Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: WqH7rh//OLDIgr7AUHp0pVOlASO7qIWvh1VxZfIr/xA=
Subject key identifier: A4:8C:E5:2D:A1:EB:59:D3:BF:F3:7B:89:F9:AC:73:E0:9E:23:5C:ED
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 019CAB348113A89990D727C239F0FD9929B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 178A
Signing time: Sun 01 Mar 2026 21:01:10 +0000
Manifest this update: Sun 01 Mar 2026 21:01:10 +0000
Manifest next update: Mon 02 Mar 2026 21:01:10 +0000
Files and hashes: 1: NvNBBzczdvedzfA0zmq_oqTjNy0.roa (hash: aNRFQnk32ELUJc2di3VPfCYAy8SNGZZzchv0G1guk1k=)
2: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: ohP+T2jdSCpC2lHy7PnzuhsxrZeElnJxQOqEZc/mF6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:81:13:a8:99:90:d7:27:c2:39:f0:fd:99:29:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Mar 1 21:01:10 2026 GMT
Not After : Mar 2 21:01:10 2026 GMT
Subject: CN=a48ce52da1eb59d3bff37b89f9ac73e09e235ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:ea:d1:d8:93:87:d3:50:4c:21:21:51:e5:
05:6f:0c:28:5d:e1:b7:ad:6a:2d:4b:3a:24:e6:fd:
2d:8a:bc:dd:77:ff:fa:56:17:9f:ae:9e:27:8a:d9:
93:9f:4d:16:64:47:f3:40:2e:7a:5f:db:06:54:22:
82:67:4e:f2:06:f6:63:70:c5:1e:59:d6:4c:58:0d:
a6:47:cd:0e:c5:10:7b:8c:1a:b6:60:f4:54:d1:50:
aa:03:9c:8d:e1:43:7f:48:fe:c0:02:63:57:dd:23:
93:fd:cd:21:2c:ad:9b:f3:fb:3c:da:6d:92:e3:55:
50:1b:86:10:04:1a:eb:ea:7c:86:7d:d0:40:d3:b8:
bd:8f:02:4a:19:00:18:25:27:87:a5:9b:24:68:c1:
23:ea:80:38:28:1c:18:b4:18:4d:46:9d:84:56:62:
76:7f:02:f8:93:0b:8a:60:dc:24:c9:79:aa:da:39:
96:5e:c9:b1:32:da:02:43:31:b3:c4:ea:4c:ff:1b:
21:5c:eb:a8:e2:bc:02:da:22:3b:c7:e4:0f:a8:4a:
83:ad:c3:58:8f:09:cc:1c:c2:d9:70:86:1e:4d:e2:
6d:3d:cb:0f:f4:ea:60:99:01:4a:d5:2e:ab:0b:fd:
bc:a9:7a:66:9f:ad:fc:94:26:d7:ee:83:bd:10:33:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8C:E5:2D:A1:EB:59:D3:BF:F3:7B:89:F9:AC:73:E0:9E:23:5C:ED
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:26:e0:9d:37:28:2c:2e:72:b7:e9:74:a3:7d:1b:f9:dc:b7:
37:f7:f5:86:6a:a1:9f:79:e0:96:d4:ae:aa:f2:b0:26:7e:c2:
7c:da:67:f4:05:a1:3e:c0:ae:b2:5e:86:30:e9:fd:58:0c:84:
45:ec:39:59:c1:f6:1b:64:ba:34:7b:74:f7:93:61:d3:45:d8:
65:b8:0a:1f:39:f1:b4:07:e8:7b:28:64:db:72:e0:46:2d:7f:
11:b7:55:81:92:02:2f:9e:52:63:81:22:78:28:2e:32:3a:cf:
d0:a6:6b:b7:67:66:98:e5:19:5e:95:b4:48:b3:06:f5:37:9a:
c8:9d:cc:f7:b7:95:0a:1b:28:ba:4f:14:dc:9f:2d:41:f2:57:
04:5c:15:77:a7:43:6f:d2:3e:84:f6:a6:f9:d1:92:fd:cb:ac:
b5:62:26:c7:28:71:89:34:67:70:bd:de:65:3d:e0:df:be:9d:
f6:4d:84:a8:36:34:a3:78:f0:e9:d3:0c:31:24:3f:6f:aa:57:
70:69:85:29:df:ab:99:b1:64:72:fa:3f:f9:4c:08:6a:32:e6:
48:af:40:e3:17:2e:7f:65:c1:96:f3:cc:28:63:93:20:cf:ab:
d3:96:fd:c8:a9:2a:fb:c2:91:09:7d:c1:b9:6c:f6:a8:85:52:
dc:bf:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:38 2026 by rpki-client