Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: XjzMT+MpIVaY/X6Zs+2EgGJFsp8VQVw+OkwBRVa1/HQ=
Subject key identifier: 45:C9:B3:94:50:EF:55:6C:0F:B6:DE:C5:0C:BE:0D:B5:CA:BB:B8:79
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 01A1216555320E34892CCCBF9B7B15328071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 077A
Signing time: Fri 09 Oct 2026 16:00:51 +0000
Manifest this update: Fri 09 Oct 2026 16:00:51 +0000
Manifest next update: Sat 10 Oct 2026 16:00:51 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: RnAUSDFvI2lraXAQbBLeF2Fb7sE+TG+4Ipc7PlaXLsc=)
2: LNCbK6oFpSX7VrazVm0NKmkZQwE.roa (hash: 8I25wabiQRp4293K2/OnqVhvqWH+P1esMFI9OKX+Mkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:65:55:32:0e:34:89:2c:cc:bf:9b:7b:15:32:80:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Oct 9 16:00:51 2026 GMT
Not After : Oct 10 16:00:51 2026 GMT
Subject: CN=45c9b39450ef556c0fb6dec50cbe0db5cabbb879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:4f:26:2c:bb:a9:0a:39:f7:16:fd:82:34:
db:78:72:d1:01:76:f4:78:8c:58:64:8f:09:33:f8:
16:12:21:a2:04:bf:3d:1c:4a:46:c7:56:40:9c:60:
bf:a1:f4:94:3d:f4:a7:c3:e9:ea:05:39:5c:b2:73:
30:68:ed:d6:06:d2:63:4a:82:17:1e:da:fe:e5:e9:
62:e3:db:55:8b:52:03:0c:4d:2f:40:bd:8a:61:d9:
39:a0:02:92:d5:42:6b:b7:6b:43:3f:f5:ac:ba:ed:
5b:88:0a:9a:12:a7:ae:b9:54:cb:bb:ae:11:90:1a:
1d:d9:a6:4f:c2:8e:a1:5f:ed:f3:2f:6d:4b:4f:c5:
d2:27:82:a3:4d:4b:c7:c2:d3:0c:64:fc:36:93:20:
53:b7:60:f8:4e:5a:56:8d:e4:91:2b:ba:29:49:29:
c2:19:24:f1:61:45:88:bc:14:da:e2:85:df:50:9b:
d1:b9:81:e4:00:80:79:2d:f1:03:53:3d:34:fd:c0:
33:b8:7c:2b:c6:e6:06:a8:6c:74:f6:e2:fa:e4:6c:
8f:1e:1c:4c:a8:d3:27:5c:50:bf:94:1c:73:c7:8d:
6a:51:13:76:92:98:58:fb:94:20:19:7c:14:bb:91:
8d:bf:a5:3a:8d:8d:d9:53:ff:4c:25:40:4b:31:a7:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C9:B3:94:50:EF:55:6C:0F:B6:DE:C5:0C:BE:0D:B5:CA:BB:B8:79
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c4:69:0f:bc:71:ec:ab:2d:7a:7b:c6:fd:e9:0c:b7:b3:38:
96:07:f4:84:d3:0e:06:1a:ed:a4:f8:6d:bb:12:02:7b:59:28:
df:97:7b:be:d6:e8:90:d0:00:9b:c4:53:fb:13:8d:32:4f:3e:
1a:58:b2:f9:de:c7:e1:7a:64:75:ef:52:d9:a4:be:5e:11:21:
8b:b0:3d:7e:5f:91:1d:c9:43:af:83:1a:77:89:c5:2b:ae:08:
01:31:03:06:fb:78:98:5e:6b:50:fd:78:7a:20:ef:58:55:43:
0f:09:80:d2:82:ff:1f:b6:32:c4:70:23:1d:14:33:51:e8:17:
ec:4f:ce:1c:97:2c:b6:22:d6:f4:96:85:69:bf:53:35:ec:55:
c1:78:52:90:64:ed:cd:8d:72:37:38:7f:15:d1:40:0d:06:e5:
8b:cc:4a:4d:d0:c8:f2:85:82:9f:8e:4b:2f:a5:14:a7:c2:50:
ab:17:53:d1:9d:a7:7b:1e:c0:04:cd:1e:bb:30:ee:66:77:6f:
4d:2f:cb:83:8d:81:dc:23:04:69:76:ae:9f:f6:b9:04:f7:1d:
f8:61:f4:71:65:20:64:7b:26:72:36:9d:55:37:5d:12:49:dd:
ea:e1:ba:b2:a8:89:d4:f4:25:ee:01:3a:cb:b1:b1:e0:3b:94:
45:5e:eb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:43:37 2026 by rpki-client