Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
File: CkJzuedRDQGfLFMps_NOrvKuvKY.mft (raw, json)
Hash identifier: naXwV5VSrFUCYbdy0oe9hd4fOC5bNkM8Ze1U64Ho/0k=
Subject key identifier: 3E:EA:0E:B4:59:6D:89:C0:75:77:10:7C:E3:AB:B9:4F:C7:2A:55:B0
Authority key identifier: 0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
Certificate issuer: /CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Certificate serial: 019EBF5B1C669A94AD85973C20C9DFE0EEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
Manifest number: CA
Signing time: Sat 13 Jun 2026 05:01:19 +0000
Manifest this update: Sat 13 Jun 2026 05:01:19 +0000
Manifest next update: Sun 14 Jun 2026 05:01:19 +0000
Files and hashes: 1: CkJzuedRDQGfLFMps_NOrvKuvKY.crl (hash: xW+uinK3Y8aMbUe2m3DxXb52GskYxcTF0t4Htyy6ilQ=)
2: yGVHSJihmK5lz-YBtlg1ypGdz5I.asa (hash: LHCOSJtU6LRqO7/ToKVntknxN1V5181fXBdOKoO29NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:1c:66:9a:94:ad:85:97:3c:20:c9:df:e0:ee:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Validity
Not Before: Jun 13 05:01:19 2026 GMT
Not After : Jun 14 05:01:19 2026 GMT
Subject: CN=3eea0eb4596d89c07577107ce3abb94fc72a55b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:76:3d:cb:9f:70:21:27:08:fe:8f:10:76:
c8:e1:2d:83:25:3a:3d:1d:1c:69:16:25:6f:3b:13:
c9:d8:ea:de:2a:7b:98:3f:06:0c:e9:55:70:f0:ad:
a4:d6:67:25:59:11:60:0b:56:46:c9:0e:23:fa:c0:
8b:53:94:bc:f9:56:41:4d:20:e9:dd:ed:1a:1b:ae:
d0:79:4f:cc:58:43:9d:40:96:3f:a2:6c:3f:f1:3f:
be:5e:ca:4f:c7:3e:30:f0:1a:d3:7b:67:89:85:e2:
cf:a2:3d:bf:48:30:a4:a6:eb:c0:33:43:ea:ae:42:
be:d5:b8:70:e6:53:06:d5:a6:69:b2:7e:9e:eb:15:
0b:89:9a:de:5b:5b:dc:27:4e:de:5b:20:c1:ad:51:
ee:bc:32:b7:5d:a3:81:d5:d0:68:6a:65:3b:41:29:
da:06:b4:08:8f:fb:92:00:49:e7:b5:34:66:98:6a:
a0:9a:93:ac:b8:c7:74:d4:2b:ae:95:7a:26:0e:6d:
17:0b:89:04:9b:30:7c:2b:84:ba:13:7d:e5:16:5f:
98:3b:be:80:a7:cf:91:d6:79:4b:41:30:1e:51:cd:
a1:d3:14:ec:14:5c:1b:73:0a:06:7a:49:68:7a:68:
bf:c5:a7:27:f3:bb:bc:9f:37:6c:6a:48:59:a4:31:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EA:0E:B4:59:6D:89:C0:75:77:10:7C:E3:AB:B9:4F:C7:2A:55:B0
X509v3 Authority Key Identifier:
keyid:0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ad:ae:cb:f7:cb:fe:1d:0f:b6:db:63:71:c3:37:ce:eb:11:
f6:9f:f6:a6:a3:77:1f:fc:d4:8e:c2:93:ae:21:4a:ae:ce:48:
bd:28:f0:c2:f0:a7:23:24:49:04:8d:a4:61:ff:aa:fe:2f:5a:
46:57:49:d0:85:b6:52:e1:44:78:26:53:0d:97:76:2d:61:da:
aa:f5:3f:83:bb:f3:99:c6:98:dc:25:6d:f2:52:49:7f:d7:20:
fe:cc:3f:11:b5:7e:44:8b:5a:a0:b2:b5:e1:8a:b5:4a:bd:5c:
a2:5f:26:22:45:f1:39:3f:ed:90:0b:85:f5:31:dc:f6:4b:e7:
89:13:a6:39:7e:e2:97:5f:af:34:51:ea:01:e4:70:c0:02:89:
fc:e8:a4:53:fd:9c:48:91:8b:9e:a1:f1:e6:08:a9:f8:28:3e:
56:d4:cc:ac:ab:45:ee:44:c3:cb:8c:b9:40:e1:15:53:37:e4:
c8:cc:1b:42:8e:86:eb:84:cc:58:aa:02:a4:f7:05:fb:97:9d:
d2:cc:c9:66:b1:8c:c6:43:6e:d9:2a:b5:b6:f4:62:b8:d2:94:
c4:fb:55:ae:d3:40:09:38:ef:fb:2c:94:d6:d0:f1:5e:c6:57:
c7:23:38:f4:49:fc:43:2d:4f:5a:db:eb:6d:18:1a:a1:e5:72:
c8:30:f1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:44 2026 by rpki-client