Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
File: ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft (raw, json)
Hash identifier: ExklIKvMqDXXr56MNCEeDX5Jm2nLgzC1/G0ojWK+giI=
Subject key identifier: 92:7C:10:29:4A:BE:4A:4F:61:3E:DB:C1:85:5D:5A:E7:B7:99:E4:B1
Authority key identifier: 72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
Certificate issuer: /CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Certificate serial: 019D98BDF0EDB4748F368BCA756BA536AD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:01:17 +0000
Manifest this update: Fri 17 Apr 2026 00:01:17 +0000
Manifest next update: Sat 18 Apr 2026 00:01:17 +0000
Files and hashes: 1: T6aVPmNcqE5HPe1U1bzT5Q4XHzY.roa (hash: 8+A3ZIl9Wsa+nE0z7P+iEM6IdzJ3gW89vJMfXzNpKrc=)
2: ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl (hash: CXGMlSsQfxlFAeCKJZCpOS/KJ9k+bn/lYb5NJ+h63go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f0:ed:b4:74:8f:36:8b:ca:75:6b:a5:36:ad:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Validity
Not Before: Apr 17 00:01:17 2026 GMT
Not After : Apr 18 00:01:17 2026 GMT
Subject: CN=927c10294abe4a4f613edbc1855d5ae7b799e4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:5a:ac:67:4f:61:ad:7c:93:db:c7:64:74:
9e:4b:65:ee:e9:99:e3:ad:ba:62:22:74:e9:e6:fd:
99:fd:62:5a:8d:85:c1:e1:28:92:96:b0:39:39:54:
47:96:05:c8:39:bb:b7:72:76:16:23:96:78:70:80:
91:24:1e:2e:24:fc:44:80:78:a1:ba:d9:bc:ea:86:
de:58:06:f1:1d:41:c5:47:77:2b:69:eb:15:4c:19:
70:f2:ed:9f:f0:ea:0a:c3:86:97:df:90:16:59:64:
d6:ba:ab:57:85:b6:df:4f:b1:c6:bf:f1:7a:9d:ef:
7a:6d:0b:16:17:47:68:07:05:c5:b9:5b:1c:46:9b:
61:ad:ac:86:e3:37:7b:7f:a1:13:e6:50:2d:1b:88:
ac:0e:4c:d2:da:dc:0f:86:3e:4b:3f:4a:de:ad:73:
23:78:5c:b2:5a:d9:7e:ff:f0:10:2f:46:8d:be:fa:
91:0c:d6:71:21:87:f0:58:46:59:af:48:41:10:8d:
c8:5b:3c:a2:b7:8a:4b:77:30:c8:c2:19:b2:eb:f2:
c1:06:93:f1:06:1c:b5:c7:8a:67:83:90:a7:29:05:
6e:ef:9c:3b:3e:ec:e6:cd:55:d9:84:f3:3a:1a:b1:
d4:9a:76:f9:ea:7f:fa:29:75:2d:f4:0f:54:32:ba:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7C:10:29:4A:BE:4A:4F:61:3E:DB:C1:85:5D:5A:E7:B7:99:E4:B1
X509v3 Authority Key Identifier:
keyid:72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e1:4e:37:ba:05:ff:78:ba:0f:05:e2:1e:06:c0:1f:04:e0:
55:c2:8b:cb:e5:c6:24:60:86:90:83:07:93:62:8f:93:f9:a7:
79:b0:9e:4f:fe:85:dd:5a:90:b2:f3:78:5c:78:68:0b:6d:db:
a1:78:ab:d7:dc:2d:92:68:a4:0c:0f:ae:00:3b:b8:52:79:5f:
9f:53:d4:49:26:ad:d6:ef:b8:7f:23:10:10:75:b1:59:f8:9c:
e0:08:91:55:94:dc:de:75:da:a6:5f:a7:dd:4e:4f:09:80:d6:
87:87:86:d6:ba:43:10:7e:dd:38:0c:7d:f8:9b:79:02:66:ab:
43:7e:3b:20:f9:7c:89:b4:3c:82:a8:7a:bb:07:9c:f6:19:6f:
50:df:7d:78:9d:af:e5:34:17:43:c5:a7:a7:3c:16:b4:14:29:
29:99:c3:e5:c8:f5:c9:e0:c7:1e:ac:39:dd:fb:37:7f:6f:14:
56:3b:1c:bd:16:47:0e:d3:12:1e:d6:49:17:85:26:8e:79:3f:
f8:f7:c2:05:08:71:78:e6:63:ae:6f:7d:de:eb:be:c1:84:55:
5f:6e:5f:1b:f3:ed:2d:31:eb:80:6a:8a:b3:4f:3f:99:c8:10:
ed:c4:da:8d:4e:64:5c:bf:c4:c5:42:ab:18:27:c0:6c:6f:01:
41:97:5e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:44 2026 by rpki-client