d:3b:
c6:f6:0c:43:07:05:4d:53:2b:40:32:1c:e5:a0:8f:
a0:77:f3:b0:59:0c:69:5e:11:d4:90:ab:46:c2:d2:
15:b2:90:b6:21:f4:58:de:33:c7:b2:bb:ad:c4:1a:
4f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D3:7F:9D:ED:30:9B:60:C0:AB:86:0D:C0:37:16:E7:0C:29:11:11
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:22:42:81:dc:23:74:96:8d:75:2e:f5:cb:f4:da:27:8f:54:
4a:f4:71:3c:ea:45:cd:a8:de:f3:b9:f1:ec:22:4e:5d:09:f2:
d6:d2:07:63:ce:16:fb:5e:49:42:70:fd:fb:e1:11:42:c8:fd:
8f:ad:1b:75:5d:fe:02:41:11:62:a6:b7:ce:01:b6:a7:94:02:
1e:b7:fc:93:b9:d6:c1:4e:cf:99:cb:39:80:c6:03:94:b0:6f:
22:d6:57:36:8f:c8:23:a0:86:d2:33:fe:77:84:06:4b:ea:67:
79:1a:d6:92:c0:5e:1c:05:b0:20:ac:4d:70:69:4e:62:4a:89:
3a:55:56:d8:d3:69:93:ef:4e:35:f9:c5:0c:2b:f1:4f:52:34:
35:40:54:bd:6d:6f:84:17:e8:38:e4:df:21:43:e3:ce:a9:6e:
1e:8d:4d:cb:11:07:82:f1:da:9d:65:f0:06:6c:7c:8c:ad:e0:
b4:84:0a:e3:59:49:cb:96:4a:70:c4:e9:ee:7c:14:b2:ef:29:
e5:fb:52:13:96:74:b3:5c:e0:7d:88:76:b3:b3:54:bb:3f:7a:
14:7a:59:33:a5:c0:b7:8e:59:b4:ba:80:2b:64:32:b2:01:e3:
05:2d:a7:6b:bd:20:04:66:2b:70:fc:3e:57:ae:de:93:b4:d7:
0f:9e:28:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:46:18 2026 by rpki-client