Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: M609jd2DL6zeBe7Qxzj85J6K4HdU9yGZJqaTztF2t/Q=
Subject key identifier: BF:E0:BB:C5:80:DB:A1:5F:8F:B5:8D:2A:02:DF:AF:E0:2C:EC:02:30
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 01A10324659E0F623931A9EBD32C112D47C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 1A87
Signing time: Sat 03 Oct 2026 19:01:19 +0000
Manifest this update: Sat 03 Oct 2026 19:01:19 +0000
Manifest next update: Sun 04 Oct 2026 19:01:19 +0000
Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=)
2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: HfFKHH+3mnK/2/ZES/PFZP0CbJav/xSLWYVIj6c+DOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:65:9e:0f:62:39:31:a9:eb:d3:2c:11:2d:47:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Oct 3 19:01:19 2026 GMT
Not After : Oct 4 19:01:19 2026 GMT
Subject: CN=bfe0bbc580dba15f8fb58d2a02dfafe02cec0230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c5:3d:10:a6:48:2a:f1:68:04:f3:6f:69:69:
9f:4a:51:cc:92:21:cf:fe:3c:2c:23:63:3e:f8:ee:
5f:29:7a:ac:bc:b4:02:67:10:a6:03:36:c0:e8:60:
aa:89:c9:20:7d:69:5d:6d:36:2a:6c:53:ed:92:54:
22:c0:22:2d:1e:ca:b8:91:21:5f:f1:30:3e:11:ee:
4c:4a:ee:03:96:e1:4f:90:67:07:25:7d:97:bb:31:
94:6c:7f:ba:ea:1a:84:cc:0a:a7:7f:6f:31:19:b4:
59:0b:a1:bf:35:9f:d0:dd:a1:0d:d0:5d:11:42:a8:
4e:c1:96:e7:ed:7d:09:64:56:55:85:32:d6:ed:95:
b6:7d:43:c6:67:d5:81:3e:1c:35:fe:ca:0b:5c:c4:
e3:26:93:8d:53:83:15:19:ef:b7:06:28:f3:b6:b6:
7c:a4:d9:27:5c:c5:ce:9c:d2:51:2a:46:55:88:c0:
0f:6e:25:5c:64:a9:58:78:b6:8a:b1:74:96:c7:aa:
2a:ea:f7:2c:97:0e:5a:80:f0:f2:0d:e5:f7:1a:21:
93:a0:16:89:b7:dc:eb:a9:e7:8b:b9:14:4d:96:4d:
b2:35:4a:e7:6f:b3:1c:f7:53:6b:f1:39:c2:58:19:
67:0b:e4:01:cc:ec:8c:a4:38:de:1f:18:fb:d4:76:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E0:BB:C5:80:DB:A1:5F:8F:B5:8D:2A:02:DF:AF:E0:2C:EC:02:30
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:05:93:e1:d2:73:c2:56:d2:31:85:c1:b6:a8:95:7a:9e:07:
09:31:54:f4:ea:80:40:5d:0e:38:f5:4f:25:10:3c:d0:36:ae:
cd:e5:66:fc:af:da:56:63:c0:95:bc:80:ee:95:d1:1f:09:16:
2b:c5:e0:c7:f8:6f:2a:aa:73:61:a0:50:23:ba:bf:5c:06:17:
1c:f9:1c:f9:63:f5:ba:4f:4c:7f:f9:d7:60:38:d7:eb:a3:f2:
95:72:51:2c:46:26:76:10:86:71:f8:43:ea:f4:5c:82:c0:62:
bb:1d:c1:88:da:29:31:6d:e3:ef:f0:16:80:15:e9:3e:5e:0c:
fd:94:8d:8c:bf:91:60:90:cd:9e:bb:24:9b:0f:4f:37:90:f8:
83:60:02:a5:d8:72:a1:d8:00:3d:ae:4e:9f:03:b8:e4:26:b4:
8f:d0:8d:a0:21:c9:e8:af:10:f4:24:aa:2e:a0:15:c5:15:8f:
d6:9d:67:42:48:88:c5:43:5f:7e:78:a9:af:2c:6f:b7:66:96:
3a:7c:ca:6e:58:b0:e7:aa:84:77:1b:e8:15:fa:94:ee:17:3e:
52:51:6a:86:c2:58:c4:5c:57:e0:9a:a6:7e:43:d1:1f:6c:ba:
50:2d:03:46:f8:fd:c0:4f:ec:db:58:22:80:00:22:c5:c9:0d:
b3:07:f1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:53:59 2026 by rpki-client