Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: HMikp68oD8wbwnUnmTiwrSRrQTyX1ZP0QdSiQGBUay4=
Subject key identifier: 9A:4F:1B:B7:88:C0:B7:85:63:FF:FB:AB:2E:10:57:07:61:49:CE:1B
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 019FA9E2725F4D14D5B73087342A8B944A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 1872
Signing time: Tue 28 Jul 2026 18:00:17 +0000
Manifest this update: Tue 28 Jul 2026 18:00:17 +0000
Manifest next update: Wed 29 Jul 2026 18:00:17 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: cuQCbFR69+zwRQw2nzSEoPVlmO4Jyu86ZwUUFDIij5E=)
2: nZWVrpkktVLvbn1tQxNa0DXWXX8.roa (hash: Po7W+yP4HlMRBc7RVFcp2+NXeQgCvfW3njKkUPa+zOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:72:5f:4d:14:d5:b7:30:87:34:2a:8b:94:4a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: Jul 28 18:00:17 2026 GMT
Not After : Jul 29 18:00:17 2026 GMT
Subject: CN=9a4f1bb788c0b78563fffbab2e1057076149ce1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:7f:27:49:df:87:2b:1e:f6:05:92:85:1b:
fa:f2:19:d1:e6:4d:d6:1f:16:9e:df:d3:69:c8:57:
bf:51:c0:66:2e:0e:6f:ef:b4:f0:ea:07:04:ad:d7:
04:fc:3c:62:76:cf:cd:2d:e9:5e:d2:e7:47:2f:b1:
88:bf:b5:55:e6:c1:19:4f:7d:26:7a:c9:90:66:9c:
19:10:fd:00:89:e4:73:11:1a:98:c5:f4:d8:59:aa:
c7:42:9e:1b:a1:bd:41:84:48:c8:df:58:3a:88:07:
cd:93:0f:7b:cd:d7:26:a0:0e:0e:18:fa:ae:a4:f5:
9c:42:93:5a:6e:14:a3:d4:89:8c:88:c5:e6:45:9f:
29:76:74:19:73:28:38:8a:90:2f:4f:75:49:8c:68:
8b:4e:77:66:99:3e:77:2a:91:ea:30:5e:2e:e2:1c:
80:62:c4:56:56:29:16:38:43:17:b8:61:b2:68:8c:
5e:0a:0e:9d:6e:9c:c6:b0:b8:50:91:18:90:82:c6:
01:6b:49:51:ad:d6:3e:3e:da:fe:3f:0a:3e:b4:20:
7d:ca:02:4b:00:e6:13:7f:ef:25:1c:62:19:46:d9:
43:7b:e5:44:51:44:b4:02:70:dc:8b:4b:1a:f5:26:
79:df:7b:55:a0:65:03:3b:42:6f:ab:44:99:f5:80:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4F:1B:B7:88:C0:B7:85:63:FF:FB:AB:2E:10:57:07:61:49:CE:1B
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7b:86:40:e7:31:6e:2d:ba:f8:c3:5c:48:62:d9:e0:22:e5:
e3:ae:f7:73:56:34:04:23:ee:85:97:90:53:87:2a:8c:cb:da:
18:b8:9e:db:6a:84:fe:cc:5f:da:e5:f8:04:3d:a5:4f:f6:92:
48:b8:b0:fa:c4:ef:bb:56:43:81:8a:ec:f5:15:3b:9e:ee:cf:
11:11:b2:35:87:04:81:2c:e9:3f:9d:53:a8:16:62:78:64:c5:
09:76:1d:16:6e:46:57:74:e3:d4:fc:a8:ee:df:45:39:cf:8a:
4e:96:0b:5c:aa:d7:29:fa:ad:b8:75:99:14:e5:1a:46:8b:7d:
64:8b:ae:c1:46:53:7e:f1:b9:55:62:ee:23:6c:98:0c:d3:0c:
99:e5:72:7c:66:a1:8f:26:b2:de:6f:06:64:f7:c6:9d:45:83:
66:59:16:b2:91:62:54:e4:62:a2:7e:e9:30:c9:e3:80:b2:56:
5d:ec:a1:4c:3f:ab:f1:cb:82:35:88:1b:af:e5:54:30:94:fd:
0b:60:b5:cb:38:a1:31:b0:6f:5d:70:87:fb:31:fd:18:c7:a0:
6f:c6:d4:bd:7a:b6:6f:df:66:63:9e:6c:d4:18:99:cf:02:04:
3f:44:c0:11:dc:e9:2c:2b:3e:fe:7a:df:ee:f0:41:33:1d:07:
39:aa:9f:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4nJfTRTVtzCHNCqLlEqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDJhZTZlOTYxODBmMDNiN2NhNmQ5NzQyNzUxNmU0YzA3
ZjZlMmIwHhcNMjYwNzI4MTgwMDE3WhcNMjYwNzI5MTgwMDE3WjAzMTEwLwYDVQQD
Eyg5YTRmMWJiNzg4YzBiNzg1NjNmZmZiYWIyZTEwNTcwNzYxNDljZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbl/J0nfhyse9gWShRv68hnR5k3W
Hxae39NpyFe/UcBmLg5v77Tw6gcErdcE/Dxids/NLele0udHL7GIv7VV5sEZT30m
esmQZpwZEP0AieRzERqYxfTYWarHQp4bob1BhEjI31g6iAfNkw97zdcmoA4OGPqu
pPWcQpNabhSj1ImMiMXmRZ8pdnQZcyg4ipAvT3VJjGiLTndmmT53KpHqMF4u4hyA
YsRWVikWOEMXuGGyaIxeCg6dbpzGsLhQkRiQgsYBa0lRrdY+Ptr+Pwo+tCB9ygJL
AOYTf+8lHGIZRtlDe+VEUUS0AnDci0sa9SZ533tVoGUDO0Jvq0SZ9YBoPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpPG7eIwLeFY//7qy4QVwdhSc4bMB8GA1UdIwQY
MBaAFApCrm6WGA8Dt8ptl0J1FuTAf24rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEt
YjQxOTJhYzYzOGM5LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEtYjQxOTJhYzYzOGM5
LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnuGQOcx
bi26+MNcSGLZ4CLl4673c1Y0BCPuhZeQU4cqjMvaGLie22qE/sxf2uX4BD2lT/aS
SLiw+sTvu1ZDgYrs9RU7nu7PERGyNYcEgSzpP51TqBZieGTFCXYdFm5GV3Tj1Pyo
7t9FOc+KTpYLXKrXKfqtuHWZFOUaRot9ZIuuwUZTfvG5VWLuI2yYDNMMmeVyfGah
jyay3m8GZPfGnUWDZlkWspFiVORion7pMMnjgLJWXeyhTD+r8cuCNYgbr+VUMJT9
C2C1yzihMbBvXXCH+zH9GMegb8bUvXq2b99mY55s1BiZzwIEP0TAEdzpLCs+/nrf
7vBBMx0HOaqfcg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:02 2026 by rpki-client