Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: ZIkMrD1DIdtuYG1H+QL4axPMjS88anVFAx6AANu6lPY=
Subject key identifier: 7A:37:43:5D:80:8E:C6:B0:6E:4D:71:28:04:38:8D:15:7D:54:31:B7
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 01A1C51E5970B516A4373A3AC9D56FC9EFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 1AF3
Signing time: Tue 10 Nov 2026 11:01:02 +0000
Manifest this update: Tue 10 Nov 2026 11:01:02 +0000
Manifest next update: Wed 11 Nov 2026 11:01:02 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: u1Y6+JqQrANpLeJLjQqyBbvSOGCUuiXZJBQgq6nhmpQ=)
2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:1e:59:70:b5:16:a4:37:3a:3a:c9:d5:6f:c9:ef:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Nov 10 11:01:02 2026 GMT
Not After : Nov 11 11:01:02 2026 GMT
Subject: CN=7a37435d808ec6b06e4d712804388d157d5431b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:f4:f0:12:04:d8:da:eb:b1:ed:2f:5d:68:
7d:6f:0d:e3:17:c2:dc:a8:ae:9e:d1:2c:89:60:50:
58:29:54:e6:a9:3e:49:30:5b:66:19:7f:f8:fe:7b:
f9:9f:10:a0:1e:10:26:54:1f:ef:12:86:5c:69:af:
c0:1c:19:eb:bc:d0:f2:c5:10:1f:29:aa:59:1f:40:
2e:6a:c7:d0:cc:0f:02:d9:c3:bf:29:9b:e0:88:aa:
25:7a:1b:5b:0c:88:77:c1:c2:8c:59:3c:0a:98:cc:
2b:39:bd:43:0d:dc:f7:1c:de:7d:15:fc:03:25:68:
9c:45:2c:a1:d3:a6:9f:34:47:7f:be:61:9a:49:94:
35:ae:e9:71:37:10:d5:38:53:c2:2d:d6:bf:f4:04:
69:a9:89:20:1c:50:82:30:d2:a3:39:21:02:59:50:
b9:5f:58:b1:a2:d0:c8:3e:25:3c:1b:3d:cb:5b:6c:
44:5e:24:ae:a3:c1:08:4e:28:ec:68:29:56:28:77:
10:5b:a7:89:7c:ac:18:51:b2:a9:00:b9:22:0b:a0:
02:26:d8:01:71:d7:91:94:bb:7f:01:8a:f2:24:50:
84:c0:75:cc:77:ab:3d:61:a6:f0:b1:c9:b7:9f:98:
9b:94:e5:aa:28:ed:44:99:ef:89:79:3f:d6:a9:63:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:37:43:5D:80:8E:C6:B0:6E:4D:71:28:04:38:8D:15:7D:54:31:B7
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:42:ea:e7:95:f0:cb:c9:7e:30:fd:71:21:22:85:cf:cf:3a:
6a:ce:e7:ef:33:85:8a:d5:9c:ba:82:38:37:a2:cb:96:e9:44:
1d:93:cf:16:d4:79:63:99:26:80:74:11:1b:4a:87:fa:27:ca:
57:b9:49:16:a6:38:39:b5:f9:b7:97:a8:b0:7a:64:5a:3d:c2:
67:05:54:df:62:30:74:ac:cb:59:44:20:64:68:17:5a:8b:77:
2e:fc:ba:17:85:b7:14:c2:9e:9d:ed:37:60:25:0d:25:b1:94:
7f:74:83:53:29:2b:07:81:39:92:6f:58:2d:90:5b:93:1f:cd:
6c:d3:b3:4b:a2:50:8f:ff:9e:06:f3:17:61:ec:53:a6:99:dc:
8b:d4:75:d5:d5:ea:f6:5a:6e:ec:5f:53:9f:ce:9c:84:5d:f2:
6c:df:25:24:75:49:dc:ec:c8:f4:50:c8:e5:f2:2c:24:2f:70:
dd:5c:0c:1d:11:62:23:ac:36:2a:a4:3a:66:4f:56:7e:40:3d:
66:19:30:dc:aa:58:48:ae:98:30:13:1c:bc:6b:cf:33:fc:d1:
58:8c:06:13:eb:09:ab:af:cf:65:95:bd:ef:08:c1:33:2b:9a:
dc:34:b3:3c:9b:c4:16:90:40:44:c8:51:c8:67:ca:8b:3a:36:
6f:3f:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 15:39:29 2026 by rpki-client