Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier: TU83QeAd+FOELyFXDAITtDEqESSskI1CH2aNej8y76M=
Subject key identifier: 56:D6:F3:1F:67:4A:71:2D:29:E6:1C:69:CF:4C:53:B1:FF:FF:20:C2
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial: 01A12C576ECB31399F0437ADF8CAE9887013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number: 08AA
Signing time: Sun 11 Oct 2026 19:01:29 +0000
Manifest this update: Sun 11 Oct 2026 19:01:29 +0000
Manifest next update: Mon 12 Oct 2026 19:01:29 +0000
Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: ywWXrl7MFxbTHIP130DawicOr6uF60b9zLqa4l9RYyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:6e:cb:31:39:9f:04:37:ad:f8:ca:e9:88:70:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Validity
Not Before: Oct 11 19:01:29 2026 GMT
Not After : Oct 12 19:01:29 2026 GMT
Subject: CN=56d6f31f674a712d29e61c69cf4c53b1ffff20c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:ad:cf:07:6e:90:86:fd:74:33:14:35:0f:
2d:32:d8:d4:e9:64:03:e3:26:f1:bc:cb:ae:77:21:
42:58:a7:fc:59:bf:66:30:24:b1:47:c4:e0:d2:c4:
00:1f:44:ce:22:7e:98:2f:f3:25:04:33:a0:6c:ba:
52:9d:1d:52:c1:a0:be:88:9e:f0:8d:f0:66:88:19:
b2:d1:c1:9c:28:b5:86:ab:89:91:21:5e:6b:be:a0:
ac:7e:c4:36:9b:eb:a8:5e:b1:e7:65:83:9f:59:65:
7e:37:11:96:d3:62:a3:29:ca:39:80:b1:49:9e:a1:
d5:9b:65:88:19:be:78:64:78:1a:8d:f9:df:de:53:
cd:5c:85:8d:df:32:f1:b1:ca:66:93:ea:e9:53:32:
99:fb:a6:1e:24:f3:66:27:58:0b:f4:ac:28:e5:3f:
ae:f0:d1:84:89:3f:07:d5:02:b6:83:de:f3:ca:6a:
07:37:f8:d1:f4:39:33:d9:1d:0c:b9:76:46:dd:0a:
8f:4a:60:53:cf:06:f7:02:73:6f:f6:d0:eb:66:a2:
cb:85:12:b1:e6:67:cb:ea:fb:88:25:9f:f4:a3:b1:
41:16:36:2c:05:c3:f4:09:9b:ad:ec:67:7d:1e:29:
c6:97:bd:78:71:d7:ef:b5:ac:09:3d:ee:5d:fd:e7:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D6:F3:1F:67:4A:71:2D:29:E6:1C:69:CF:4C:53:B1:FF:FF:20:C2
X509v3 Authority Key Identifier:
keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ea:c8:c0:01:9d:35:ff:3b:a4:16:d8:e0:ef:f8:9c:70:b6:
2f:b0:29:6e:70:44:36:a6:b8:29:84:2e:3d:34:24:c0:f2:88:
ff:2d:d2:8f:2b:34:13:16:e8:ff:43:0f:e2:7e:f4:f7:28:49:
d5:e6:1d:32:25:df:13:4c:6d:e7:94:e8:a0:72:d5:8c:9f:4c:
48:da:ff:ae:09:00:1e:fd:17:ee:50:4c:8d:f0:db:53:d5:1a:
ff:79:ca:2d:68:cb:78:03:f6:33:65:6b:3d:0d:7b:e4:4c:3a:
1a:c8:11:85:85:e6:fa:3d:1f:f7:82:89:9f:fa:c0:c8:42:a0:
a5:91:06:60:41:51:74:09:5c:83:33:22:c3:80:c5:65:15:1c:
ed:d7:b5:b6:1f:2e:d4:32:1f:1b:f3:c2:6a:31:ee:d7:dd:d6:
52:06:a0:7f:b0:db:a2:de:e5:6d:28:33:ac:11:0d:a5:10:40:
e4:56:04:60:bc:f0:78:91:5f:26:5a:1b:11:bc:12:4d:1b:30:
eb:d6:c9:c1:8f:92:db:7e:37:27:46:f9:91:af:3d:3d:06:2c:
30:76:4d:e7:33:76:a8:28:1e:6a:e6:29:96:bf:ee:a3:55:3c:
ac:4a:e0:6a:5b:c9:81:d9:31:41:41:4e:56:bd:83:c9:08:b2:
40:90:99:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:59:16 2026 by rpki-client