Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: LrlXfQ6wRfww9u0CDgx75sQhURG0j7aJsqKJVsQ8fGg=
Subject key identifier: 8A:95:02:CB:31:F4:A6:35:22:51:64:E3:8A:D9:52:75:7F:25:6C:C1
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 019D9BBF340F579AAEC4139A26F31E6CEDBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 14:01:32 +0000
Manifest this update: Fri 17 Apr 2026 14:01:32 +0000
Manifest next update: Sat 18 Apr 2026 14:01:32 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: d4mcvNRpLBO7OBg0vH3bdVt2hFZe1VVT9F3yo2zF2Y0=)
2: cDoC-jSYN7u0frpLx2bXUSxluu0.roa (hash: 0c+KBOgKhiecSN5vnMV9D8GmEY0jyIF5LXtXoNSNf7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:34:0f:57:9a:ae:c4:13:9a:26:f3:1e:6c:ed:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Apr 17 14:01:32 2026 GMT
Not After : Apr 18 14:01:32 2026 GMT
Subject: CN=8a9502cb31f4a635225164e38ad952757f256cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:39:1e:a0:a6:03:2a:cb:a1:25:36:51:81:
f8:4e:52:c3:b6:1d:a7:6b:aa:a3:76:64:5c:5d:c7:
76:3b:e5:11:1a:07:ff:f3:ff:ce:e9:c3:0b:46:d5:
3b:ae:0d:bb:ca:05:08:b9:57:3a:c7:bf:be:13:cf:
5c:95:53:8a:2d:a1:c9:5c:1e:25:94:74:1a:d9:0f:
5e:82:aa:b6:ef:ed:ca:08:cc:55:4f:78:8d:39:e4:
dc:d2:8c:a7:3e:36:ad:84:68:7e:bf:29:9f:50:61:
50:ba:d0:96:d1:c2:19:b0:5a:d8:69:a2:cc:f7:d0:
3e:84:98:1e:90:1d:b3:82:bf:e6:a3:e7:d9:09:a9:
f9:b3:ee:15:ef:94:0e:a3:8f:6c:0c:f0:1b:b2:30:
f7:fe:89:bb:93:89:2e:6d:92:df:2b:dc:37:11:b4:
4f:a5:53:f0:2c:3e:c7:e4:f6:f3:f0:a9:32:78:e6:
d0:65:bd:42:48:97:02:e5:ed:7f:6e:56:f1:fc:e9:
5d:fc:2e:8b:bf:50:9c:1c:cd:a6:44:ba:dd:35:8e:
0b:6e:55:4b:b4:c6:9b:9c:53:87:80:6e:05:9d:96:
7d:bd:8c:67:2c:4c:94:46:b9:b3:94:69:d3:42:37:
3b:a4:f6:98:88:76:f3:54:56:95:e5:68:34:80:bb:
80:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:95:02:CB:31:F4:A6:35:22:51:64:E3:8A:D9:52:75:7F:25:6C:C1
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6b:e0:0a:a1:f0:e4:c3:74:96:23:6b:67:2c:c4:f3:01:07:
56:d8:90:d9:d7:51:8f:ea:1d:a4:77:60:ba:c3:ee:f3:c4:4c:
66:9f:0c:a1:85:65:db:59:19:8d:1b:c7:ad:ba:40:39:6e:46:
c1:34:7f:d2:55:37:a9:07:3e:52:ce:ef:a3:f9:38:96:f3:9d:
9d:be:37:7c:41:d5:ec:be:b4:df:9f:95:b5:d4:7a:85:cf:41:
57:ab:4c:54:85:cd:5b:34:0a:3b:d4:94:30:4b:be:63:8a:46:
03:ba:9e:bd:c0:04:3d:47:c4:79:53:0e:0e:1e:6c:64:51:d8:
75:b1:c6:9d:f4:f6:e9:f4:6a:21:bd:a1:f9:30:89:0c:75:01:
2c:de:33:4e:f9:de:51:1f:7e:9c:c0:b7:d4:6c:d3:85:9d:ec:
bc:5d:f2:84:36:11:31:2c:62:ba:12:92:27:8e:a1:76:d4:a5:
d3:04:00:3b:d8:7d:17:eb:70:17:bc:b0:80:1d:94:9d:b5:c5:
9c:fa:e6:5d:33:34:a3:4c:7c:09:e0:7a:c2:62:ee:79:ab:95:
2d:90:29:d8:e9:d6:82:75:61:8f:69:68:b3:cf:06:5b:12:bf:
f1:0e:82:72:ef:ee:81:81:41:5b:6e:58:b5:e3:25:fe:0e:f3:
06:22:9c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:20 2026 by rpki-client