Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: 7qztgURFkIFG3zWHNuQPRIaonA5i0kWG6C2yKnnTV+Y=
Subject key identifier: 20:47:6A:8E:C3:76:52:E5:51:12:2D:7C:05:EF:7B:EB:3F:73:DF:C9
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 019CAE3506A33CB4A8B55A2ED7AB9ABCDCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 11:00:36 +0000
Manifest this update: Mon 02 Mar 2026 11:00:36 +0000
Manifest next update: Tue 03 Mar 2026 11:00:36 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: 9XSG3Iwi6/uEgVSO8tRTkJGO87vIQ7H4cSN8HW08s40=)
2: cDoC-jSYN7u0frpLx2bXUSxluu0.roa (hash: 0c+KBOgKhiecSN5vnMV9D8GmEY0jyIF5LXtXoNSNf7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:06:a3:3c:b4:a8:b5:5a:2e:d7:ab:9a:bc:dc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Mar 2 11:00:36 2026 GMT
Not After : Mar 3 11:00:36 2026 GMT
Subject: CN=20476a8ec37652e551122d7c05ef7beb3f73dfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:c4:eb:67:3c:df:4a:7a:cf:bb:1f:08:e5:
bd:dd:5d:ce:9f:43:25:f4:06:5e:d0:f5:73:90:6a:
30:7f:5c:47:a0:c7:e6:f7:e6:e7:a0:c1:a0:f1:d6:
e6:40:44:22:c1:e5:5a:b8:8e:15:9d:63:76:71:ec:
97:59:6f:56:4a:09:d2:b5:dc:54:7f:91:32:07:d4:
cc:77:d0:d8:a8:86:21:98:a3:0a:84:26:3b:c7:8d:
8f:b9:89:6f:b7:91:ab:70:a4:72:7f:ba:a1:b1:22:
36:32:3d:be:56:0b:3a:e4:20:10:82:72:3b:2a:80:
f4:65:2f:f1:e6:ae:0a:50:c5:5a:2f:22:3f:9e:42:
66:50:00:e3:10:87:f2:40:69:73:8d:d5:95:9b:2b:
6a:80:11:3c:55:9b:7a:cd:6d:97:1e:10:0c:f5:bd:
bb:7f:f9:b0:4c:a5:1a:19:28:1f:d8:c1:48:93:36:
1e:b1:4c:cc:ff:bf:9a:48:10:ac:4d:15:de:56:b7:
a0:61:af:58:f0:18:5c:0b:45:d4:24:a5:5c:4c:eb:
06:3c:ef:f1:57:da:ec:91:02:81:4f:18:52:31:cb:
64:e6:10:65:b6:9f:ac:4f:24:0d:c4:f8:7c:ed:6a:
f3:3b:77:22:6e:de:fa:b9:3d:76:6c:c3:eb:09:01:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:47:6A:8E:C3:76:52:E5:51:12:2D:7C:05:EF:7B:EB:3F:73:DF:C9
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:09:b9:10:71:f5:12:66:aa:6b:62:46:37:05:95:ca:52:3c:
8a:6c:f5:fc:27:65:99:89:cc:34:89:f2:43:a3:e3:42:f0:66:
ca:1f:b7:d5:0a:e3:f3:b5:9f:bb:62:e9:ba:ee:11:36:c2:a6:
35:81:82:a3:48:c3:0c:e3:8c:66:02:d8:05:5a:d7:8f:c4:8b:
52:77:5f:0b:54:d6:9d:7f:12:f4:6b:ed:b8:13:15:ff:99:54:
8f:98:17:a3:ba:06:65:d7:38:48:5d:6b:84:ba:d5:ac:c8:32:
11:50:dc:8c:46:45:d0:fc:8d:d4:f2:a8:49:a8:b8:55:1a:76:
59:db:69:32:e6:c5:cf:98:b4:e8:d7:f6:21:84:76:87:ad:85:
12:a1:7b:b0:36:81:7b:a7:80:14:f5:f4:d2:8e:f4:3a:20:4e:
65:52:ad:0f:c4:f5:82:73:bc:04:c5:b3:fd:a4:26:72:8d:77:
5d:8e:2d:0f:ae:d0:d7:c5:22:a9:b1:6e:5a:70:89:f3:73:c7:
96:ae:6f:8f:46:84:c7:73:24:16:28:64:75:f6:89:b6:20:14:
9f:d7:f4:06:2e:24:f9:17:9f:82:a4:86:75:6f:7a:ce:4a:b7:
d7:38:5a:ca:03:32:4a:a9:b3:65:a5:83:46:aa:07:21:09:24:
65:e3:09:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:09 2026 by rpki-client