Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: hVJBubkHSfvbqy0RR3QHLVBUtIabh2qMNWacXXbJkUo=
Subject key identifier: C7:D5:9C:89:DD:94:04:58:5F:BA:83:0E:D9:FF:E9:70:CF:32:A4:BA
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 01A0C40DB73E05061C919B6F687A7DFE77F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 1A6D
Signing time: Mon 21 Sep 2026 13:00:28 +0000
Manifest this update: Mon 21 Sep 2026 13:00:28 +0000
Manifest next update: Tue 22 Sep 2026 13:00:28 +0000
Files and hashes: 1: 1WFjwMGMePlEAC8bm7XUOdRFj34.roa (hash: fW2dzpRcyQ80IgEJ6uR/Uw++9kayO/2mr9G7qpsC/1w=)
2: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: /8hIdI4aurhQ89LZehtuBxbJd1i8zidmH94PnQK4zSw=)
3: TImJJUhHSPbQkRUq3GD4PoxkHbQ.roa (hash: 8czZJ0iGrV8f7eo8Glrc6/FdpLKC2UfW5wYgtnaT0dA=)
4: rHFkeLh05qkzhm3XqYX2jCr6Jwc.roa (hash: rLIRPVEJIS1dHp/fkMSEkxmJ0YQCqnoXU1iytE3RgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:b7:3e:05:06:1c:91:9b:6f:68:7a:7d:fe:77:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Sep 21 13:00:28 2026 GMT
Not After : Sep 22 13:00:28 2026 GMT
Subject: CN=c7d59c89dd9404585fba830ed9ffe970cf32a4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:09:7f:13:e9:24:2f:91:06:b2:fa:d9:98:
c7:0f:83:ff:94:70:3f:57:bc:71:8e:84:45:8b:ef:
62:9a:59:af:4f:6f:10:be:a7:f9:7e:48:a4:b5:65:
19:02:92:9c:18:c9:ba:6c:9f:82:fa:3e:ff:df:fa:
9d:19:6b:69:09:34:b8:15:2b:e1:75:d9:95:d1:ba:
d7:39:10:3d:33:94:e9:ea:17:49:23:2b:ad:5c:70:
c4:b8:69:1b:bd:db:9e:12:b1:7c:66:75:af:a7:40:
80:e8:22:a5:14:21:a2:d6:ec:1c:e7:ce:ab:c5:a2:
09:c3:06:d2:fe:8f:f5:00:9f:b6:c2:a7:08:b4:28:
ec:0b:3b:38:86:b0:e8:4a:89:bf:72:74:4b:6d:19:
1f:ae:7a:c8:01:4a:fb:b5:76:54:5d:d3:ed:18:dd:
78:c8:a1:1d:18:d5:7f:d6:d1:f9:dd:84:6e:32:8f:
5b:7b:c1:d6:7f:16:aa:87:ec:0a:57:c9:4d:37:39:
31:bb:69:9a:8b:7e:8a:84:42:4f:69:bf:4c:d6:5a:
de:76:41:26:5e:2e:b1:08:e8:13:e7:a5:4a:b8:ff:
ef:56:91:ec:9d:80:3a:7a:6a:4b:0f:cf:a4:82:a6:
8e:c1:53:b4:1d:d3:65:b4:2b:33:dc:c2:f8:65:4a:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D5:9C:89:DD:94:04:58:5F:BA:83:0E:D9:FF:E9:70:CF:32:A4:BA
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:92:bc:b5:0b:ce:da:d4:5d:33:60:ef:04:61:78:04:bc:e6:
11:88:a3:4c:ea:57:05:24:84:da:9f:03:10:0b:a7:9a:2a:79:
dc:68:7f:e3:ad:45:18:70:5a:ea:f3:b0:02:98:71:00:b8:0a:
e7:76:58:07:6b:b1:fd:a5:e7:5c:8f:61:b4:df:ff:85:15:58:
9f:7e:03:d2:91:c9:9a:dd:e8:12:de:9d:6f:57:dd:3b:3c:ca:
3e:6a:15:2a:6c:b8:74:65:27:7b:d9:8b:3b:82:2c:b2:c1:bb:
f1:a4:57:de:18:3f:5b:00:16:b5:1a:ed:21:8e:4d:09:18:7b:
17:47:0d:f7:ce:c3:1a:8e:ff:21:8d:e4:0c:7b:91:6d:ea:ed:
ef:6f:e4:e0:c8:ff:5b:9f:de:ac:b1:84:50:7b:5d:2f:f5:d4:
f9:22:95:cd:13:ad:02:c2:ef:b2:58:20:6d:96:22:ce:3b:ff:
d2:ff:c4:0d:ea:b8:5a:39:e7:e6:c4:2a:d4:e4:6a:20:7e:30:
9d:b1:66:19:98:40:b1:40:3a:cc:eb:d2:f7:e6:19:98:82:02:
57:f2:8d:c0:7e:73:01:ce:f8:c4:58:db:15:e0:15:ff:73:b9:
a0:ee:c7:87:d6:2e:e4:bf:5f:ee:5e:94:ff:2f:ae:e8:7f:ef:
2f:f7:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:50:03 2026 by rpki-client