Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: YfM7GWXQDKjkSI3C2VDrGUiXd6ooou5aPcF0cH60hVs=
Subject key identifier: 4D:2C:7D:14:9C:DB:58:CE:EE:80:3D:24:AD:60:5D:84:49:E2:E0:AF
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019CAAC66D87145C9A80E59005F05AC7D129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:56 +0000
Manifest this update: Sun 01 Mar 2026 19:00:56 +0000
Manifest next update: Mon 02 Mar 2026 19:00:56 +0000
Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=)
2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: hxYxIpgVWcjulM9VZlxRffzvB/iManb43nZSsTXF8WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:6d:87:14:5c:9a:80:e5:90:05:f0:5a:c7:d1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Mar 1 19:00:56 2026 GMT
Not After : Mar 2 19:00:56 2026 GMT
Subject: CN=4d2c7d149cdb58ceee803d24ad605d8449e2e0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:64:80:c3:58:32:65:6e:ea:e7:38:9f:01:
a6:38:f4:84:49:3c:3d:f0:c6:c3:56:ce:99:50:4a:
b7:34:df:8f:04:50:e9:bc:b8:23:3a:05:9d:b3:0f:
42:da:0b:61:e7:4c:4b:d4:22:45:ee:2b:65:b8:ac:
71:47:f1:9e:8f:88:ae:a7:02:21:e3:1e:2a:91:fa:
ff:25:b9:76:8d:6a:72:33:80:99:dd:fe:2b:28:7d:
91:8c:25:d4:a2:90:fc:bc:76:44:11:67:da:d6:a4:
c6:cd:61:e3:86:04:79:98:55:53:86:67:f9:aa:23:
c2:4f:d7:ff:6d:b5:94:15:a1:1b:ad:24:c6:99:b0:
1e:fc:a6:53:4b:2a:6c:d9:28:f8:14:e5:2e:b9:15:
ca:88:9a:06:9e:00:32:82:58:66:b6:95:ee:37:5c:
36:c2:f3:99:d3:25:10:64:2a:08:1f:5e:53:ee:b4:
70:83:ee:3c:14:42:11:67:1b:71:06:2b:b4:dc:1d:
6f:f9:63:21:10:a5:3f:95:d7:9d:dc:4b:00:05:ec:
ba:44:34:67:98:7e:b7:fc:a2:4a:b0:29:57:23:a3:
77:d6:4e:79:36:01:00:3a:15:f1:f4:c3:df:80:52:
fa:64:07:c7:f4:d9:03:b3:93:74:cb:f5:52:b9:ab:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2C:7D:14:9C:DB:58:CE:EE:80:3D:24:AD:60:5D:84:49:E2:E0:AF
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:58:51:65:12:a7:70:fd:a8:10:fb:73:fd:45:88:e9:37:06:
37:b6:86:77:b1:13:b6:5b:4e:1e:98:ed:69:ae:b0:63:5c:10:
7f:e8:ac:8f:77:f2:d7:49:fe:47:88:9b:c8:e0:cc:21:45:3a:
03:9c:3e:30:43:09:04:33:91:f6:d5:e1:bb:7d:9a:70:a1:18:
0b:eb:02:80:b7:5e:24:61:65:96:d4:1d:a7:99:99:fc:67:14:
88:3e:46:dd:91:9f:d7:46:d2:d0:24:46:cc:2a:6d:a4:3a:28:
28:18:c5:92:b8:53:bb:d1:1e:32:26:75:f0:68:8a:9c:4a:31:
23:eb:09:9f:12:2e:b3:10:45:d6:4d:fc:f7:4d:eb:93:34:95:
b9:06:01:db:76:89:c4:1b:73:ca:4b:dc:01:9a:70:1c:db:20:
d2:d0:c3:bb:bf:7a:98:12:4b:e2:07:8c:a5:05:f9:75:65:a2:
da:25:ce:90:88:d4:e5:d4:14:7d:12:f1:3c:1b:fd:29:62:7d:
04:17:0e:df:56:c7:9c:e6:fa:db:12:7b:4b:10:67:77:9f:8a:
27:e5:b8:62:99:ea:1a:ef:45:14:4d:6a:1d:ac:47:92:5d:bb:
c5:9f:f5:3e:a1:d8:a6:16:3c:23:9e:e2:5d:82:5f:5d:ce:d8:
bb:ac:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:40 2026 by rpki-client