Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: J0/4YBcxOOGTEFATKjgGpFu7IfjvDhHTqU8yssZg70s=
Subject key identifier: F5:82:1D:65:F3:7A:AB:CE:E7:58:11:D2:F2:3F:92:97:C3:6E:D8:AA
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 01A13D810FAAC31A9325E87EF81B6E8E2403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 19E8
Signing time: Thu 15 Oct 2026 03:00:30 +0000
Manifest this update: Thu 15 Oct 2026 03:00:30 +0000
Manifest next update: Fri 16 Oct 2026 03:00:30 +0000
Files and hashes: 1: NvNBBzczdvedzfA0zmq_oqTjNy0.roa (hash: aNRFQnk32ELUJc2di3VPfCYAy8SNGZZzchv0G1guk1k=)
2: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: reizumLX//KIfydDkTxQiMPCPeKDXmIyxgspo9zA4oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:0f:aa:c3:1a:93:25:e8:7e:f8:1b:6e:8e:24:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Oct 15 03:00:30 2026 GMT
Not After : Oct 16 03:00:30 2026 GMT
Subject: CN=f5821d65f37aabcee75811d2f23f9297c36ed8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:04:ff:4d:b3:93:fa:54:6c:5b:d6:0d:9d:
83:82:bc:65:18:7a:75:ca:03:e4:01:34:83:2a:89:
31:43:ef:3d:29:6f:bc:7e:ba:58:87:0d:41:d7:98:
f4:ca:81:1b:01:83:e3:68:28:af:09:a5:c8:14:70:
e9:80:90:5a:27:d9:cc:31:bf:2c:3d:ec:f7:47:f6:
ad:d3:19:67:b1:b0:1d:05:b1:b9:ed:67:aa:7c:d2:
4d:87:db:b0:ad:e4:10:25:c9:49:ac:c2:03:32:cb:
76:3b:e2:d1:78:5e:4b:6f:af:3d:0a:74:1d:39:50:
bb:a2:c1:90:fc:33:37:96:87:6f:ba:7d:9e:af:8d:
a2:f5:ef:74:2e:6a:65:d2:1e:aa:88:91:29:19:6b:
61:77:21:c7:b6:45:b0:0a:0f:83:8d:1f:46:b5:ed:
1d:b9:1b:bf:8b:3d:6e:a6:c6:d5:15:ce:35:4c:2c:
59:fd:4f:85:44:7a:9f:a9:6f:0a:5c:45:79:de:71:
34:93:ce:ae:e5:91:b9:4b:16:46:0a:04:49:c2:80:
ef:db:ca:d7:88:e7:de:dc:d1:7d:28:52:4d:dc:f7:
49:4d:0d:50:31:98:59:47:7d:66:df:4c:63:2e:ef:
8c:63:70:24:95:05:ed:94:cb:2b:48:45:b9:e1:6f:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:82:1D:65:F3:7A:AB:CE:E7:58:11:D2:F2:3F:92:97:C3:6E:D8:AA
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f9:58:70:1a:75:64:a0:c3:77:ce:14:22:19:e6:9d:62:d4:
97:1d:8b:e0:ba:9c:ec:15:34:16:3c:42:a9:2e:93:2f:1a:ba:
c8:d1:ba:7e:1f:ca:f2:b1:9d:96:0d:d8:e0:a1:05:21:64:2b:
0f:e0:e3:31:89:4c:c1:e4:09:4e:2e:92:a5:b7:ff:53:68:75:
8a:d0:d3:06:c3:00:06:13:62:09:5c:db:9c:f3:91:95:1a:b3:
2b:8d:0f:26:07:ed:4d:79:f9:38:62:26:c2:d6:bd:db:11:73:
d5:6e:f2:5a:8f:df:62:b2:e5:62:81:2a:a7:41:98:75:62:52:
de:ad:88:8d:a8:81:ea:63:a3:a9:1e:2f:4d:86:4f:ef:16:a1:
0b:9c:25:19:58:11:f3:b0:f6:a4:dc:48:46:f3:ac:f9:37:75:
19:54:e9:f6:df:28:6a:e4:6d:c4:8f:a3:bc:ff:16:9e:ed:0d:
36:7a:af:a6:db:06:5f:d1:6e:fd:2c:be:dc:39:2c:7c:84:65:
c5:f6:24:f5:fa:02:3a:ca:cd:04:f3:98:2d:c7:eb:d2:53:32:
ab:b2:34:57:18:65:8a:b3:8c:76:f5:ac:3c:47:5d:7b:ce:34:
80:b4:95:8a:c9:1e:36:5c:9e:59:cd:ed:0f:33:7d:9b:80:5c:
f2:93:54:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9gQ+qwxqTJeh++BtujiQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDgxZGQ5MGQxMDBiZDViYzIzYzA0YjEwYzBhODQzMWNj
OWE1YjUwHhcNMjYxMDE1MDMwMDMwWhcNMjYxMDE2MDMwMDMwWjAzMTEwLwYDVQQD
EyhmNTgyMWQ2NWYzN2FhYmNlZTc1ODExZDJmMjNmOTI5N2MzNmVkOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOAE/02zk/pUbFvWDZ2DgrxlGHp1
ygPkATSDKokxQ+89KW+8frpYhw1B15j0yoEbAYPjaCivCaXIFHDpgJBaJ9nMMb8s
Pez3R/at0xlnsbAdBbG57WeqfNJNh9uwreQQJclJrMIDMst2O+LReF5Lb689CnQd
OVC7osGQ/DM3lodvun2er42i9e90Lmpl0h6qiJEpGWthdyHHtkWwCg+DjR9Gte0d
uRu/iz1upsbVFc41TCxZ/U+FRHqfqW8KXEV53nE0k86u5ZG5SxZGCgRJwoDv28rX
iOfe3NF9KFJN3PdJTQ1QMZhZR31m30xjLu+MY3AklQXtlMsrSEW54W/TdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWCHWXzeqvO51gR0vI/kpfDbtiqMB8GA1UdIwQY
MBaAFHJIHdkNEAvVvCPASxDAqEMcyaW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2Qt
ZjE5OTBiMGM3MDVhLzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2QtZjE5OTBiMGM3MDVh
LzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/lYcBp1
ZKDDd84UIhnmnWLUlx2L4Lqc7BU0FjxCqS6TLxq6yNG6fh/K8rGdlg3Y4KEFIWQr
D+DjMYlMweQJTi6Spbf/U2h1itDTBsMABhNiCVzbnPORlRqzK40PJgftTXn5OGIm
wta92xFz1W7yWo/fYrLlYoEqp0GYdWJS3q2IjaiB6mOjqR4vTYZP7xahC5wlGVgR
87D2pNxIRvOs+Td1GVTp9t8oauRtxI+jvP8Wnu0NNnqvptsGX9Fu/Sy+3DksfIRl
xfYk9foCOsrNBPOYLcfr0lMyq7I0VxhlirOMdvWsPEdde840gLSViskeNlyeWc3t
DzN9m4Bc8pNUqQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:05:44 2026 by rpki-client