Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
File: ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft (raw, json)
Hash identifier: GDpEBFeJybWBHx2MbtRlv4Hx4kO3FZ0iz43nHi3Ybn4=
Subject key identifier: 7C:2E:7C:3E:B8:55:64:24:87:91:70:96:C3:6B:FD:EC:81:B2:2A:4E
Authority key identifier: 72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
Certificate issuer: /CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Certificate serial: 019CAB34265198FFA383D9B93C2615CD9201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:47 +0000
Manifest this update: Sun 01 Mar 2026 21:00:47 +0000
Manifest next update: Mon 02 Mar 2026 21:00:47 +0000
Files and hashes: 1: T6aVPmNcqE5HPe1U1bzT5Q4XHzY.roa (hash: 8+A3ZIl9Wsa+nE0z7P+iEM6IdzJ3gW89vJMfXzNpKrc=)
2: ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl (hash: BbIZ70bLM8Dxbnqf4trHVeUVJI+bwkaQVebt1S0RwB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:26:51:98:ff:a3:83:d9:b9:3c:26:15:cd:92:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Validity
Not Before: Mar 1 21:00:47 2026 GMT
Not After : Mar 2 21:00:47 2026 GMT
Subject: CN=7c2e7c3eb855642487917096c36bfdec81b22a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:da:f0:28:cf:48:7c:a0:53:99:de:cc:5f:
f0:08:04:49:39:9e:32:8d:d6:b7:54:c7:88:18:14:
db:35:39:f7:5d:02:83:ba:f6:88:32:55:d9:84:56:
37:77:76:ed:c2:ea:29:e4:1b:fa:34:a2:4a:d1:1a:
e6:ee:e1:d6:8b:fa:d7:94:3e:67:81:0c:0e:af:14:
64:a7:ea:b8:ff:fb:5e:cf:7c:94:0c:6a:44:a7:2e:
ea:12:b8:10:ff:a7:07:37:04:3d:bb:c5:18:44:e9:
cc:75:9a:dc:0e:36:58:c5:ff:59:b5:9d:67:b5:7f:
79:eb:dc:71:a1:ab:27:86:c6:55:ef:46:9c:27:1b:
cd:cc:cd:8f:66:f5:89:81:0c:d1:8f:79:c0:db:64:
fa:91:6e:d3:9d:94:86:25:92:f8:45:06:d9:12:02:
cd:e7:45:0d:e2:86:5c:67:55:5b:76:71:62:3b:a9:
b6:90:1d:74:00:53:56:d0:41:e7:1b:4d:f3:77:95:
4d:8a:c7:5b:2b:01:29:19:1c:af:64:17:b8:aa:af:
3c:d6:3e:03:00:19:a1:0a:60:03:ef:e5:c7:d7:86:
cb:18:6d:5b:b7:86:1d:a0:f3:d6:83:26:04:b5:e0:
1e:0e:88:e2:de:cd:8e:1e:eb:7d:11:d8:90:87:61:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2E:7C:3E:B8:55:64:24:87:91:70:96:C3:6B:FD:EC:81:B2:2A:4E
X509v3 Authority Key Identifier:
keyid:72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ae:e2:69:cb:46:59:a4:a4:da:01:34:e5:e3:2f:9b:05:4c:
3e:c1:6d:25:48:67:c2:bd:cf:24:59:4e:2b:58:db:dc:6b:77:
24:a3:50:5e:27:39:7e:22:21:b1:93:f4:c1:9f:2a:ad:42:47:
6a:a9:7d:75:45:c9:72:74:5d:53:0b:09:7c:bf:95:0b:38:f7:
de:a6:98:2b:eb:98:e0:68:5c:e9:14:a3:7e:4a:49:7a:65:34:
29:2f:b3:41:ce:b0:96:d3:57:ff:6a:3e:1f:a9:c8:12:50:3c:
05:a9:04:14:7d:df:0b:ed:29:fb:24:28:d4:01:a6:11:e7:19:
53:4b:e8:3e:c5:23:5e:6a:8e:33:b3:d0:0e:26:9b:ac:84:f9:
a6:e6:b4:2f:1a:60:fa:ef:2c:85:8e:78:b2:a3:ce:c5:37:46:
0e:9b:e9:c9:e9:f9:0c:24:f5:33:a7:8b:25:cc:73:b2:6f:1c:
c8:25:28:f4:77:d0:b1:de:58:b9:54:ff:d5:2d:8f:e9:7e:eb:
f2:24:f0:55:91:2e:98:cc:5b:0f:9b:dc:d4:58:65:26:38:1e:
63:68:46:1a:56:c3:cc:bb:48:ec:92:75:e6:ed:78:cd:45:09:
47:71:1f:f8:e2:07:3e:e8:33:33:a9:7d:4d:99:02:35:6a:1f:
39:71:6a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:57 2026 by rpki-client