Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: CdzDLXbj1L3kqwzp655BfoM3hjG5G3sym1mo+hyadfY=
Subject key identifier: CE:32:D9:0D:06:45:20:5B:E7:9D:86:65:59:94:10:49:BF:21:CF:8F
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019FA975552F92C8994B1D257CC3278C0E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 16:01:06 +0000
Manifest this update: Tue 28 Jul 2026 16:01:06 +0000
Manifest next update: Wed 29 Jul 2026 16:01:06 +0000
Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=)
2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: +FVqskIGLEQSOwqHZdqUI9Au1M2nR/1NffyopEhDpVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:55:2f:92:c8:99:4b:1d:25:7c:c3:27:8c:0e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Jul 28 16:01:06 2026 GMT
Not After : Jul 29 16:01:06 2026 GMT
Subject: CN=ce32d90d0645205be79d866559941049bf21cf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:a2:2a:57:d1:48:a9:9c:5e:7d:85:26:42:
9f:9c:4b:14:1d:af:4c:dc:1e:72:19:12:85:a1:3e:
ca:e0:f7:35:ee:b0:bf:67:d1:a1:bc:f9:96:d4:b1:
73:66:18:03:c0:d2:22:aa:17:d8:a1:c2:33:5c:30:
e7:46:6f:a3:da:d0:06:7e:5a:08:8b:6a:5f:c0:85:
6b:8f:d1:25:a0:db:84:f0:c6:89:1b:d7:bd:21:f2:
ab:54:ba:e1:b3:87:5a:f1:38:ab:39:b0:03:15:40:
59:90:e8:e3:af:b0:0b:e8:13:86:dd:f2:8e:68:bb:
98:da:a6:bc:fe:26:df:57:d5:a8:e6:41:14:6c:d2:
77:b3:35:0b:c5:df:78:83:c0:18:55:57:e8:12:df:
68:da:3b:a7:51:5b:fc:e4:e5:d0:a2:43:ad:84:14:
be:89:b0:7a:17:82:00:e4:68:25:1e:ce:de:66:c9:
80:2d:ef:59:98:62:9e:f0:b4:19:fa:90:ed:ce:90:
15:fe:60:2a:0a:cd:ec:eb:3e:4d:30:92:d4:34:f1:
7d:0c:ea:00:b2:5f:82:81:47:81:f0:5f:a8:09:a0:
44:6c:f3:39:63:77:87:22:24:89:c5:70:2a:38:09:
da:dd:1e:f4:35:7e:d0:ff:82:92:2e:0e:d0:31:86:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:32:D9:0D:06:45:20:5B:E7:9D:86:65:59:94:10:49:BF:21:CF:8F
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:12:b2:de:f0:6a:bb:12:02:08:6e:42:84:ed:c1:74:ac:f0:
4f:80:f3:31:84:5e:ca:8f:52:f8:43:df:f3:93:fc:e8:85:5a:
5b:2c:5e:bd:da:9d:af:a2:ae:8a:ef:53:1e:9f:d7:59:2b:8c:
16:b1:63:05:e8:25:24:2c:b8:82:55:b8:7f:2b:6d:59:36:88:
66:5f:79:0d:52:4b:01:03:d1:fe:62:8b:9f:b6:62:18:5e:97:
28:b4:09:6a:79:85:5d:60:25:a7:d8:bf:d3:a9:a6:bb:6c:f7:
3e:21:bd:37:cf:20:e4:83:ef:eb:a8:dd:84:46:b1:fc:1a:92:
46:f6:4c:6d:73:a3:63:cb:ba:db:1c:b1:f7:8c:f7:5e:15:bf:
97:06:58:1d:71:49:cc:70:a4:88:4b:e3:8d:8a:8c:ed:1e:88:
c7:ec:41:f1:e4:7c:b3:a8:1e:0e:8e:46:95:b2:b9:5c:49:1e:
fd:e3:07:56:65:a1:59:59:23:a5:8f:37:2a:6b:69:b9:f3:2e:
64:bb:19:75:8f:cb:0f:6c:11:e9:06:55:72:3e:0e:77:93:e9:
37:b9:de:db:6f:d4:e4:e1:ca:71:1a:80:0b:2e:68:77:71:c3:
07:a0:4a:06:e2:8b:65:ea:e0:3d:1a:09:1c:8a:fb:6c:91:c5:
31:c7:3c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:26:01 2026 by rpki-client