Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: 3uRpZvVP66FC0j8I+prjpK/BvJTKtZGUSJtQOURGUkQ=
Subject key identifier: 72:43:7B:4E:47:B3:B9:4E:17:4C:1D:22:FA:0B:C2:D7:52:3A:70:7A
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 019D9A0734640892C5398F1801B2558FAEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 06:00:56 +0000
Manifest this update: Fri 17 Apr 2026 06:00:56 +0000
Manifest next update: Sat 18 Apr 2026 06:00:56 +0000
Files and hashes: 1: 1WFjwMGMePlEAC8bm7XUOdRFj34.roa (hash: fW2dzpRcyQ80IgEJ6uR/Uw++9kayO/2mr9G7qpsC/1w=)
2: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: hdgEgdJ/3xWjeHwIu48wzF4AbsyFsqVfZEjymEsdIz8=)
3: Z0Yd5ryo6CVHolrVfgTJW3VNRio.roa (hash: qAoF6R0Ct6kB3sTz/3lrppb3yX+381mHA9jGPvlKM8Y=)
4: rHFkeLh05qkzhm3XqYX2jCr6Jwc.roa (hash: rLIRPVEJIS1dHp/fkMSEkxmJ0YQCqnoXU1iytE3RgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:34:64:08:92:c5:39:8f:18:01:b2:55:8f:ae:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Apr 17 06:00:56 2026 GMT
Not After : Apr 18 06:00:56 2026 GMT
Subject: CN=72437b4e47b3b94e174c1d22fa0bc2d7523a707a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:3a:6b:2b:5d:a4:e0:2a:21:36:a4:b3:68:
5c:91:e6:bc:e0:cb:6a:2a:df:48:40:9a:ac:50:ce:
2a:db:86:d2:9f:99:9c:66:b6:d3:dd:4f:1b:6a:e7:
bb:6f:67:5e:d2:98:94:9d:9f:bf:2d:10:d5:31:e0:
18:a5:13:22:40:9a:54:62:fe:80:ab:99:ba:4d:88:
a6:81:0c:c0:02:ba:85:9c:9a:73:4f:aa:87:93:0f:
e3:29:ea:ac:ea:1a:c9:9c:0b:5b:9f:04:34:24:87:
16:bf:c8:4d:60:cd:be:6e:18:0c:5c:fe:a0:b3:01:
43:7c:97:04:4d:be:fc:59:04:b1:f7:13:c7:15:28:
af:23:a3:9d:22:7c:2f:31:b2:be:96:0a:5b:e2:3f:
f9:1c:64:66:2e:09:79:ce:61:a3:67:b1:e3:a8:3c:
97:8a:09:f5:0d:ec:01:fd:90:61:74:8e:d7:81:4b:
40:3d:8a:28:4a:23:a4:7c:3a:b4:c8:bd:28:e2:89:
05:b7:09:0b:8d:53:33:59:07:0f:46:2b:5a:f5:b0:
f5:b0:36:5b:83:48:97:9f:f8:0c:75:f8:25:f1:05:
b1:25:02:8e:ee:5a:f7:b0:a0:18:39:1f:69:4a:12:
9b:77:32:6b:46:53:da:32:1f:82:c0:1a:cf:3e:04:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:43:7B:4E:47:B3:B9:4E:17:4C:1D:22:FA:0B:C2:D7:52:3A:70:7A
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1a:8d:01:1c:f1:51:37:c5:1e:49:2e:e5:7a:c0:13:98:7f:
fe:25:35:de:b5:8e:e8:46:86:cc:71:a9:0f:fe:72:0f:ac:f3:
a0:64:a2:b9:f4:ab:50:e9:c5:6f:cc:e8:e8:a4:41:4d:a9:af:
b7:50:60:79:19:1d:db:20:f3:ed:2a:87:bc:21:15:42:eb:fa:
52:89:5a:4c:73:c5:70:e8:d5:bd:dd:28:c3:7e:77:f7:5c:eb:
65:66:e2:e7:56:ae:d7:49:e5:bd:7e:0a:26:b0:4f:04:dc:f8:
2b:f0:ee:7d:1b:98:3d:a7:cd:7d:49:7a:91:ec:a1:5c:35:54:
bd:eb:e3:60:fc:f0:71:e7:94:09:ff:90:59:0e:84:3f:a0:ff:
0b:41:38:a5:3a:2e:00:63:3e:33:49:37:2c:ac:eb:da:a1:ca:
a1:0c:a6:f9:ba:ca:9a:d2:9d:77:a6:2c:6e:f8:b1:1b:74:c4:
bb:7f:94:80:b4:13:1a:ee:3b:16:7e:74:02:a7:30:28:11:54:
b9:2b:e9:d1:16:0e:8f:89:6c:49:bd:5b:0a:91:00:80:4a:a6:
bd:61:b7:56:64:06:56:d2:e9:d5:d4:c8:15:cc:56:e5:5c:21:
13:b9:f2:69:67:55:2b:80:1b:62:fc:31:af:7b:7f:6d:41:c4:
3d:10:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:51 2026 by rpki-client