Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: ANoIkGuTQhvUDFxQr3GcjAj31OKyPy+BRE3ZPTHzxa4=
Subject key identifier: 64:C2:F2:E7:2F:CC:C7:AD:ED:A6:4B:07:FA:65:E4:2B:8E:02:51:4D
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 019EC148B8A832F02D7FABAE15595EB2810D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 14:00:28 +0000
Manifest this update: Sat 13 Jun 2026 14:00:28 +0000
Manifest next update: Sun 14 Jun 2026 14:00:28 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: NWMW65DchHqXyAiGVzs/VxSW+1ltzFWs+2DmQtFluIQ=)
2: cDoC-jSYN7u0frpLx2bXUSxluu0.roa (hash: 0c+KBOgKhiecSN5vnMV9D8GmEY0jyIF5LXtXoNSNf7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:b8:a8:32:f0:2d:7f:ab:ae:15:59:5e:b2:81:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Jun 13 14:00:28 2026 GMT
Not After : Jun 14 14:00:28 2026 GMT
Subject: CN=64c2f2e72fccc7adeda64b07fa65e42b8e02514d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:0f:f8:dd:57:01:ad:68:5c:0b:3d:46:7c:
8d:61:03:d5:46:bd:7b:9a:d1:7f:6a:14:eb:7b:d1:
2e:90:67:79:78:2c:38:cc:5a:18:48:27:0f:e7:d1:
ab:82:3b:fa:15:c9:c0:8f:bf:04:eb:4c:23:93:c3:
53:fb:a2:c5:5a:22:93:9d:04:4e:54:43:7d:cc:c6:
46:a9:3d:d8:95:c4:7d:30:89:5c:ce:48:b6:0e:aa:
9b:50:88:20:b4:23:d8:f2:3f:57:ae:c1:7b:63:4f:
cb:cb:e1:09:e1:9f:39:5c:1e:82:ee:b1:33:1e:14:
5f:67:9b:3b:09:05:0f:53:d0:7c:18:f4:6d:d4:06:
e5:26:60:52:9d:32:cf:b0:6f:7b:50:4d:b0:09:b3:
1e:05:85:3b:78:f0:0e:b9:ad:05:55:e1:19:73:e1:
9c:d4:01:03:54:d7:df:5e:84:d6:13:47:c6:64:1f:
ca:6f:3e:f1:f0:c9:10:bc:75:e9:8f:dc:6b:de:27:
bd:d5:e5:05:82:fd:9b:13:1c:3d:ed:7a:d8:64:af:
52:90:1d:bd:3a:6d:ab:4a:4c:e7:df:51:57:e8:09:
eb:99:de:48:43:3f:c4:8d:9f:af:ae:22:a4:95:47:
d2:e3:15:25:cc:e4:bb:99:1d:c9:1e:c8:1d:66:34:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C2:F2:E7:2F:CC:C7:AD:ED:A6:4B:07:FA:65:E4:2B:8E:02:51:4D
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:57:ca:b7:dc:89:bd:f7:2f:b7:40:e6:79:ee:33:43:f8:e2:
4a:82:a2:0c:64:ba:a1:85:be:c1:a0:3a:61:f2:25:fd:30:46:
52:38:e7:9a:f0:6f:a3:1f:e6:86:43:cf:81:ac:55:61:94:fc:
aa:01:46:c9:c7:d0:57:da:8d:34:65:ec:c2:63:db:26:78:95:
55:c7:47:77:60:c3:9f:9d:b9:73:d0:46:b8:23:5c:b9:04:cb:
3b:b6:1e:d9:02:a3:63:4d:6b:7f:f9:30:b4:bc:ce:2b:f3:26:
d2:88:ee:7c:8a:5c:9b:f5:fb:73:ec:de:a5:87:dd:5c:de:a9:
4d:b4:c3:dd:f0:2c:a8:ce:92:10:74:69:71:c0:f9:69:04:6a:
bf:d8:ae:b8:bc:d5:86:ec:2a:c6:24:4c:40:1a:be:84:f7:c4:
fd:74:02:94:8c:cf:f8:55:fe:e6:c1:0f:59:50:cb:6b:c3:8e:
f6:3d:95:dd:42:e1:3e:75:65:ea:05:5b:8e:61:f8:4a:60:fa:
de:a6:93:08:48:95:0c:8f:1e:9e:f8:4e:02:ef:5c:5a:19:af:
42:40:5f:eb:de:7f:aa:5f:f7:59:37:e6:7e:65:3d:60:1c:6f:
80:e2:16:46:bf:54:d5:38:1d:e5:be:60:93:a2:98:52:b2:60:
17:b1:22:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:09:11 2026 by rpki-client