Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json)
Hash identifier: An0RphjeZ0I0NnJNOVv66oCByseGo5GSg03Vsr1F3kA=
Subject key identifier: FB:E4:45:85:B0:96:78:34:1E:1C:C5:22:14:7D:B6:23:20:DC:F8:0A
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial: 019DA3AE98B44FB2B2DC2076B581E32E5F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
Manifest number: 151F
Signing time: Sun 19 Apr 2026 03:00:21 +0000
Manifest this update: Sun 19 Apr 2026 03:00:21 +0000
Manifest next update: Mon 20 Apr 2026 03:00:21 +0000
Files and hashes: 1: YHvvyK4ZKR8SZ6aC_FLps6Aqe0s.roa (hash: gm42s7vK+4MOMqCS31qZX96qjCMC7m5X5ZwK72bSkdc=)
2: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: jWZVgic7L0q96xzYcpYtpocUwAZV7YUJsiDIqpe+sZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:98:b4:4f:b2:b2:dc:20:76:b5:81:e3:2e:5f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Validity
Not Before: Apr 19 03:00:21 2026 GMT
Not After : Apr 20 03:00:21 2026 GMT
Subject: CN=fbe44585b09678341e1cc522147db62320dcf80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:86:18:bd:fc:42:5c:15:e7:06:f5:38:41:
c0:13:0b:6f:85:0c:49:96:74:48:45:37:a0:01:b3:
0e:72:3c:69:f6:fc:ba:22:e7:0b:dd:7c:73:38:24:
60:13:f0:2f:5f:b9:b0:ec:ff:86:a9:0b:2a:80:09:
88:a7:5b:1b:be:35:d1:e6:f8:91:64:d2:01:6b:0a:
34:40:9e:8a:77:a8:7a:33:90:7a:6d:2b:7f:ff:82:
e8:b0:f3:3b:23:8e:fa:4c:70:3e:e3:b0:8f:e9:4e:
b4:d9:0a:c5:f6:64:f0:1d:0f:d5:4e:81:f7:85:ee:
45:ec:8b:77:f3:78:04:80:52:46:c2:79:fd:dd:3f:
24:ed:39:b4:54:20:1c:92:f3:82:35:3c:01:75:25:
64:d1:3b:9e:7c:2d:ca:48:aa:7e:cf:40:fc:81:37:
89:87:14:f5:a4:6e:1d:e1:3f:88:52:a7:a9:34:ec:
25:dc:6b:f6:15:13:4f:69:dc:5b:d9:ed:d1:c1:1c:
fa:8a:67:d8:07:29:82:a6:e6:ba:69:77:68:9d:86:
30:73:3a:eb:bf:7b:25:1e:34:64:e5:44:7f:6a:6e:
82:b7:d0:26:d5:0e:c4:fa:d7:23:72:a2:ab:13:75:
4c:41:6b:0f:9b:6a:72:58:28:8f:46:5d:32:18:3c:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E4:45:85:B0:96:78:34:1E:1C:C5:22:14:7D:B6:23:20:DC:F8:0A
X509v3 Authority Key Identifier:
keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:36:e9:37:f2:a6:48:5b:82:92:50:97:d6:f7:04:63:2d:a4:
96:15:8b:ca:dd:0d:bf:a7:e8:36:9c:2f:1a:8c:94:9a:52:ca:
dc:76:2e:fb:f8:73:22:14:d4:5f:09:39:0a:bc:ec:a9:c6:98:
c9:14:41:15:13:d1:0b:42:1e:67:ba:94:de:b0:27:5c:6e:fb:
59:a9:f5:c4:a1:56:48:de:40:c6:ff:60:74:6c:5c:ad:cc:b9:
51:39:cc:fc:1a:f9:d0:1a:f4:b4:5a:40:76:af:b8:a7:bb:a2:
9a:89:88:d1:73:44:e4:4d:91:2a:ef:86:aa:cb:11:76:bd:e4:
2c:d6:91:fe:2e:81:70:5e:04:af:fd:1b:4f:73:91:cc:3a:38:
ce:4c:2d:1b:a8:0b:08:69:84:56:59:9a:2e:2e:bb:a8:72:c1:
57:11:a5:73:65:68:2e:33:78:c7:1a:25:f3:18:44:d2:c4:4b:
1e:06:fd:92:56:7f:d6:ea:88:70:8f:bc:9f:38:c4:fc:3b:5a:
53:34:b3:96:95:56:1e:51:99:f3:ad:3c:a4:f4:30:a4:6e:e4:
82:26:6b:34:fe:93:dc:f5:a2:c9:83:e7:7a:a4:6f:6a:b2:11:
67:28:cd:8a:cb:81:4a:19:58:5c:86:3d:22:c0:d9:23:82:2c:
34:9b:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:41 2026 by rpki-client