Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: b6CaACxwzlWesRHVpZGmJy6cc3BVyqC2p3x7vH7xKLA=
Subject key identifier: 1E:FF:45:D5:C3:F9:35:C3:C4:8D:A2:9D:C3:D3:BB:3B:50:D6:3A:DB
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019D9A3ECD5B415803264E9AD100592C412B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:40 +0000
Manifest this update: Fri 17 Apr 2026 07:01:40 +0000
Manifest next update: Sat 18 Apr 2026 07:01:40 +0000
Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=)
2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: NdhBVmGfP9P3Y+P6CF4JEnFzCg8WurOSOz6/yxxpbd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:cd:5b:41:58:03:26:4e:9a:d1:00:59:2c:41:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Apr 17 07:01:40 2026 GMT
Not After : Apr 18 07:01:40 2026 GMT
Subject: CN=1eff45d5c3f935c3c48da29dc3d3bb3b50d63adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:20:11:43:4b:d4:81:d9:f3:1e:f1:9a:fa:
82:bf:c2:40:2e:47:fd:ba:58:ef:7a:82:a2:8c:b4:
58:a6:b6:01:cc:5a:e1:c3:70:b7:25:ab:5c:7d:10:
cf:c8:22:b0:21:cf:49:30:73:c2:42:14:04:de:3a:
64:0a:16:82:ab:22:86:e8:09:f4:1f:ac:2c:c5:57:
07:d8:bd:da:79:3b:a5:91:f6:d7:77:ef:65:ea:aa:
d6:07:8a:c7:54:e2:ba:9a:e1:46:9c:39:61:be:2d:
53:4c:b2:76:56:94:03:9f:37:e4:94:3c:25:f7:79:
2a:fa:46:b3:9a:9b:f4:92:2e:48:db:af:3b:dd:0d:
3a:87:86:8b:9e:45:90:56:7f:a1:e8:14:9e:18:68:
05:cc:f1:81:1f:95:f5:37:6c:69:f4:e3:ce:4e:29:
9b:6c:65:a1:ce:61:db:6d:3b:6b:a7:d2:8e:7c:65:
29:6b:9c:bf:78:0d:e9:dd:f8:9a:db:ce:80:0c:58:
e6:7c:5d:e2:66:c4:39:a3:23:ba:57:4e:a7:66:e5:
3b:2d:73:64:f8:de:7d:08:a3:8b:0e:10:66:33:2f:
5d:71:88:f7:98:b2:07:2a:d9:12:79:ca:cc:5c:e4:
5e:14:31:cc:d6:a6:4f:6c:19:bc:d4:5e:1a:6e:17:
2f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FF:45:D5:C3:F9:35:C3:C4:8D:A2:9D:C3:D3:BB:3B:50:D6:3A:DB
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:82:a8:42:d0:bd:f8:7e:50:02:70:bd:04:bf:ac:e5:3b:8e:
7a:af:9a:59:aa:0e:68:b7:ff:e5:ac:3d:2d:50:6c:3b:53:46:
c5:93:2f:bd:25:f7:67:43:88:29:62:c1:dc:63:22:0a:ba:2b:
c7:46:c4:ec:02:d1:f0:b8:18:8f:d9:e7:62:93:71:75:f2:37:
69:fd:e2:82:9c:c2:3f:93:a9:3d:ca:be:95:ae:f7:bb:f2:e9:
8f:82:30:18:8f:cf:ff:90:2b:47:2c:b8:4e:b3:2e:09:e6:e9:
81:8d:74:e8:f4:e7:51:71:50:d1:41:a2:95:7d:32:41:fb:25:
c6:15:90:16:73:81:22:93:11:0d:c5:80:ad:d2:64:7d:d3:83:
94:50:8c:9b:95:d8:cf:bf:ce:e7:ae:73:29:b5:27:24:c3:a4:
32:05:c5:51:fa:c1:07:2d:d7:8c:bb:75:63:fc:cc:e0:7f:71:
23:86:0c:53:ad:60:18:8f:c2:43:04:73:15:16:44:4e:35:12:
1e:40:37:10:83:49:e8:b4:a9:c9:16:59:d9:fd:24:8b:d5:94:
b6:65:8f:4a:87:64:e3:30:6a:e5:f4:c2:61:86:6e:d8:a1:b0:
15:4d:4d:96:d7:99:72:f9:c1:80:57:6c:94:0a:ce:53:d2:ba:
f1:27:87:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:45 2026 by rpki-client