
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: t4KpNWm2ncrqv5nD+44JHyp8nLwhAPfhO31mUppz59A=
Subject key identifier: FB:FD:BA:6B:76:59:DE:BD:04:D7:98:EE:CE:6C:18:57:EE:85:24:11
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 019FA8626D201F65BCFD71D44CCBCE158F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 11:00:50 +0000
Manifest this update: Tue 28 Jul 2026 11:00:50 +0000
Manifest next update: Wed 29 Jul 2026 11:00:50 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: nYvJ0maI4qtNmYq1J1EVTVEiwOACZMXFDqIgK/erJjg=)
2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:6d:20:1f:65:bc:fd:71:d4:4c:cb:ce:15:8f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Jul 28 11:00:50 2026 GMT
Not After : Jul 29 11:00:50 2026 GMT
Subject: CN=fbfdba6b7659debd04d798eece6c1857ee852411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:80:0a:43:1e:87:87:45:70:43:ee:c2:34:df:
d5:8e:84:ed:bc:f2:34:3d:89:4e:c2:4d:05:67:34:
26:8b:40:9a:92:b9:56:c8:19:f9:51:7f:f9:52:42:
b2:ce:aa:d9:0d:3e:6d:57:5f:0f:14:2a:f7:30:ee:
1d:d1:07:45:97:99:13:fe:a8:e9:4f:62:06:91:91:
b1:29:9d:09:b9:7b:cc:c3:6f:2a:6b:a7:da:fd:9a:
8f:cf:6a:e5:d0:a7:ec:4c:b5:9e:73:c2:b3:13:2a:
e4:55:f0:9a:2b:64:6a:48:a1:fb:41:ff:b3:25:9f:
86:43:ba:0d:78:a1:3d:71:b2:76:50:91:a5:48:2b:
be:e6:89:75:ad:28:39:4d:6c:b5:96:c7:60:c2:5d:
12:93:5f:0d:47:0d:ea:49:c0:b6:e8:91:8f:11:31:
a2:36:61:ea:4b:20:4f:60:60:20:f0:dd:cb:b0:ec:
f3:5c:ce:06:86:f2:9e:c9:30:4a:08:1f:99:de:58:
21:f4:ea:40:b0:a4:d8:da:b9:15:59:49:6b:05:13:
9a:cc:72:66:37:d5:69:a2:2c:9e:ff:cd:8d:b1:ea:
4c:ed:37:2d:52:bf:ae:c8:fa:4b:29:59:d3:a9:4a:
51:b5:f9:d4:69:50:cd:dc:e3:61:0d:ae:3d:9e:57:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:BA:6B:76:59:DE:BD:04:D7:98:EE:CE:6C:18:57:EE:85:24:11
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:47:65:ff:69:7a:0a:cd:75:ac:68:56:05:5f:4c:ee:1c:86:
69:d4:f5:27:ad:98:64:da:4f:00:e4:ad:d3:4c:1f:ab:05:1d:
22:b6:f1:3d:cc:b9:b3:e4:bf:76:71:22:ae:76:4d:4e:df:e6:
96:4c:80:b9:ee:2e:c6:14:bb:f4:3d:56:38:4c:a2:90:b6:d3:
38:7f:e2:18:c8:79:e0:ec:bf:33:0e:34:fe:d4:89:e3:1b:86:
8a:08:94:38:02:7b:b3:60:19:fd:42:e8:7a:01:e6:17:13:ef:
ba:3e:fd:19:79:2d:5f:5c:ea:67:0e:c6:8a:47:66:f0:31:30:
1c:4d:63:80:e0:f9:56:72:eb:45:8c:7f:3a:29:80:5a:5b:b4:
31:70:54:8c:be:0a:9f:af:e2:c6:8b:d9:6d:63:4e:52:b4:9f:
71:3a:c1:ae:bc:9d:5d:72:94:ed:90:9d:23:69:d4:94:46:38:
ac:4b:72:f8:ac:54:76:9d:1f:05:b6:d0:d1:53:95:f8:46:55:
4e:48:98:6d:d0:eb:13:59:e7:6a:5f:00:6d:8d:9a:5a:c9:3c:
2f:9d:b6:6d:2a:0a:e8:cf:73:81:e1:e6:03:a7:df:4e:b5:46:
86:af:6b:c9:aa:22:db:b2:5f:ab:59:ab:25:2a:d8:d0:d9:8e:
4c:bd:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:16 2026 by rpki-client