Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: In+ivm06ExxhusTRgRyfFK/32jWIZ/todH6rYY96EDI=
Subject key identifier: F9:6F:32:6E:C8:71:72:15:36:B6:BF:A8:F2:C2:EC:45:C2:3A:FB:42
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 019D992B068776FF4531F35EBE0A29AD5CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 02:00:26 +0000
Manifest this update: Fri 17 Apr 2026 02:00:26 +0000
Manifest next update: Sat 18 Apr 2026 02:00:26 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: mQpOBIWN+T3x88Y49hmfP97vJxSofzcdMn145NkJI2I=)
2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:06:87:76:ff:45:31:f3:5e:be:0a:29:ad:5c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Apr 17 02:00:26 2026 GMT
Not After : Apr 18 02:00:26 2026 GMT
Subject: CN=f96f326ec871721536b6bfa8f2c2ec45c23afb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:a7:84:61:6b:a1:04:fe:67:fa:dc:80:85:
f2:92:8d:51:43:3a:35:5c:2d:21:65:b7:e2:70:f6:
0e:aa:f1:5a:b3:f3:fa:47:01:05:60:18:e9:3a:97:
de:e4:3e:d2:ea:83:9a:5d:13:60:2a:02:3b:49:dc:
86:8c:77:dc:c4:2a:c7:c0:e5:ba:fe:64:07:f0:0e:
1c:8e:0d:5c:f6:9c:5c:d2:28:53:a2:d6:86:cb:14:
d0:20:01:0b:7a:ec:db:4f:23:8f:f6:a2:3b:55:f9:
11:70:f8:f4:9d:b1:36:0a:5f:d2:d1:e7:e6:af:db:
8d:f6:1d:9f:5d:73:25:56:b4:68:9f:a2:91:dd:2c:
24:8d:86:f0:5d:cb:28:d1:69:c5:c2:4e:ba:00:08:
26:3e:03:7b:e4:96:96:b5:6e:c0:de:99:5b:35:68:
7f:a0:e5:20:47:63:41:f9:ff:1a:d9:b8:a7:cc:53:
ba:31:b6:48:0f:cc:80:32:48:9e:66:1c:f6:14:ce:
34:f6:4b:df:fd:87:5a:9a:61:3a:97:d4:a9:02:70:
18:28:d3:bc:46:53:ad:eb:bc:e0:e7:59:36:ed:8b:
c5:e9:9e:2a:84:19:d6:22:25:97:ee:3d:97:3a:46:
8b:6e:6f:64:8a:10:e6:72:98:be:4e:1a:6a:6b:ee:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6F:32:6E:C8:71:72:15:36:B6:BF:A8:F2:C2:EC:45:C2:3A:FB:42
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ce:08:64:2f:1d:90:0a:7c:3d:13:e5:2f:d6:b3:12:96:64:
ce:ff:02:44:9d:5c:26:b5:c0:66:fa:2c:01:b6:5e:7b:6b:f6:
e4:78:55:0d:d3:5f:2e:65:b0:0b:65:c4:d6:ba:46:89:35:a4:
2e:26:8a:77:91:27:ad:5b:ca:12:99:4f:39:69:1a:d6:78:22:
87:95:3e:6c:5b:5f:b9:4b:5a:7c:64:ef:1c:13:fe:4e:b6:d6:
a4:a0:52:90:ee:b1:13:91:ba:33:ad:fc:b5:de:0a:fa:a1:cf:
34:0e:ee:ab:b4:46:76:b3:44:c2:e9:b6:f5:83:ff:3b:7f:97:
3d:94:bb:ec:97:ae:ce:f7:13:a0:f4:76:9b:06:7c:3a:e0:7b:
1f:98:0c:81:d4:10:55:ee:60:2e:ec:b7:5f:99:e3:66:5e:3b:
63:26:fa:80:06:4f:d2:69:c2:52:71:ed:58:f9:69:3a:06:6b:
ef:67:17:ca:ad:02:2c:7e:01:7a:40:62:fb:eb:0e:bd:49:3e:
c2:a9:78:9f:28:8c:1b:6e:44:f4:bd:2c:46:7e:fb:1e:01:2e:
5b:78:1c:c7:77:ba:7f:1b:d7:a5:fa:d8:df:20:1f:6a:0a:33:
35:b2:ca:3f:cf:5f:73:f3:0f:27:5d:fb:b8:15:9d:d0:1a:cb:
6b:60:5f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:24 2026 by rpki-client