Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
File: CkJzuedRDQGfLFMps_NOrvKuvKY.mft (raw, json)
Hash identifier: FL3UnFEltCLemokUGuMnuNoCliowIQlerSOlplgLZbg=
Subject key identifier: 45:8D:53:F3:34:EC:9A:04:3D:EA:A8:F5:61:40:36:D7:07:01:C8:1F
Authority key identifier: 0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
Certificate issuer: /CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Certificate serial: 019DA567418661A0C4877CAE9110C79DE1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
Manifest number: 38
Signing time: Sun 19 Apr 2026 11:01:40 +0000
Manifest this update: Sun 19 Apr 2026 11:01:40 +0000
Manifest next update: Mon 20 Apr 2026 11:01:40 +0000
Files and hashes: 1: CkJzuedRDQGfLFMps_NOrvKuvKY.crl (hash: Z85F3odDPBDpMDq4U/lq26KSYGvHM91I95x7QDI9kcA=)
2: yGVHSJihmK5lz-YBtlg1ypGdz5I.asa (hash: LHCOSJtU6LRqO7/ToKVntknxN1V5181fXBdOKoO29NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:41:86:61:a0:c4:87:7c:ae:91:10:c7:9d:e1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Validity
Not Before: Apr 19 11:01:40 2026 GMT
Not After : Apr 20 11:01:40 2026 GMT
Subject: CN=458d53f334ec9a043deaa8f5614036d70701c81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:da:44:26:4c:61:08:a8:c9:22:ed:e3:23:
04:8e:a4:26:ec:3d:4b:89:ff:e7:63:b2:27:bd:cb:
af:7c:3b:12:64:4e:b8:f9:86:56:76:2c:08:d9:14:
25:8c:0c:e6:1f:03:33:0a:d7:f2:ca:3d:f3:bc:42:
66:b0:2b:0d:fe:1e:d7:c8:dd:63:45:a8:2b:5a:25:
ec:71:6c:fc:68:6d:7c:f2:0c:1b:0c:93:83:59:29:
0c:e5:c4:b4:74:d4:ca:10:77:50:9c:3d:bd:be:76:
2c:31:12:79:54:83:a2:bd:5a:54:15:f4:7f:1f:7b:
0a:48:d5:fa:ad:de:02:50:4f:79:f6:7b:a0:b5:c7:
ab:6f:44:da:fd:40:a3:ce:c2:c9:41:c4:f8:29:0e:
b9:c3:b2:0f:74:80:37:49:3b:78:6c:88:51:ab:9c:
b2:3a:9e:9f:9f:95:0b:41:c9:70:fa:80:81:17:cd:
95:ba:5b:26:83:64:a8:70:12:10:9d:c0:57:b6:2e:
d5:30:f7:aa:49:45:78:ec:9f:7e:59:0f:de:1a:fb:
e3:24:a8:69:fe:f3:cd:4c:bc:c4:da:17:c3:7c:8f:
dd:68:1a:9c:68:b1:5b:21:a8:22:93:99:65:41:a0:
57:d3:b7:f8:9d:86:99:9a:31:a3:dd:2c:78:00:61:
81:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8D:53:F3:34:EC:9A:04:3D:EA:A8:F5:61:40:36:D7:07:01:C8:1F
X509v3 Authority Key Identifier:
keyid:0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8c:bc:b5:01:aa:bc:e4:d4:32:16:b9:45:22:40:92:a9:2e:
59:71:96:10:42:03:be:b3:27:18:2c:ec:bf:80:ec:c4:f6:13:
c4:6f:86:3a:f1:f8:b3:17:7a:71:e4:2c:99:ab:fb:2b:af:1b:
86:61:c8:99:52:17:93:2a:ba:c7:0f:6a:01:33:78:2a:05:20:
6e:b1:5f:a9:95:e6:e6:3a:ac:7e:67:a8:58:97:88:09:3a:b7:
97:a5:50:c0:42:e4:9e:88:c0:63:d3:3b:0a:0d:a5:47:45:b3:
21:55:0f:cc:44:d0:94:a2:bb:7b:48:84:54:58:7c:ab:f1:b3:
32:7b:e4:ea:d0:47:61:66:18:28:af:68:a0:c0:2b:6c:eb:8e:
fb:66:1e:5e:19:90:d5:12:b6:fa:ed:b7:f5:7c:a0:95:c5:0f:
fd:6e:ae:dd:b8:f4:b0:2a:13:1a:da:b6:80:65:c2:71:68:6d:
7d:ab:fe:cb:ca:43:85:df:a7:14:83:4c:13:16:2b:6b:0b:6b:
f3:f3:09:08:85:74:75:95:ce:bb:96:e6:52:06:3c:ce:fa:74:
39:54:f5:ad:8c:39:ce:96:e9:cc:83:e9:7e:0b:62:35:39:49:
77:17:cc:a7:fe:63:db:be:c0:77:99:f8:77:f6:5e:18:43:f2:
d7:8c:00:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:57 2026 by rpki-client