Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: 5vxBxHiDxHKh0UIQs3dG6XV45P48POFDAh7l1pvthDA=
Subject key identifier: 9B:94:20:DC:2D:47:E3:2D:DE:AC:23:44:67:F3:4A:EF:E6:C7:66:31
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 01A13B928616FF350AF4956B73BD4BBE37BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 19E7
Signing time: Wed 14 Oct 2026 18:00:20 +0000
Manifest this update: Wed 14 Oct 2026 18:00:20 +0000
Manifest next update: Thu 15 Oct 2026 18:00:20 +0000
Files and hashes: 1: NvNBBzczdvedzfA0zmq_oqTjNy0.roa (hash: aNRFQnk32ELUJc2di3VPfCYAy8SNGZZzchv0G1guk1k=)
2: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: PIlxSZCuoURpwb29DpcKEWjboEuMdAkzvRk/x+sKtOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:92:86:16:ff:35:0a:f4:95:6b:73:bd:4b:be:37:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Oct 14 18:00:20 2026 GMT
Not After : Oct 15 18:00:20 2026 GMT
Subject: CN=9b9420dc2d47e32ddeac234467f34aefe6c76631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:93:8b:ed:54:97:fb:91:68:f5:dc:0e:0f:
54:3a:f1:3c:bb:26:28:7f:37:94:07:c4:df:c0:70:
f3:2a:91:9a:82:06:63:ec:6f:db:6a:38:ae:df:7c:
e6:c4:e5:ac:47:df:f4:e0:f5:d4:d5:fb:57:f5:fc:
16:07:c3:cf:7e:dd:c5:0c:0a:0f:93:cc:e4:70:c7:
f7:af:f6:1f:83:17:1e:41:96:74:a5:e9:c3:f9:fb:
86:8a:c9:e6:4d:34:98:51:74:e1:e5:3e:7f:2c:51:
5a:2c:92:01:93:03:29:9b:15:df:13:e0:4f:95:d7:
2c:bd:6a:f6:93:4b:df:35:b9:b0:6b:38:bf:47:e5:
42:4a:12:52:7e:3b:56:82:cb:85:eb:49:d2:6f:a3:
6a:b8:8c:66:99:b6:fd:1f:78:29:2d:a6:c9:e9:99:
a8:43:96:6d:d4:cd:15:6a:32:3e:b0:44:36:e6:2a:
85:cc:94:ec:43:e0:17:0c:e8:b9:60:f3:26:dc:1e:
9c:85:44:97:b5:be:db:dd:aa:30:5a:10:25:6e:c3:
0a:37:a5:3e:61:5b:88:21:66:a8:d0:31:66:df:e7:
3a:cc:6f:96:11:77:92:6c:e1:73:f2:38:f7:e4:76:
5e:61:fc:d3:2f:e7:cb:16:ed:c4:64:eb:33:85:64:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:94:20:DC:2D:47:E3:2D:DE:AC:23:44:67:F3:4A:EF:E6:C7:66:31
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:36:23:a5:75:66:56:62:0c:1f:d0:e4:59:d5:2e:cf:ca:17:
68:0a:d1:0b:99:82:df:ff:2c:98:0b:bb:0b:d2:c2:f6:95:93:
2c:4e:b4:f5:62:7a:fe:15:bb:95:bc:07:fe:42:69:5a:83:c3:
b5:ca:dd:3c:89:79:e5:f1:a5:68:30:0d:41:19:9c:86:7b:8f:
37:db:39:5f:13:a7:e2:6e:36:bd:a4:60:94:ff:71:fd:fd:8b:
25:3d:b2:d6:76:3d:cb:7e:82:76:e3:e2:b3:bf:72:44:9a:85:
ef:e7:57:3d:e0:c6:92:db:02:f7:4e:8f:6f:2d:5b:81:a9:69:
a6:34:62:0e:52:20:6e:2b:0f:08:43:30:fb:10:ef:5d:60:11:
85:ac:c7:11:86:eb:25:d6:84:d8:77:56:52:a4:6a:ea:b8:c6:
e8:50:c1:f1:85:7c:c6:3b:25:35:bb:d3:b1:3c:3e:0a:6f:7e:
12:65:2a:5d:ce:ae:d5:ec:6a:54:77:ec:94:a6:b9:3d:8c:04:
3a:e6:9f:81:b0:60:d6:f0:fe:61:06:2d:38:69:70:d6:3c:d7:
af:44:8d:9b:51:e1:b7:7a:92:03:39:73:be:09:cb:89:17:43:
ed:5f:50:4d:b9:67:b6:d2:87:eb:ca:57:93:fa:88:b6:43:ee:
b5:f7:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:33:15 2026 by rpki-client