Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: g85IDN7+O1Q466Ulk00ZsFaSIZCCJX01MMNB9fGD9zQ=
Subject key identifier: F6:81:FD:D5:E7:1E:0F:5A:28:41:7E:84:3E:D1:CE:E3:7C:7A:F8:94
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 019CAA9004FB68BFC608775D6466C0E9F6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 18:01:31 +0000
Manifest this update: Sun 01 Mar 2026 18:01:31 +0000
Manifest next update: Mon 02 Mar 2026 18:01:31 +0000
Files and hashes: 1: 1WFjwMGMePlEAC8bm7XUOdRFj34.roa (hash: fW2dzpRcyQ80IgEJ6uR/Uw++9kayO/2mr9G7qpsC/1w=)
2: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: uO4Lj0X6N+VsHbBuGh3drQnVgPnVCSfZ7DhJQX9iYh4=)
3: Z0Yd5ryo6CVHolrVfgTJW3VNRio.roa (hash: qAoF6R0Ct6kB3sTz/3lrppb3yX+381mHA9jGPvlKM8Y=)
4: rHFkeLh05qkzhm3XqYX2jCr6Jwc.roa (hash: rLIRPVEJIS1dHp/fkMSEkxmJ0YQCqnoXU1iytE3RgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:04:fb:68:bf:c6:08:77:5d:64:66:c0:e9:f6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Mar 1 18:01:31 2026 GMT
Not After : Mar 2 18:01:31 2026 GMT
Subject: CN=f681fdd5e71e0f5a28417e843ed1cee37c7af894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:61:54:15:e2:e0:22:a5:21:b1:a4:bd:49:
70:b0:11:39:63:c3:7e:33:fe:68:10:5f:68:33:ce:
78:10:8c:82:09:b5:75:75:ee:6b:ce:95:ac:ee:76:
24:18:79:4e:27:79:17:d3:cb:18:ee:ab:03:80:3e:
af:73:7d:e5:ee:3f:ea:05:10:df:85:27:ac:80:b7:
c7:25:83:d2:26:d4:d3:d1:79:1a:93:56:96:f5:f6:
93:63:a1:9b:50:62:70:bd:77:72:ec:ae:88:8e:fd:
98:7c:77:e1:41:84:7a:8c:fb:b4:84:6f:97:02:a4:
4c:77:0f:d5:63:50:ce:55:f5:b0:29:16:ef:12:97:
48:c8:4d:6f:93:c9:e0:65:88:87:e1:a1:28:77:2f:
c8:54:dd:06:1e:64:2b:eb:4b:d9:82:13:96:b0:ad:
b9:7d:ee:2e:e8:5d:c1:83:81:ec:09:4e:f9:c3:1f:
36:0c:98:ac:bd:81:bf:69:f5:05:49:40:14:0d:c0:
8e:4a:7d:77:c1:a4:11:29:27:56:fc:33:0c:aa:ac:
4d:0e:79:24:42:c1:5d:2b:da:d0:f4:2f:42:9e:37:
2e:fb:82:5d:95:b1:12:88:17:32:79:40:08:b6:34:
de:bf:6a:eb:50:2b:4f:68:65:95:18:87:c5:d1:dd:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:FD:D5:E7:1E:0F:5A:28:41:7E:84:3E:D1:CE:E3:7C:7A:F8:94
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:22:61:6e:f0:ad:8e:cd:65:4e:68:10:ef:4d:85:83:85:5d:
78:b0:85:dc:c1:e1:89:e8:6e:ea:49:3d:fa:e4:d2:24:c9:70:
e2:ef:09:a6:c6:08:b7:99:18:c7:4e:67:ae:49:e2:8f:ad:67:
fa:23:a9:87:c9:ac:ee:d1:0a:b5:24:ea:f9:6c:71:90:24:d6:
cb:37:83:ec:e8:bc:c2:39:7c:2d:c7:1f:9c:8c:39:68:c0:03:
6a:31:b7:6e:37:ab:97:6c:75:10:a3:30:54:c3:62:68:62:8a:
3e:2f:b3:02:7d:95:eb:e5:25:81:09:fd:78:7e:81:95:2f:4c:
00:d5:fa:0a:58:3a:fa:c9:cc:25:9e:5f:e7:07:d6:bf:d3:bb:
92:af:f8:07:dd:0d:f4:4d:67:01:93:ae:e9:9e:bb:ba:e4:c3:
e1:09:cb:72:c6:01:b0:6d:f1:35:d3:92:a8:30:4e:e6:85:0a:
bd:71:de:a6:15:0b:52:14:06:fd:a6:52:ca:90:a4:ed:02:f8:
18:de:b2:95:78:48:a9:e8:a8:0c:5d:56:98:88:85:c7:03:8f:
2e:de:cb:a7:f2:5e:71:24:b0:56:93:bc:8e:01:10:ab:ca:37:
63:7b:07:92:5c:b3:d6:3a:16:e4:87:1d:32:fd:47:69:22:07:
57:e1:a5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:31 2026 by rpki-client