Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: SoOWQifcHNEq4vZFNFjlwvhu7dbJezwTkZEId7WFgRA=
Subject key identifier: 4A:6C:6D:65:33:7A:7E:3A:E6:CF:2B:7B:71:FC:93:47:63:CB:21:42
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019EBFFF8523B166C6C7A97C8D40D0FB9853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 08:00:54 +0000
Manifest this update: Sat 13 Jun 2026 08:00:54 +0000
Manifest next update: Sun 14 Jun 2026 08:00:54 +0000
Files and hashes: 1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: xtrHmjKvQRW++wQmDSD1m/K2KozSMz7rea8CCEAZZhQ=)
2: hulhdN0Qn-peYoW5Is6weOEdrhI.roa (hash: s79WL7wCJTobjZ+5yZurGdhzF/MfqEzBAkYlfeNPrEU=)
3: mdV0Fqg427mYIUG5dBcvLrPAxKA.roa (hash: WTLE6TPjJAJPSn+BMFPBYzhnIQZbDzYgMm+ivoo+rVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:85:23:b1:66:c6:c7:a9:7c:8d:40:d0:fb:98:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Jun 13 08:00:54 2026 GMT
Not After : Jun 14 08:00:54 2026 GMT
Subject: CN=4a6c6d65337a7e3ae6cf2b7b71fc934763cb2142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:7d:96:d4:5a:9f:c3:67:86:62:79:83:33:
41:3b:2a:cb:bf:10:9e:5f:7b:24:4a:c8:33:ca:c2:
5a:37:3a:d8:e4:d6:3e:c1:83:99:d9:ca:74:bf:f3:
b8:e7:44:9d:b0:b7:4a:30:7f:69:5e:89:73:12:c1:
38:c4:b6:6e:0e:c4:17:dc:31:34:a1:92:24:51:db:
f7:73:7c:f9:6a:83:b7:22:1c:35:8f:e9:aa:c1:4d:
ee:b2:88:3c:63:22:d9:00:1f:df:ef:07:a6:ca:1f:
56:51:60:34:ea:dc:64:4e:17:3a:df:44:82:44:1c:
7b:e4:08:33:68:5a:9e:2d:a9:43:56:33:60:36:f2:
09:78:f2:d5:37:68:df:f2:b3:91:64:93:ee:08:47:
98:11:fc:f2:af:25:a5:8b:e9:fd:e2:6d:0b:d0:0b:
93:0c:c1:26:83:12:d1:54:97:93:0c:3c:78:0b:6e:
72:60:d2:53:d9:c8:d9:3c:32:02:6f:5b:eb:46:0c:
16:81:6e:df:2e:51:9b:d0:72:f0:c3:f3:b0:cd:6e:
99:50:74:90:67:7f:d8:c4:60:a1:8a:a0:6c:f9:71:
91:98:08:be:8e:f4:51:75:36:80:9b:58:ed:93:19:
fc:23:49:4e:df:03:a1:00:51:21:55:ba:8b:66:d0:
24:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6C:6D:65:33:7A:7E:3A:E6:CF:2B:7B:71:FC:93:47:63:CB:21:42
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a6:c6:b0:67:a7:c0:e4:2f:3e:c2:33:72:54:4e:df:f2:cf:
16:f2:37:8b:ab:f3:88:bf:18:22:ec:c6:1f:f5:4b:26:17:ed:
39:a8:96:d3:6d:36:6d:09:76:53:7e:ca:9c:bd:9a:42:ba:9f:
ba:a7:c7:ce:d6:16:5c:f3:2f:7b:34:f6:e7:7f:eb:dc:10:32:
70:07:f7:38:af:bc:b8:ef:10:87:25:44:07:74:88:26:61:43:
26:ef:5a:ed:fa:30:5e:e6:67:47:ec:fb:6f:19:db:3c:46:e0:
06:02:72:aa:22:97:5a:47:e0:f1:9c:6c:ea:de:ec:6f:a5:bc:
40:38:d6:ae:7e:d3:50:fd:21:b2:eb:de:79:65:8f:d3:d5:f6:
33:f0:07:6f:c3:fa:24:7e:9f:66:30:5d:05:8d:3b:2c:98:d7:
59:23:0c:e8:ef:53:a3:fc:38:22:ca:84:da:6f:7b:62:41:e6:
98:99:5b:d4:a0:e2:47:44:79:6c:41:ea:49:8c:3c:5b:ed:83:
8c:3b:78:a7:41:38:24:58:fe:6e:92:8a:e8:8b:7e:13:ff:ee:
d2:d8:8d:3f:95:0a:32:e2:3f:a0:8c:a6:1e:d0:1f:d0:48:73:
a3:12:a8:f1:c6:48:b8:96:8f:b5:96:ec:e2:88:40:a4:40:82:
6d:66:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:44 2026 by rpki-client