Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: I335bpjKK+sSjx8luKPVoV4o53oF0B0Zf7ofFtB7iC8=
Subject key identifier: 09:A1:BC:C2:0C:B5:71:39:12:B9:C6:92:40:91:17:B8:AC:3B:2F:95
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 01A119E240A23829D84451B2316CE15A280E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 1A96
Signing time: Thu 08 Oct 2026 05:00:20 +0000
Manifest this update: Thu 08 Oct 2026 05:00:20 +0000
Manifest next update: Fri 09 Oct 2026 05:00:20 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: Ig5OwopBC21rAK2qCnqa38erg3X6E7619lLefCjpSVc=)
2: cDoC-jSYN7u0frpLx2bXUSxluu0.roa (hash: 0c+KBOgKhiecSN5vnMV9D8GmEY0jyIF5LXtXoNSNf7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:40:a2:38:29:d8:44:51:b2:31:6c:e1:5a:28:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Oct 8 05:00:20 2026 GMT
Not After : Oct 9 05:00:20 2026 GMT
Subject: CN=09a1bcc20cb5713912b9c692409117b8ac3b2f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c4:ff:7c:dd:db:3c:ec:45:11:4c:c2:5b:01:
da:95:6b:be:cc:cf:13:4e:98:38:f6:de:e0:a9:ad:
c2:a7:6b:15:6e:6d:50:d1:17:0e:5a:7a:68:46:47:
8a:8d:57:7f:c0:71:be:84:2b:ee:b6:48:6b:69:dd:
78:2b:d9:be:c6:86:99:18:b3:eb:0d:63:67:97:dc:
c9:48:96:d8:c8:76:bc:66:0c:1c:0c:bc:39:25:4c:
9d:1b:e8:14:39:79:2b:3e:7f:3d:00:a4:4c:dc:3d:
fd:b8:66:b1:d2:8b:6a:e1:9e:b8:e6:c3:e8:c9:1f:
b2:16:ce:ad:7a:4f:6c:2b:4f:42:56:7a:0c:8a:09:
f0:0c:8e:1a:7b:2e:30:73:8d:49:83:6a:c9:fd:1a:
94:fb:14:2d:93:63:23:1c:3d:b0:59:9c:83:89:f4:
91:c7:a1:ae:20:2a:80:ee:fc:48:f0:05:8f:04:ac:
6b:e3:49:59:b5:b5:b3:8c:ec:50:b8:78:b7:97:ec:
6e:10:99:f8:da:98:12:64:ee:72:1e:eb:b8:67:e3:
bc:b4:bc:37:dc:12:86:84:58:9a:03:d2:f6:4f:ae:
62:79:eb:1d:a2:69:9b:e5:af:b5:9c:b1:1c:43:05:
33:41:5c:88:99:37:4e:93:6b:5e:5b:44:8e:d9:80:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A1:BC:C2:0C:B5:71:39:12:B9:C6:92:40:91:17:B8:AC:3B:2F:95
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ca:b6:64:bd:60:7d:12:0b:29:eb:2b:17:f6:e0:c2:fa:cc:
19:fa:28:b5:74:76:d4:8e:c0:84:fe:6d:9c:a5:2a:66:82:42:
3d:b8:70:45:af:16:f7:9f:71:c7:77:5d:0e:78:77:c2:a0:5e:
88:27:80:18:5a:d8:c1:fc:e1:ac:6d:2e:5e:4c:87:c5:05:37:
37:0a:96:8d:17:74:1d:12:3e:32:0d:8b:44:89:d8:53:d9:6d:
ee:95:6a:14:7d:a0:a7:cb:2e:1d:fc:b3:b5:9d:05:ad:f3:33:
a1:8b:e5:dc:af:b4:d3:0a:09:ec:6a:7b:89:29:a8:cf:85:e9:
0b:eb:2f:ee:56:41:ea:3f:7d:d6:7b:15:fc:84:fa:18:ba:fd:
35:b9:a3:8e:66:6f:a9:73:a7:da:9b:84:db:43:be:12:f2:3c:
9b:0b:68:7d:f4:0d:79:e4:27:65:57:ec:21:6b:09:e1:a1:4a:
44:90:18:58:1a:22:50:7d:a4:fa:e0:01:d1:f7:88:66:5d:90:
5b:5f:1a:30:bd:70:ff:14:34:a9:bd:e5:ae:e8:e5:e0:75:dc:
2e:c3:b2:a5:30:a8:3b:75:47:9c:a3:08:ac:01:78:0b:93:b2:
56:ec:3a:33:24:29:a6:52:62:bb:71:1e:58:4f:3f:74:d9:20:
a2:8f:92:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:50:35 2026 by rpki-client