Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: eGDgvhnYUi41RTBE6CMp3DgkJdUiaZfCDm4bpOJlGxM=
Subject key identifier: 2D:B1:11:57:8F:FD:6E:32:F9:BB:13:73:92:DA:F2:C7:6D:EF:8E:A2
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 019D97743A9E0447703509C01C51657E8FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 1801
Signing time: Thu 16 Apr 2026 18:01:09 +0000
Manifest this update: Thu 16 Apr 2026 18:01:09 +0000
Manifest next update: Fri 17 Apr 2026 18:01:09 +0000
Files and hashes: 1: YpSZhok7D_iJk1qiU7Mu_hY8E3Q.roa (hash: NxSxMzYasyCjB5BO8JzAFcBo/KBnMoapQAl4A8Q+rNU=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: Z+evvg1dXHFoisFtnVX26VAvt5OG+OawdjCs1y+Z+ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:3a:9e:04:47:70:35:09:c0:1c:51:65:7e:8f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Apr 16 18:01:09 2026 GMT
Not After : Apr 17 18:01:09 2026 GMT
Subject: CN=2db111578ffd6e32f9bb137392daf2c76def8ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:18:50:03:4e:aa:f3:2b:24:d0:de:9f:5f:
bd:95:72:20:a2:56:e2:ad:9a:90:96:96:8f:65:c8:
51:f8:4d:a8:db:5d:a7:39:2e:bf:61:e6:27:fc:8a:
80:a3:0f:2b:02:11:2a:78:d3:fe:bd:6b:d0:30:8b:
4c:e1:22:c6:b8:88:a6:cb:b1:70:d3:20:ed:02:f2:
68:35:ab:91:21:d3:0c:db:d6:45:f6:8d:ab:f3:b8:
2e:4c:c6:7e:44:45:3b:e6:17:e4:c9:b6:2c:28:78:
10:19:d7:3b:0a:0b:e5:81:ce:b4:02:19:ab:1f:ea:
07:f6:a1:2f:b6:09:3b:64:c6:e0:27:0b:34:09:68:
79:76:c1:f8:fd:57:bf:2c:d7:e2:79:8a:35:4b:a5:
e8:0f:48:7b:97:23:59:be:54:e3:59:b6:9f:dc:e0:
2d:3e:a1:08:5e:94:a1:95:bd:e1:11:f9:6a:4e:c7:
69:57:8b:75:c0:53:2e:29:26:f3:ff:08:ca:7c:57:
17:78:a2:77:df:be:23:8e:e0:17:ca:9e:7d:a6:55:
43:64:33:a6:9c:cf:57:fc:8f:8f:00:99:96:34:a1:
e5:92:b8:47:8a:e4:c1:ae:d8:81:e0:83:17:c4:3f:
5b:6a:b2:30:a1:9e:e7:87:a3:2c:16:c3:02:f3:e3:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:11:57:8F:FD:6E:32:F9:BB:13:73:92:DA:F2:C7:6D:EF:8E:A2
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c1:0f:72:df:be:57:80:f7:7e:20:37:4d:13:aa:ae:a8:4e:
d2:80:bb:42:c0:ea:f7:df:00:6d:ba:42:fb:4b:25:ac:1d:35:
55:7a:94:86:4f:24:7f:93:81:fe:c7:a9:96:10:8d:11:63:50:
d1:4d:3f:a6:73:f9:ca:e5:7c:a2:24:f5:10:5e:81:f8:c0:67:
23:3a:fe:c6:d5:2f:40:40:4b:6b:8c:66:36:f3:a6:49:fe:51:
84:66:9f:bd:1a:bb:83:12:e0:e0:81:7a:31:79:a5:d8:7f:47:
8f:d7:af:12:96:08:9d:20:47:d4:0a:0f:80:29:f3:62:36:2c:
f3:70:25:d1:b9:17:fa:88:24:65:79:9a:68:82:0e:00:16:18:
e0:68:04:89:4e:df:88:16:98:36:53:e8:5a:09:be:3d:22:b2:
60:20:9a:c2:e3:df:ab:4c:b5:4e:1b:e6:a4:25:6a:40:00:45:
ec:38:42:05:f4:d2:5a:6f:2f:30:bd:c6:8b:b4:bc:17:6e:62:
3b:38:65:49:75:cd:d5:cf:03:b0:86:52:8a:db:85:28:6f:8e:
0f:b9:bb:7a:67:b7:f9:32:15:76:17:8c:dd:2e:34:4d:2c:70:
02:55:6e:54:75:c8:9e:42:6f:b9:9b:fe:39:e9:1a:26:ea:36:
de:56:d6:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XdDqeBEdwNQnAHFFlfo/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDI2YzNkMTFjOWYyNGFjYzBhMWQ4NDU0Y2JjOTYwNDg2
NWE4MDkwHhcNMjYwNDE2MTgwMTA5WhcNMjYwNDE3MTgwMTA5WjAzMTEwLwYDVQQD
EygyZGIxMTE1NzhmZmQ2ZTMyZjliYjEzNzM5MmRhZjJjNzZkZWY4ZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tUYUANOqvMrJNDen1+9lXIgolbi
rZqQlpaPZchR+E2o212nOS6/YeYn/IqAow8rAhEqeNP+vWvQMItM4SLGuIimy7Fw
0yDtAvJoNauRIdMM29ZF9o2r87guTMZ+REU75hfkybYsKHgQGdc7Cgvlgc60Ahmr
H+oH9qEvtgk7ZMbgJws0CWh5dsH4/Ve/LNfieYo1S6XoD0h7lyNZvlTjWbaf3OAt
PqEIXpShlb3hEflqTsdpV4t1wFMuKSbz/wjKfFcXeKJ3374jjuAXyp59plVDZDOm
nM9X/I+PAJmWNKHlkrhHiuTBrtiB4IMXxD9barIwoZ7nh6MsFsMC8+MfdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2xEVeP/W4y+bsTc5La8sdt746iMB8GA1UdIwQY
MBaAFHJCbD0RyfJKzAodhFTLyWBIZagJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYt
YmU5MGIwZmQxZjc4LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYtYmU5MGIwZmQxZjc4
LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8EPct++
V4D3fiA3TROqrqhO0oC7QsDq998AbbpC+0slrB01VXqUhk8kf5OB/seplhCNEWNQ
0U0/pnP5yuV8oiT1EF6B+MBnIzr+xtUvQEBLa4xmNvOmSf5RhGafvRq7gxLg4IF6
MXml2H9Hj9evEpYInSBH1AoPgCnzYjYs83Al0bkX+ogkZXmaaIIOABYY4GgEiU7f
iBaYNlPoWgm+PSKyYCCawuPfq0y1ThvmpCVqQABF7DhCBfTSWm8vML3Gi7S8F25i
OzhlSXXN1c8DsIZSituFKG+OD7m7eme3+TIVdheM3S40TSxwAlVuVHXInkJvuZv+
OekaJuo23lbWRA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:53 2026 by rpki-client