Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: j0ityY2pgE7NKZzJNlWWNUOjapsT2IU7U7kmIFtBWZA=
Subject key identifier: 2A:FC:24:56:AA:06:79:8F:2B:14:3F:44:CB:0A:F0:10:29:A7:28:A1
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 019D9B8794C2CEDDC24230AEDED1B81C7488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 05A7
Signing time: Fri 17 Apr 2026 13:00:46 +0000
Manifest this update: Fri 17 Apr 2026 13:00:46 +0000
Manifest next update: Sat 18 Apr 2026 13:00:46 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: pcAsEQ7GIv/NbZcUWDJaW8ZbaAiNfjpml++35h4cc5A=)
2: LNCbK6oFpSX7VrazVm0NKmkZQwE.roa (hash: 8I25wabiQRp4293K2/OnqVhvqWH+P1esMFI9OKX+Mkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:94:c2:ce:dd:c2:42:30:ae:de:d1:b8:1c:74:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Apr 17 13:00:46 2026 GMT
Not After : Apr 18 13:00:46 2026 GMT
Subject: CN=2afc2456aa06798f2b143f44cb0af01029a728a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:0c:dd:7c:d6:0a:b5:36:48:0e:86:da:f8:
6a:db:4f:c5:09:bd:7e:90:c5:ec:e7:51:fb:1b:73:
2e:a3:40:34:48:c6:e9:a2:1f:a4:b1:15:67:ba:f1:
76:ce:29:69:54:d0:fd:7a:1d:f9:5d:31:6b:3b:8a:
3a:9f:66:df:f6:05:cd:39:63:8a:f5:98:44:c3:8a:
78:72:07:8b:d8:f7:11:a8:a0:df:76:24:8c:4c:29:
9d:3a:3b:8b:b7:5a:e7:03:af:ad:de:1e:e8:ea:15:
33:6f:13:1a:c8:16:0a:60:d6:49:33:ae:14:73:b5:
fa:39:33:1f:92:01:79:a8:65:87:50:eb:db:6a:3f:
e6:77:fc:07:e1:67:02:42:d6:77:d4:55:9c:94:50:
e2:8d:e9:e2:fc:e1:1f:56:94:33:83:98:dc:7a:1e:
e9:18:89:db:ee:89:2a:83:fa:6f:cc:73:6f:33:72:
37:44:2b:5d:71:ef:df:c0:37:86:b1:23:31:fd:98:
aa:04:a5:dc:cd:64:69:11:be:68:91:bc:0e:77:f0:
67:43:d5:ce:a9:cc:2a:4e:78:ad:b2:2b:07:ff:ab:
15:6e:cb:d7:d5:5d:65:3f:ae:2d:c6:ff:a9:71:45:
2a:34:07:df:34:da:8b:98:29:e4:95:6c:50:6f:77:
e1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FC:24:56:AA:06:79:8F:2B:14:3F:44:CB:0A:F0:10:29:A7:28:A1
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1f:9a:7c:c7:b4:ee:eb:15:19:8d:f4:dd:c2:08:1d:0b:1e:
1e:ca:e6:37:f4:e9:de:1f:2b:70:41:9c:d1:82:9b:59:4a:a5:
9b:6e:7d:02:a2:1d:18:ea:43:40:c6:73:15:c5:e0:e2:71:f2:
94:29:c5:04:88:2e:0e:19:91:68:b2:64:6f:04:c0:e0:93:d8:
8b:41:8c:06:71:78:24:12:52:85:42:95:15:70:5d:93:41:37:
4d:65:9c:21:ba:dd:3e:1a:3a:75:f1:5c:27:01:5a:dc:17:0e:
ca:44:09:9c:d2:a5:90:df:dd:d8:7c:81:18:e5:fa:99:e6:51:
22:5e:3b:61:1d:7f:58:f0:a9:37:dd:c0:75:ad:8b:24:fb:98:
2e:57:9c:cf:0e:3d:e3:f4:ee:5b:67:40:fe:25:0c:70:34:27:
15:7d:d3:f2:fb:6d:7b:e7:6a:21:6d:70:14:ad:ac:89:4c:d0:
eb:28:d4:de:ea:16:05:0e:b4:3b:22:7d:94:68:59:2b:ae:23:
d4:5d:c5:90:b5:ac:c9:10:4c:54:f7:b0:db:e3:ef:04:05:8a:
80:c3:66:41:c9:c4:d9:6b:90:ed:a4:02:49:3b:86:3d:f3:a3:
fb:60:f0:91:ff:4a:27:8b:49:1e:98:b5:17:27:97:89:c6:05:
ac:e6:47:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh5TCzt3CQjCu3tG4HHSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh
NjUxZjQwHhcNMjYwNDE3MTMwMDQ2WhcNMjYwNDE4MTMwMDQ2WjAzMTEwLwYDVQQD
EygyYWZjMjQ1NmFhMDY3OThmMmIxNDNmNDRjYjBhZjAxMDI5YTcyOGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LsM3XzWCrU2SA6G2vhq20/FCb1+
kMXs51H7G3Muo0A0SMbpoh+ksRVnuvF2zilpVND9eh35XTFrO4o6n2bf9gXNOWOK
9ZhEw4p4cgeL2PcRqKDfdiSMTCmdOjuLt1rnA6+t3h7o6hUzbxMayBYKYNZJM64U
c7X6OTMfkgF5qGWHUOvbaj/md/wH4WcCQtZ31FWclFDijeni/OEfVpQzg5jceh7p
GInb7okqg/pvzHNvM3I3RCtdce/fwDeGsSMx/ZiqBKXczWRpEb5okbwOd/BnQ9XO
qcwqTnitsisH/6sVbsvX1V1lP64txv+pcUUqNAffNNqLmCnklWxQb3fh6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr8JFaqBnmPKxQ/RMsK8BAppyihMB8GA1UdIwQY
MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt
MzFhZWMwN2U5NDVhLzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh
LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQh+afMe0
7usVGY303cIIHQseHsrmN/Tp3h8rcEGc0YKbWUqlm259AqIdGOpDQMZzFcXg4nHy
lCnFBIguDhmRaLJkbwTA4JPYi0GMBnF4JBJShUKVFXBdk0E3TWWcIbrdPho6dfFc
JwFa3BcOykQJnNKlkN/d2HyBGOX6meZRIl47YR1/WPCpN93Ada2LJPuYLleczw49
4/TuW2dA/iUMcDQnFX3T8vtte+dqIW1wFK2siUzQ6yjU3uoWBQ60OyJ9lGhZK64j
1F3FkLWsyRBMVPew2+PvBAWKgMNmQcnE2WuQ7aQCSTuGPfOj+2Dwkf9KJ4tJHpi1
FyeXicYFrOZHng==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:59 2026 by rpki-client