Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: I8LnvV19LAi5t6Mu7bO5CUoea8u1ggwi4QCG5Ugmdrk=
Subject key identifier: 62:78:65:A1:8D:35:06:ED:AF:38:88:B3:A1:04:37:8D:1C:9B:58:83
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 019ED574F2C6BFF08CF0B25D1EADB9DB3517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 18A9
Signing time: Wed 17 Jun 2026 12:01:11 +0000
Manifest this update: Wed 17 Jun 2026 12:01:11 +0000
Manifest next update: Thu 18 Jun 2026 12:01:11 +0000
Files and hashes: 1: NvNBBzczdvedzfA0zmq_oqTjNy0.roa (hash: aNRFQnk32ELUJc2di3VPfCYAy8SNGZZzchv0G1guk1k=)
2: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: aMh3rvqcQuT9M3E433wOP5tDPD16Ry71R2+rIh6NRaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:74:f2:c6:bf:f0:8c:f0:b2:5d:1e:ad:b9:db:35:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Jun 17 12:01:11 2026 GMT
Not After : Jun 18 12:01:11 2026 GMT
Subject: CN=627865a18d3506edaf3888b3a104378d1c9b5883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:51:93:a2:cf:88:b0:b7:84:5b:2e:c9:aa:
6c:c7:c7:90:09:da:12:a8:6d:53:1e:30:e8:8c:fe:
af:87:5a:37:f9:85:24:dd:44:77:da:bf:f4:c7:b3:
d8:71:1c:ca:fa:55:17:60:25:e6:6b:b4:15:1d:eb:
33:39:fe:4e:5c:f3:82:10:2d:9d:1f:86:a6:da:57:
f8:6f:05:21:cc:3a:36:a3:a3:ca:79:72:1d:d9:d3:
a6:4d:1d:d3:95:99:51:53:19:b4:bf:6a:bf:46:a2:
ab:29:7f:ed:1c:c1:ec:1b:11:85:3c:66:af:e8:2e:
31:d4:98:9e:45:df:6e:cc:96:b6:dc:df:29:86:58:
1a:d8:00:57:ea:0e:a5:2b:ab:37:23:00:dd:19:77:
67:18:f4:12:87:c0:b4:04:bc:e0:dc:e1:23:54:82:
f9:3c:26:7f:37:54:21:b5:03:97:9b:19:98:06:1f:
e8:21:c3:a7:95:34:e5:cf:d1:cc:3d:a0:9c:ba:ec:
18:47:0f:08:6a:4b:44:78:3c:43:ea:e8:34:e0:42:
67:a3:0c:43:28:f5:70:9a:ae:58:e2:64:44:a3:81:
b2:84:81:ff:d7:b9:08:c2:81:e1:c1:85:6d:2f:0d:
18:2b:ef:59:5b:3d:ef:39:a6:46:be:d2:12:3f:2d:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:78:65:A1:8D:35:06:ED:AF:38:88:B3:A1:04:37:8D:1C:9B:58:83
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9f:52:f7:72:d9:e6:74:67:b0:03:06:46:7b:9b:aa:c0:bc:
1a:f9:ad:53:a4:57:f4:8b:d4:98:76:65:3c:fe:fd:67:bd:f7:
88:7b:ca:a2:e6:16:02:29:5f:0f:77:e1:05:88:c7:42:3d:e7:
a5:7f:1d:29:77:46:15:78:11:bb:1c:a5:d0:f2:1e:ba:53:f5:
28:8b:a9:6d:2c:c7:74:b7:0b:ee:48:e9:66:74:8b:50:6d:9f:
ad:0a:ba:bf:24:e3:6c:e3:2e:30:de:19:ab:a9:bd:83:63:c1:
cf:6d:8e:89:75:57:cc:c4:a4:5b:77:b5:92:02:72:fa:94:11:
c0:43:13:38:ec:a9:b4:ca:22:5f:fa:b7:db:40:c7:56:f4:8c:
80:c6:cf:f2:11:35:c2:a7:e6:df:68:4b:80:db:6c:82:8b:0f:
54:d4:a3:3a:d1:79:f7:13:c5:07:f7:6f:81:12:85:ed:13:ed:
5d:5c:04:b1:8a:19:73:c7:c2:6e:eb:bb:d9:23:f7:88:5b:13:
20:db:51:f0:f1:5c:d7:63:4f:c3:1e:a3:ae:d3:5e:d8:bf:44:
21:98:9d:c5:a9:4c:de:35:49:e3:e0:66:33:d0:a9:f0:99:1d:
15:8f:c7:97:89:51:d1:c7:c3:e1:d1:73:ed:af:4b:ee:9c:9a:
33:41:66:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:19:00 2026 by rpki-client