Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: IcVtdddP3UzI8/Sam1FYAG5ZatPj4f1neF7g7PtfHuE=
Subject key identifier: C5:D8:85:AB:A5:FD:D8:A1:FA:59:3E:7D:B7:16:32:0C:45:8B:96:74
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 019FA93E3C487490B62E1049DF2E49F5F143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 15:00:55 +0000
Manifest this update: Tue 28 Jul 2026 15:00:55 +0000
Manifest next update: Wed 29 Jul 2026 15:00:55 +0000
Files and hashes: 1: 1WFjwMGMePlEAC8bm7XUOdRFj34.roa (hash: fW2dzpRcyQ80IgEJ6uR/Uw++9kayO/2mr9G7qpsC/1w=)
2: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: FFMmsL/xkYaN3BxXqUhfjVYPKO7sm2reXuUPR4d4ZNU=)
3: Z0Yd5ryo6CVHolrVfgTJW3VNRio.roa (hash: qAoF6R0Ct6kB3sTz/3lrppb3yX+381mHA9jGPvlKM8Y=)
4: rHFkeLh05qkzhm3XqYX2jCr6Jwc.roa (hash: rLIRPVEJIS1dHp/fkMSEkxmJ0YQCqnoXU1iytE3RgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:3c:48:74:90:b6:2e:10:49:df:2e:49:f5:f1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Jul 28 15:00:55 2026 GMT
Not After : Jul 29 15:00:55 2026 GMT
Subject: CN=c5d885aba5fdd8a1fa593e7db716320c458b9674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:f0:cd:56:91:a7:11:dc:92:d3:2e:74:55:
24:cb:f2:9f:94:f4:b9:ae:3e:6e:a7:02:f6:3c:7f:
40:35:42:5f:0a:4c:04:b9:70:6f:97:3d:f1:e5:d7:
04:86:3d:25:0c:8d:8d:3c:bf:0a:7d:ba:db:57:b2:
71:e7:80:aa:14:f7:fc:ff:2b:86:31:69:d8:f6:f4:
f4:6f:3f:5e:a5:e3:8a:90:5b:22:a8:56:23:c5:50:
bb:b9:e4:32:46:95:03:9c:05:a0:af:19:1e:bd:56:
8e:17:fd:de:8d:5c:5a:9f:40:c8:0c:00:70:19:af:
e0:76:9b:06:f8:20:6b:b6:0d:29:f7:12:bb:55:bb:
97:eb:da:a2:af:8a:be:ef:55:97:f8:62:c9:85:36:
3e:2f:0f:75:b0:a5:56:ad:df:fe:92:6e:48:7e:ca:
62:34:10:1b:a2:7a:60:38:f1:9d:23:65:32:99:90:
77:6f:eb:1d:46:64:be:fe:8d:2a:bb:96:99:3f:35:
45:5f:5d:ee:b3:d7:6c:fc:fe:da:5d:0a:5d:58:c0:
fb:2c:52:eb:df:6d:32:c2:89:48:2e:4b:29:72:1c:
c7:b8:db:f5:7a:90:d3:6e:96:4f:1c:b0:fd:37:29:
ab:d2:bd:35:a4:35:87:41:b5:ac:d7:af:cf:e5:68:
2d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:85:AB:A5:FD:D8:A1:FA:59:3E:7D:B7:16:32:0C:45:8B:96:74
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3a:b9:a2:15:47:6e:e2:90:92:55:1b:47:df:fa:a1:12:04:
23:63:25:2a:7d:18:1c:e7:11:b6:9e:72:e9:e7:ba:bd:93:e9:
af:13:b5:2d:7f:6a:bd:82:b1:5e:89:a8:02:54:aa:e5:8b:c8:
19:4f:45:78:d3:f1:e1:ad:3e:29:32:7d:9d:fe:61:14:1b:ba:
0f:db:07:c7:7e:1a:5b:2a:b6:56:72:b9:be:67:b5:ec:11:45:
1f:13:90:b6:cd:b5:72:d6:b7:7a:65:7f:76:97:19:3c:62:ac:
d5:e1:7f:1c:3d:31:75:d0:06:a5:e2:ea:64:ed:9c:f0:31:5c:
2a:59:bd:09:21:bd:14:81:53:bf:4c:7d:7e:22:f8:c2:32:d0:
80:39:4a:b5:e4:67:4f:59:ef:23:b4:83:f5:9d:5f:13:6a:39:
10:44:9f:75:ec:45:b5:81:db:62:a2:14:87:0e:11:78:29:69:
60:4f:a9:24:a9:f2:03:85:f0:50:1d:05:e6:93:4f:32:0f:22:
65:f7:ca:ae:6a:28:d9:2d:f9:1e:47:c4:d0:49:98:a5:3f:4e:
4b:5a:5a:4e:f7:3c:3c:b1:5a:a2:0a:23:0a:33:4f:3a:29:ee:
85:67:0e:9a:27:c6:27:3a:c1:3c:b1:19:f1:4b:32:a6:7b:4e:
32:3a:b2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:36 2026 by rpki-client