Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: QfZStu2886mE+E5UMIITdx6+9OBckG3bFJTnxjmWAiw=
Subject key identifier: E1:9C:9A:CF:43:BA:DF:C0:B6:C2:C8:93:9C:CB:63:50:FE:5B:FC:DF
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019EBDDA54D627F36FB73F53EA7FAB934A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 195A
Signing time: Fri 12 Jun 2026 22:01:02 +0000
Manifest this update: Fri 12 Jun 2026 22:01:02 +0000
Manifest next update: Sat 13 Jun 2026 22:01:02 +0000
Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=)
2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: 3W6tohjoOyzwBV2rY0kzpZyOTsixJ4yToiyC05+DsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:54:d6:27:f3:6f:b7:3f:53:ea:7f:ab:93:4a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Jun 12 22:01:02 2026 GMT
Not After : Jun 13 22:01:02 2026 GMT
Subject: CN=e19c9acf43badfc0b6c2c8939ccb6350fe5bfcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c6:e9:d0:81:ae:c3:f2:82:d8:81:c0:0e:f8:
54:27:3e:aa:97:97:7e:e0:cb:26:0e:ea:bc:bc:79:
d2:29:ec:84:b2:81:72:bc:3a:61:46:11:ec:8e:aa:
49:06:1a:bf:6f:d2:a2:5f:2d:98:10:c7:e0:c4:23:
04:36:6d:ae:6c:1a:9a:c7:b9:eb:56:d1:d6:e6:42:
9b:90:16:6d:5b:1c:81:85:d3:16:7d:f5:3e:64:56:
d0:3f:9a:6a:b5:c5:19:6d:37:be:75:45:64:d0:b5:
60:ea:dd:15:75:52:62:27:f8:cd:8d:90:b4:77:93:
41:f8:b3:5d:51:1e:ce:d3:d8:b4:2c:da:51:1b:7f:
7f:22:e0:10:7b:01:b0:b5:c3:30:75:a4:ff:e2:3e:
85:d3:5d:49:12:5d:07:1b:2e:45:5c:12:f2:4d:7c:
6d:b9:dc:27:a7:bf:c9:62:14:6c:54:c8:a6:4f:8c:
19:fa:58:dc:10:65:4f:ab:01:7f:3d:02:0e:b9:cd:
29:51:b3:05:35:84:30:11:90:3e:d1:f6:05:98:5c:
85:41:32:c2:1f:f1:7d:99:f9:46:aa:0d:10:42:b6:
17:7e:30:bb:1e:15:eb:24:08:ac:69:60:db:8d:8e:
cd:03:11:24:bb:c9:b1:81:10:e0:ba:40:1a:1f:3b:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9C:9A:CF:43:BA:DF:C0:B6:C2:C8:93:9C:CB:63:50:FE:5B:FC:DF
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:19:1b:96:5a:1e:06:15:34:45:b1:b0:4f:79:58:ac:af:51:
38:97:49:eb:be:49:ab:a0:99:64:b6:29:f9:c8:f7:6b:e4:52:
74:4d:6f:64:eb:47:76:15:3d:48:4e:8b:61:72:69:e3:43:62:
75:0b:ff:9e:91:83:a2:af:61:fb:39:ff:86:77:84:b2:c2:b2:
ec:ad:5a:41:35:95:6d:79:7e:c4:c9:a3:11:0a:83:dd:5e:9b:
97:79:2a:38:81:4a:31:fe:a0:08:47:cd:a8:81:2d:0d:12:e2:
74:09:3f:9d:19:f9:19:91:02:bf:88:ae:d3:18:2b:82:86:3c:
44:7d:27:b3:01:ef:72:0d:5c:df:6c:6f:72:c6:85:75:d7:eb:
35:fb:31:82:3d:f0:bd:4a:97:26:ae:67:a9:8f:12:6c:6d:9f:
d3:e4:2f:16:3e:53:cc:3f:d7:3f:78:c4:68:81:74:50:d8:fe:
44:07:93:ee:51:76:19:a3:e1:23:f7:2f:b6:63:4f:8e:bd:f5:
50:0a:90:9a:91:51:85:e2:5c:be:38:ac:05:be:0c:57:0c:e1:
e7:ec:70:9e:11:a3:cb:ba:59:52:85:df:2d:dd:4a:40:a8:88:
3e:65:83:fe:5c:41:c6:c3:6b:73:fa:59:68:5a:45:c5:35:03:
eb:f3:4b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:51 2026 by rpki-client