Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: L/BxGEfqw7j6KgiTICUxHCZKNK3ZwwzVyVIsKL73djo=
Subject key identifier: 21:A0:76:81:7B:04:5A:11:F2:D9:EA:E0:15:83:61:D4:C7:E6:19:E0
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 01A0C633356A6730BF778A07D52202708698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 1A6F
Signing time: Mon 21 Sep 2026 23:00:39 +0000
Manifest this update: Mon 21 Sep 2026 23:00:39 +0000
Manifest next update: Tue 22 Sep 2026 23:00:39 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: MhjJD5LqtP+NtsIiKL2smuOYg9iGpzgz7PdPuUGLaXA=)
2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:35:6a:67:30:bf:77:8a:07:d5:22:02:70:86:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Sep 21 23:00:39 2026 GMT
Not After : Sep 22 23:00:39 2026 GMT
Subject: CN=21a076817b045a11f2d9eae0158361d4c7e619e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:c8:67:40:b0:d5:3b:1d:56:a8:06:75:af:
34:eb:1d:e4:a9:61:cb:d8:01:da:ad:b8:db:e1:e5:
23:c3:f5:49:6a:98:d4:6e:7c:2d:9d:b7:84:fa:42:
6e:35:09:8a:03:04:b1:40:44:56:67:8e:03:64:a6:
9f:ea:34:d3:4d:55:f2:f7:1d:38:2c:78:3f:a8:39:
24:28:b8:61:52:61:ff:1f:b1:75:b9:08:da:c1:91:
f4:41:f8:11:88:62:03:69:e5:bd:3f:2f:cc:8f:95:
2e:fa:9b:b3:7d:4c:88:04:cb:a7:78:02:30:1f:65:
dd:45:62:c6:db:c3:95:cc:06:fe:d8:12:8d:8f:ff:
32:d8:9f:12:6d:1e:ef:04:ae:56:e9:1e:ed:fe:8e:
9a:7f:39:73:c4:bd:41:63:b3:4d:b1:7b:7f:7e:eb:
7c:dd:61:4b:2b:50:0d:c2:68:5c:41:89:e1:01:47:
0e:7e:6d:6f:42:b9:da:42:bd:b9:b8:f8:7a:0a:ae:
ab:ae:76:85:aa:98:f1:c7:27:90:1a:e8:20:a3:0f:
eb:3c:57:cd:31:a8:92:38:ab:ca:9a:9e:ca:c7:94:
70:9a:d5:61:17:41:01:2c:75:8b:26:e4:4f:be:e6:
bb:81:c6:77:34:80:93:2d:2e:a0:7e:08:70:8b:55:
44:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A0:76:81:7B:04:5A:11:F2:D9:EA:E0:15:83:61:D4:C7:E6:19:E0
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:27:e0:bf:bd:d0:81:cf:d9:15:d1:3c:03:fc:a2:ec:a0:96:
fe:66:c2:4d:24:85:88:08:d7:ef:e2:17:57:80:18:cc:ae:0a:
61:ab:13:28:d3:fe:60:3d:1d:9f:2b:dd:ce:3b:43:a6:55:52:
a5:b3:f3:6e:18:65:0f:ae:dd:c9:0a:98:bc:57:ba:39:fc:ab:
b4:b8:bd:b8:4f:8e:3e:92:0a:ef:a8:dd:65:85:21:60:9b:dd:
d4:bf:b8:80:42:d3:ee:95:6c:aa:27:80:c6:a0:d5:28:3d:c2:
fe:ba:d9:71:3b:45:2c:f4:f0:04:25:ed:21:7d:3e:40:cf:de:
82:ff:c2:97:35:1e:c2:59:51:f0:03:8c:c8:37:16:f6:7b:0d:
f4:26:41:c6:9c:b3:06:a2:77:0c:42:c7:8d:c0:ba:ef:f6:e1:
3f:10:2e:7a:22:45:fc:b1:93:c0:68:03:f6:af:f7:9c:0f:89:
4d:7f:ce:4e:1b:4d:d9:c9:6e:05:59:ae:09:19:c1:4c:be:4c:
f8:32:2b:4f:7e:2b:05:cd:6f:6a:c1:b3:ae:09:0f:4d:52:db:
7d:92:b0:7c:7b:5f:28:fc:e1:1b:f4:92:5a:81:b0:2f:49:da:
97:8a:5f:0c:c3:f3:99:d1:b9:09:2c:25:15:88:01:22:09:b8:
92:15:15:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGMzVqZzC/d4oH1SICcIaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGE4NjFkN2MxNGI0Y2E1ZTZkMWM3ZDYwYWFlZWIzMmVh
OGVmNjEwHhcNMjYwOTIxMjMwMDM5WhcNMjYwOTIyMjMwMDM5WjAzMTEwLwYDVQQD
EygyMWEwNzY4MTdiMDQ1YTExZjJkOWVhZTAxNTgzNjFkNGM3ZTYxOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg/IZ0Cw1TsdVqgGda806x3kqWHL
2AHarbjb4eUjw/VJapjUbnwtnbeE+kJuNQmKAwSxQERWZ44DZKaf6jTTTVXy9x04
LHg/qDkkKLhhUmH/H7F1uQjawZH0QfgRiGIDaeW9Py/Mj5Uu+puzfUyIBMuneAIw
H2XdRWLG28OVzAb+2BKNj/8y2J8SbR7vBK5W6R7t/o6afzlzxL1BY7NNsXt/fut8
3WFLK1ANwmhcQYnhAUcOfm1vQrnaQr25uPh6Cq6rrnaFqpjxxyeQGuggow/rPFfN
MaiSOKvKmp7Kx5RwmtVhF0EBLHWLJuRPvua7gcZ3NICTLS6gfghwi1VEawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGgdoF7BFoR8tnq4BWDYdTH5hngMB8GA1UdIwQY
MBaAFApKhh18FLTKXm0cfWCq7rMuqO9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2It
OTRkYmYzZmQwZTJkLzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2ItOTRkYmYzZmQwZTJk
LzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyfgv73Q
gc/ZFdE8A/yi7KCW/mbCTSSFiAjX7+IXV4AYzK4KYasTKNP+YD0dnyvdzjtDplVS
pbPzbhhlD67dyQqYvFe6OfyrtLi9uE+OPpIK76jdZYUhYJvd1L+4gELT7pVsqieA
xqDVKD3C/rrZcTtFLPTwBCXtIX0+QM/egv/ClzUewllR8AOMyDcW9nsN9CZBxpyz
BqJ3DELHjcC67/bhPxAueiJF/LGTwGgD9q/3nA+JTX/OThtN2cluBVmuCRnBTL5M
+DIrT34rBc1vasGzrgkPTVLbfZKwfHtfKPzhG/SSWoGwL0nal4pfDMPzmdG5CSwl
FYgBIgm4khUVew==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:34:29 2026 by rpki-client