Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: ia0w1zpOzjQaSD1xcPsZ+LxII7CZpT8OVJbOZ7vetgI=
Subject key identifier: 21:F1:7A:EF:8F:06:9D:9C:46:6E:AF:E8:CE:A6:A3:7C:EA:BB:00:C9
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 019CADFE1B1461F817EE6D077A3E8328EE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 052C
Signing time: Mon 02 Mar 2026 10:00:37 +0000
Manifest this update: Mon 02 Mar 2026 10:00:37 +0000
Manifest next update: Tue 03 Mar 2026 10:00:37 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: yh0sh9qKbSxO0Na7umD2+FQanAr+4j000GR+LbCWpAw=)
2: LNCbK6oFpSX7VrazVm0NKmkZQwE.roa (hash: 8I25wabiQRp4293K2/OnqVhvqWH+P1esMFI9OKX+Mkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:1b:14:61:f8:17:ee:6d:07:7a:3e:83:28:ee:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Mar 2 10:00:37 2026 GMT
Not After : Mar 3 10:00:37 2026 GMT
Subject: CN=21f17aef8f069d9c466eafe8cea6a37ceabb00c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:7c:59:1b:09:b0:a5:f7:1e:3e:7f:70:ce:
48:29:b7:24:e4:16:d5:6f:1a:b6:76:4d:fb:91:25:
98:0c:17:cd:89:9a:a5:3d:8d:94:5f:d6:75:df:e5:
a3:ae:ff:26:3f:c4:49:e2:c0:4d:2d:14:e9:21:40:
cf:cd:68:98:ad:91:07:67:ff:59:36:03:72:b2:3f:
7a:16:91:d9:36:8a:38:7e:f5:10:92:42:f5:5b:1f:
71:95:fa:91:7e:f5:64:d7:be:70:66:8a:23:1d:fa:
b0:35:49:02:d8:84:ec:03:17:6d:4e:1c:13:29:33:
44:24:55:97:9d:67:6a:94:01:d7:5d:f3:a5:cc:63:
86:44:b0:f2:12:84:c0:98:e5:2a:7e:ac:2c:cd:ac:
72:4d:12:e0:a5:ec:c1:c5:1f:6d:b3:21:c7:29:84:
e7:89:f4:8d:46:b9:5d:7e:bd:d4:58:f7:ea:84:27:
f8:93:48:9e:9e:b8:ea:28:39:aa:3c:c7:b3:ca:26:
7b:29:29:e9:c4:23:0c:93:ca:b9:2a:c3:57:76:c1:
71:a1:15:c1:07:2e:7b:52:17:d5:7b:ad:bd:f4:b4:
f1:db:71:66:db:1a:17:dd:4e:5a:de:99:2d:cc:55:
d1:58:1f:ce:b9:ba:32:62:7a:fe:3b:15:4e:3f:84:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F1:7A:EF:8F:06:9D:9C:46:6E:AF:E8:CE:A6:A3:7C:EA:BB:00:C9
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b3:d8:e0:c8:f5:72:58:0a:97:9a:e7:10:61:43:61:ff:af:
e3:6b:be:85:64:d8:22:fc:6e:34:fd:8a:14:2e:66:21:0e:62:
82:55:28:17:c2:88:ba:16:2a:a3:68:bd:fb:4b:bb:0b:e6:63:
fb:ba:6d:bc:6f:88:a8:43:f1:5e:73:4b:29:5c:cd:c6:9d:62:
49:f4:8f:1e:01:d1:a6:1c:d1:9c:fb:f7:66:86:f6:db:a6:ac:
c5:db:09:5f:fc:8e:99:b0:da:75:e1:d8:25:79:d7:6e:0f:a4:
01:81:6a:12:72:ad:da:2c:0d:e5:cb:15:11:f7:dd:ae:4e:6b:
a4:a7:9f:c5:7c:4c:c4:03:81:b0:09:21:c1:2d:85:66:76:93:
b1:9f:f8:f5:43:9c:4f:2e:11:07:02:c2:f9:84:01:58:3c:4e:
c2:ef:f3:39:04:01:4c:8d:4c:16:22:17:1e:ba:59:12:49:74:
85:31:2f:dd:f1:20:51:63:cf:82:88:45:95:6f:15:11:35:14:
f5:84:6a:fe:57:b6:2f:03:b9:ce:3b:06:e0:ed:4a:7a:d4:d9:
68:ee:33:ba:81:32:fe:b2:b0:d4:1c:9c:c5:0d:b2:04:0c:50:
5b:6c:f7:c4:3a:b1:2a:5b:4a:5a:32:18:ca:57:08:71:b6:0c:
ae:a9:87:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/hsUYfgX7m0Hej6DKO56MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh
NjUxZjQwHhcNMjYwMzAyMTAwMDM3WhcNMjYwMzAzMTAwMDM3WjAzMTEwLwYDVQQD
EygyMWYxN2FlZjhmMDY5ZDljNDY2ZWFmZThjZWE2YTM3Y2VhYmIwMGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtud8WRsJsKX3Hj5/cM5IKbck5BbV
bxq2dk37kSWYDBfNiZqlPY2UX9Z13+Wjrv8mP8RJ4sBNLRTpIUDPzWiYrZEHZ/9Z
NgNysj96FpHZNoo4fvUQkkL1Wx9xlfqRfvVk175wZoojHfqwNUkC2ITsAxdtThwT
KTNEJFWXnWdqlAHXXfOlzGOGRLDyEoTAmOUqfqwszaxyTRLgpezBxR9tsyHHKYTn
ifSNRrldfr3UWPfqhCf4k0ienrjqKDmqPMezyiZ7KSnpxCMMk8q5KsNXdsFxoRXB
By57UhfVe6299LTx23Fm2xoX3U5a3pktzFXRWB/OuboyYnr+OxVOP4RkiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHxeu+PBp2cRm6v6M6mo3zquwDJMB8GA1UdIwQY
MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt
MzFhZWMwN2U5NDVhLzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh
LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLPY4Mj1
clgKl5rnEGFDYf+v42u+hWTYIvxuNP2KFC5mIQ5iglUoF8KIuhYqo2i9+0u7C+Zj
+7ptvG+IqEPxXnNLKVzNxp1iSfSPHgHRphzRnPv3Zob226asxdsJX/yOmbDadeHY
JXnXbg+kAYFqEnKt2iwN5csVEffdrk5rpKefxXxMxAOBsAkhwS2FZnaTsZ/49UOc
Ty4RBwLC+YQBWDxOwu/zOQQBTI1MFiIXHrpZEkl0hTEv3fEgUWPPgohFlW8VETUU
9YRq/le2LwO5zjsG4O1KetTZaO4zuoEy/rKw1BycxQ2yBAxQW2z3xDqxKltKWjIY
ylcIcbYMrqmHLA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:19 2026 by rpki-client