Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: Bafx3hueyuJSfiI0RfmwMuxOJkc0Xar/EyuV5DHAOGw=
Subject key identifier: 9C:60:14:D6:DF:38:3D:23:24:8A:E9:03:C1:0E:C5:8C:E0:00:33:1D
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 019D28BB2485F37ED16A549EF486A8618F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 1841
Signing time: Thu 26 Mar 2026 06:00:46 +0000
Manifest this update: Thu 26 Mar 2026 06:00:46 +0000
Manifest next update: Fri 27 Mar 2026 06:00:46 +0000
Files and hashes: 1: BZsgeYjNsI-TrRFg5BP7kG-awrA.asa (hash: ufP7A3glS5C1ttJSNJgnaiCLyGOMe/t4RYLh1fKQTdc=)
2: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: J0fMaBtr8uvOtz6TwfLMJGBbaFY/TqHg9ksccze1SiU=)
3: PCXd-9EviSUuR2-KbIZUWi0riBQ.roa (hash: nefgPfEo2Djt4hqoZTxg0xbxcxTGKZQtmu/1O0o4rzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:24:85:f3:7e:d1:6a:54:9e:f4:86:a8:61:8f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Mar 26 06:00:46 2026 GMT
Not After : Mar 27 06:00:46 2026 GMT
Subject: CN=9c6014d6df383d23248ae903c10ec58ce000331d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:73:43:6b:98:00:07:87:a1:77:23:f4:f8:
c5:1d:ab:7d:1f:c9:57:bc:1f:01:c0:95:3d:b2:f5:
03:80:e7:a5:81:5a:21:fd:e0:3e:3a:d3:1a:b2:f2:
60:68:d9:ca:ba:a9:6c:d7:68:d7:48:ad:af:44:db:
65:c8:85:50:32:87:42:b2:b4:7a:cc:22:00:40:e2:
8d:d5:25:61:e6:e7:f7:6d:97:e2:07:be:03:86:30:
73:32:e3:b3:23:4e:b0:68:8a:b2:73:02:9a:ee:10:
0d:ed:11:d3:01:8b:be:65:cf:0d:24:05:05:a8:cb:
da:2a:65:71:64:6f:8c:4b:fc:95:90:88:67:a2:bd:
bc:5d:c4:48:01:7b:1a:58:39:7b:54:78:1b:9a:01:
42:06:7c:b7:27:be:2a:87:d7:07:ae:eb:ac:15:20:
10:74:85:3d:f9:5f:66:fd:47:6f:f3:6d:22:bc:43:
43:41:19:f5:c7:c4:e1:c2:28:88:af:e6:e1:a4:42:
96:90:fa:6c:d9:86:3d:0a:0d:cc:4f:bc:b1:10:50:
05:14:37:57:52:4b:53:e3:c0:32:86:0c:66:30:64:
2d:04:14:f5:4b:30:07:ad:09:f5:9c:a5:cc:20:4b:
9b:cb:d0:f5:e0:cc:44:08:66:32:82:14:73:6d:c6:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:60:14:D6:DF:38:3D:23:24:8A:E9:03:C1:0E:C5:8C:E0:00:33:1D
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:47:e9:98:a3:9d:1a:80:4c:78:29:db:38:77:13:73:a0:a0:
48:03:78:34:42:5c:0f:a8:cf:e4:de:98:e5:02:e4:16:36:16:
9a:2b:1f:0e:dd:a2:98:a0:13:05:72:bf:7f:3d:a3:3f:a8:aa:
14:dc:8a:df:1b:a1:6b:d1:71:86:96:40:55:1f:4e:33:7e:49:
2d:f6:d1:79:db:12:68:96:0d:4d:ca:b7:a6:91:4f:d8:8f:ea:
73:6c:af:fd:5e:dd:30:40:67:96:ab:78:24:66:db:14:1e:c4:
be:70:90:a4:91:99:05:7f:b1:d3:aa:84:99:53:48:ce:51:7a:
e6:87:f8:30:f8:63:8d:03:be:a7:6d:3b:d5:d2:1b:03:7b:e3:
c6:b8:67:e7:82:17:fc:d9:cd:98:9a:6b:5a:9e:de:ff:cb:30:
ab:eb:b2:d6:80:cb:0a:ed:e2:ee:07:60:6c:1e:eb:51:d5:f0:
79:ab:a5:b1:df:12:61:31:26:0d:cb:69:dd:6d:70:5d:d9:81:
51:86:37:72:b0:e8:3a:03:ab:cd:9e:4a:24:cb:b8:61:8f:58:
a7:ad:00:70:56:f2:f6:cb:2c:7a:f4:1b:42:68:d4:e5:10:70:
d5:ba:27:79:11:a7:71:e1:a2:cf:a4:eb:7b:60:16:4c:78:e1:
3e:2a:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:34 2026 by rpki-client