Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: 12RUqAJW0mZJU8eYEjkvHx4TMSAYMZShXgmLlohL1cA=
Subject key identifier: 41:9F:B6:29:70:06:2C:19:53:8A:5B:AF:3D:45:9C:42:74:BD:87:0F
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 019CABD8F7BBF33CE09E2E9802B8B85F2854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 1787
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: YpSZhok7D_iJk1qiU7Mu_hY8E3Q.roa (hash: NxSxMzYasyCjB5BO8JzAFcBo/KBnMoapQAl4A8Q+rNU=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: Elzwc8FFDhPdMNMT0Tg7Kg/3AhWsNEDNLOuOla19AnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f7:bb:f3:3c:e0:9e:2e:98:02:b8:b8:5f:28:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=419fb62970062c19538a5baf3d459c4274bd870f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:4f:d9:72:28:55:65:9b:59:55:f5:c8:58:
d9:32:c8:37:5a:0c:9c:b1:ae:23:8e:1b:d3:7b:13:
24:6e:b4:cf:ba:3f:c4:05:e3:2c:ea:ce:d4:b2:aa:
db:fe:6c:b4:86:87:06:b6:29:a7:e5:a2:a2:00:74:
57:a2:3c:07:05:11:15:0a:66:91:c9:9e:f9:15:0d:
db:7b:90:2a:cb:2e:dc:62:c6:d8:d7:89:0c:32:d1:
02:a4:bb:36:1e:10:12:c4:a2:7b:bb:3c:13:c8:3b:
48:21:46:7b:05:3b:84:3f:9b:19:68:26:3d:e5:7f:
35:f8:f8:9b:2f:9b:ca:62:40:ac:70:ba:e7:01:b2:
42:f7:91:6d:97:2a:57:35:9e:35:3d:fb:83:29:71:
02:29:12:30:63:bb:3a:25:b3:6e:4a:1a:79:3e:bd:
20:39:9a:85:9a:57:73:d7:d4:ce:e8:2e:a4:4a:76:
5b:c2:d6:8d:68:af:65:67:55:f5:e7:ce:a2:2c:75:
86:2b:44:53:bc:3d:7a:66:98:f3:08:8b:ae:32:83:
20:20:75:87:4c:db:0c:12:57:4c:6e:7b:cf:51:bc:
78:bc:4b:5c:fc:fb:bc:ee:49:5b:11:24:9b:0b:d2:
f0:27:8a:6d:5f:1f:af:c7:7f:4b:4e:9b:71:19:05:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9F:B6:29:70:06:2C:19:53:8A:5B:AF:3D:45:9C:42:74:BD:87:0F
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a5:c0:1d:ff:60:2c:21:5f:b5:45:81:93:87:1c:16:ef:c0:
28:cc:31:38:50:e2:3f:8f:27:46:1a:b8:21:df:f2:1d:f7:36:
f7:f4:03:31:5a:4e:15:c3:ca:c5:8b:e2:30:a9:dd:45:d1:b2:
0f:9d:95:c1:fa:0d:c9:ac:69:1e:1b:f1:b3:15:2d:d8:60:ec:
01:c9:5e:1f:52:67:4d:97:65:c5:bc:bb:63:ca:4c:6b:b3:83:
59:33:41:28:f1:7c:10:10:f5:07:97:d7:67:1c:d6:83:71:34:
f2:f2:5c:1b:53:a8:9f:1e:45:ca:4b:16:c5:26:dd:d5:fa:87:
22:a5:08:3f:a8:63:0b:0a:29:05:1b:cb:87:71:5a:e2:3c:01:
92:e8:83:ca:89:48:53:58:76:77:4d:3c:77:ad:5a:26:2a:c3:
2e:e6:01:dd:59:a7:e6:88:17:a7:95:45:13:42:37:7c:c8:ab:
34:e6:29:f4:da:aa:69:7c:74:ad:b9:fe:2c:dc:90:d7:fa:77:
fb:e3:e5:4c:db:9a:59:dd:32:2a:1d:c2:4c:79:cd:20:b8:23:
ed:38:78:14:7e:f0:20:38:cb:7f:e5:07:b0:e5:2d:cd:12:0b:
06:60:2e:30:9b:c9:92:0f:cb:5c:ca:e3:34:53:35:e5:35:87:
a2:78:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:09 2026 by rpki-client