Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
File: CkJzuedRDQGfLFMps_NOrvKuvKY.mft (raw, json)
Hash identifier: Es7iykFK68PTTSqnPdkSzOxN2bDzsSI7aEv7ebyiOYI=
Subject key identifier: 69:4C:0E:C2:D2:34:4F:CB:D8:09:90:39:20:B8:FB:E8:60:14:E1:E0
Authority key identifier: 0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
Certificate issuer: /CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Certificate serial: 01A0BF1E48C98F6639BECBAC2A427BADF9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
Manifest number: 01D3
Signing time: Sun 20 Sep 2026 14:00:27 +0000
Manifest this update: Sun 20 Sep 2026 14:00:27 +0000
Manifest next update: Mon 21 Sep 2026 14:00:27 +0000
Files and hashes: 1: CkJzuedRDQGfLFMps_NOrvKuvKY.crl (hash: luetF2zJBh5wKAbedDOF73wAV/wU32jipUz4uIMbUHg=)
2: yGVHSJihmK5lz-YBtlg1ypGdz5I.asa (hash: LHCOSJtU6LRqO7/ToKVntknxN1V5181fXBdOKoO29NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:48:c9:8f:66:39:be:cb:ac:2a:42:7b:ad:f9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Validity
Not Before: Sep 20 14:00:27 2026 GMT
Not After : Sep 21 14:00:27 2026 GMT
Subject: CN=694c0ec2d2344fcbd809903920b8fbe86014e1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:0e:f3:2c:f8:21:be:e6:af:eb:45:ae:84:
3c:3d:14:63:3c:01:83:b4:d9:e3:a8:a3:f5:fb:d0:
db:33:01:c3:7a:0a:cc:75:b5:30:21:8f:7b:58:0f:
c8:0b:28:9b:39:9e:2d:fe:6b:e0:8e:7d:54:2c:21:
ac:16:4f:81:48:bf:39:41:c2:ec:15:b8:cf:99:e6:
23:ec:3a:85:c5:ed:5f:33:90:a7:ae:a6:ae:6d:24:
ac:a3:bd:9c:4d:82:c6:63:69:5e:32:fa:5d:8b:10:
38:65:13:66:75:a3:72:89:69:24:0d:42:bc:88:96:
f8:b5:59:47:07:1a:74:dc:19:59:2c:ea:a8:02:b9:
46:33:45:40:98:1a:48:ff:fb:6f:0c:a4:88:6a:f4:
da:f5:32:76:3d:26:38:8d:13:6a:3e:8a:2e:78:ad:
60:3f:94:a9:c9:c6:17:10:b8:5a:ff:44:42:a7:7a:
31:a0:12:f6:f5:ff:f9:7c:64:c2:18:8f:86:ec:32:
41:d7:69:05:83:67:10:a8:17:60:5c:63:8a:20:cc:
e7:ad:59:c1:31:63:82:90:62:c2:32:aa:f7:ff:9a:
4d:64:8a:dc:d5:b0:a3:cf:a7:a0:84:e9:aa:6d:c3:
78:ed:fb:cb:11:e4:7e:7f:a2:02:d0:12:4b:d9:af:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4C:0E:C2:D2:34:4F:CB:D8:09:90:39:20:B8:FB:E8:60:14:E1:E0
X509v3 Authority Key Identifier:
keyid:0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a6:5b:20:06:b2:c1:b9:98:6c:b3:bb:67:79:8a:7e:d9:49:
55:3c:4c:6f:67:bc:a4:48:48:13:59:26:fb:09:92:69:ee:c7:
24:8b:9d:8e:b2:e7:62:ae:04:ac:0d:bc:fa:05:ea:43:e0:6a:
81:6a:3c:e6:16:4d:f8:0b:22:f5:e3:37:f9:2b:5b:6d:74:3b:
74:15:8c:da:63:83:82:6a:c5:07:90:4d:11:7e:a4:dd:38:7c:
81:de:a2:3b:4f:25:06:b4:6d:10:9f:b0:df:ce:ad:8a:fa:5e:
14:99:fa:0b:d3:81:25:24:b5:d3:c7:f7:e9:ef:b6:a7:c1:4f:
e8:40:47:0e:27:9d:b0:a2:4c:03:75:85:6a:7c:18:81:05:eb:
fb:4f:41:a3:73:f9:a0:ef:24:ad:e4:a5:10:73:90:74:77:29:
ff:b5:29:c4:df:eb:33:a1:70:13:f5:b9:ac:e1:95:53:a5:6d:
33:71:c7:27:33:cf:73:b5:24:79:fb:72:b6:4b:4d:d1:40:66:
5c:e9:e2:0d:b2:97:66:3f:ad:54:9a:ff:32:9e:b1:f1:e5:8f:
15:c6:1e:b2:e0:a0:2e:74:05:73:a1:c0:76:98:b9:7d:cc:fc:
f3:43:1a:fe:2f:63:dd:4d:20:f6:79:6d:d6:ab:63:32:31:eb:
2f:a8:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:39:52 2026 by rpki-client