Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: 1SjWzoUKurdCyqGQAWlAwAfS3INUZuQHs8KyzYXS6XU=
Subject key identifier: 0F:23:D6:AC:4F:A6:73:A2:EC:11:C0:81:2F:E3:D2:B8:EE:53:8A:0F
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 019CAD90958918F7DF30016164746A614D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 08:00:59 +0000
Manifest this update: Mon 02 Mar 2026 08:00:59 +0000
Manifest next update: Tue 03 Mar 2026 08:00:59 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: ZHYrJQwWei3meb0XfZkd6sA2KUvekrm6eeGKQvIo4wo=)
2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:95:89:18:f7:df:30:01:61:64:74:6a:61:4d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Mar 2 08:00:59 2026 GMT
Not After : Mar 3 08:00:59 2026 GMT
Subject: CN=0f23d6ac4fa673a2ec11c0812fe3d2b8ee538a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:37:f7:4d:8b:41:10:96:dc:72:76:a5:07:
92:a1:cc:de:2a:98:69:1b:5d:fd:96:54:ca:d0:a3:
40:86:d8:67:aa:16:22:90:8d:02:03:d6:8e:41:4e:
46:26:70:17:81:62:da:df:a6:66:c7:fd:cf:70:ff:
52:2b:5f:32:55:95:c7:fc:80:23:66:c3:89:6f:46:
d2:6b:ed:69:d4:78:59:26:39:20:3a:89:de:b4:e2:
65:c1:27:da:89:7f:b8:96:43:91:ce:8a:28:36:0d:
58:1b:eb:ab:9f:f4:0c:19:b4:85:ad:d1:9d:fe:1d:
53:b9:f4:23:a3:ac:e0:04:ab:fa:af:91:c6:f5:11:
cd:c6:8b:36:30:6a:df:3c:47:15:ad:d6:d9:84:75:
d1:c5:52:ae:1a:83:3f:3b:f7:95:5b:ab:77:f5:f0:
25:8b:b6:3f:83:4b:bd:4b:1a:3c:7a:5d:3f:00:66:
1d:c5:de:2a:15:86:93:00:b2:d9:89:58:79:5a:9d:
3d:77:77:5e:a1:7f:b0:9d:15:73:53:1a:08:a8:e8:
8e:ee:24:1e:ca:7c:86:89:73:35:c3:2c:82:6c:ac:
8b:eb:2d:19:40:36:c2:e7:08:40:04:d1:27:4d:65:
bc:a0:6b:9c:3a:3e:e4:08:87:37:91:61:d2:4c:94:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:23:D6:AC:4F:A6:73:A2:EC:11:C0:81:2F:E3:D2:B8:EE:53:8A:0F
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:aa:52:76:52:76:c1:eb:ff:b1:f9:fc:4b:b3:b8:26:cd:7a:
5a:b1:5c:64:6c:c4:f8:12:29:8e:5e:3f:e8:0e:ee:a6:34:09:
0a:1b:b1:77:60:18:be:c5:c6:23:af:53:da:b3:bc:ce:5a:ae:
6d:65:54:1e:29:17:fa:96:fe:62:67:85:ba:e5:10:54:02:4c:
df:26:c2:7e:28:8a:22:a7:12:62:80:77:03:c9:51:37:9f:3c:
0b:9d:14:3d:6a:29:f9:48:7b:f7:57:1f:22:f4:76:b8:e4:04:
a0:fe:da:2e:f5:c4:9c:5e:c7:78:e5:d9:66:ef:1b:93:f8:1b:
5b:b7:a7:81:26:48:65:03:44:b1:55:b4:b0:bf:42:63:91:da:
9a:ff:d8:16:f2:c6:6f:8c:e8:c1:0c:8c:df:7c:ea:ff:f6:9d:
51:b5:6d:c6:06:2b:7b:ef:ad:62:85:c1:81:97:a1:c5:bd:62:
67:98:6d:e3:e2:69:60:a7:f7:3e:f6:83:87:ad:0c:fb:be:c4:
dd:e3:4a:89:1c:56:f3:ac:7a:1c:de:13:f9:a8:a7:5e:3f:85:
d3:63:fa:f8:4a:40:16:62:82:fc:78:fe:73:c0:7d:f0:46:36:
1c:ac:f2:40:86:a6:a7:44:12:4c:73:5b:97:c2:d2:5c:43:46:
43:a1:50:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:16:28 2026 by rpki-client