Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: boXHMT/dsK6ZH5AavXHu3ikVTIP1lPfz+1a2WyWveps=
Subject key identifier: 8C:7C:83:F3:0E:41:C9:B4:F6:F1:E1:8B:90:38:D7:D6:54:50:02:AB
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 01A0C8C6D0E9629C5913859053E3177443F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 1A22
Signing time: Tue 22 Sep 2026 11:01:07 +0000
Manifest this update: Tue 22 Sep 2026 11:01:07 +0000
Manifest next update: Wed 23 Sep 2026 11:01:07 +0000
Files and hashes: 1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: PPdiQQB/5i9rCrTqBRf9ndv5Se0WMpLbSEEyda+CpXw=)
2: PCXd-9EviSUuR2-KbIZUWi0riBQ.roa (hash: nefgPfEo2Djt4hqoZTxg0xbxcxTGKZQtmu/1O0o4rzc=)
3: SaY7wOsMp2MJxwq5R4bQXJX5cKQ.asa (hash: 6aCmS8ZJo5oF+zi2/gpyJE6v5ir07/SV3sv2+dwp8nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:d0:e9:62:9c:59:13:85:90:53:e3:17:74:43:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Sep 22 11:01:07 2026 GMT
Not After : Sep 23 11:01:07 2026 GMT
Subject: CN=8c7c83f30e41c9b4f6f1e18b9038d7d6545002ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:68:32:3d:a3:ec:97:d2:7c:d6:03:71:24:
fa:81:43:dd:54:52:be:fb:61:2d:1f:c5:6c:61:cb:
e4:9f:e5:a6:0a:8f:7a:ea:87:46:22:ac:85:e8:14:
0e:e5:34:10:c0:72:dc:21:7a:88:0b:12:24:b3:96:
38:c3:09:62:9e:bf:ee:46:e2:40:6d:ab:db:a8:bc:
1a:bc:a3:df:cb:26:c2:52:c7:2c:d9:82:19:13:c2:
9a:ba:2e:c8:13:25:c0:81:51:9d:87:db:5c:4c:e9:
49:68:ee:6f:fe:e3:b1:0c:5e:43:18:de:0c:b8:0e:
e9:63:82:42:be:73:1a:43:8e:f6:2c:ce:cc:0b:53:
17:fc:1e:8d:ba:4d:bb:40:d4:3b:d6:ed:d6:1e:92:
8d:0e:31:64:f0:e4:92:fe:78:5c:01:6b:83:57:8b:
44:d6:08:07:26:a1:20:af:7f:f4:88:8c:30:16:6e:
47:b8:d9:b8:0b:1d:47:a7:5b:65:4e:39:1f:50:47:
dd:da:ed:10:19:f9:45:34:0d:03:a7:e6:ed:df:11:
3c:0e:14:7c:57:6a:44:1a:75:54:d3:58:db:c9:17:
a9:fb:8d:5f:26:0e:62:fe:97:bd:46:5b:af:4c:cd:
61:bd:73:62:c8:ff:6d:13:cb:17:30:d6:d9:d0:26:
ea:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7C:83:F3:0E:41:C9:B4:F6:F1:E1:8B:90:38:D7:D6:54:50:02:AB
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d2:c4:d8:a1:86:c2:3b:63:62:41:60:56:b5:4b:09:a0:ec:
44:b6:a4:cc:79:8a:05:88:02:a8:86:c7:4e:45:3f:59:9c:d8:
d6:78:32:61:9a:15:11:64:c8:00:13:64:7d:ba:73:ef:29:dd:
b2:89:76:ee:26:02:e3:04:be:0d:47:95:28:c3:89:95:53:4a:
cf:31:2a:df:e7:0d:47:53:fa:64:82:bf:54:c2:69:b2:06:cc:
51:b7:9b:cb:0b:fa:c9:65:e9:f2:2b:5e:54:a3:8b:19:3c:55:
17:7d:68:9d:c4:25:c2:f3:c1:f6:b2:1c:b8:c2:ea:8b:93:64:
15:2c:7c:16:e1:c3:77:c4:92:0e:7d:b3:91:cd:5f:c5:26:f1:
40:ca:25:56:d2:03:29:16:6b:e2:0b:64:92:77:40:08:86:08:
a6:9d:ac:1d:28:97:cf:36:11:43:c1:d4:e4:48:e5:f2:bb:2d:
92:ca:b1:35:5b:b1:37:c1:fc:a5:94:f0:89:65:8b:1d:c3:3d:
df:3f:4d:23:12:ea:eb:aa:17:d2:50:5c:33:e9:b7:b0:05:79:
fd:18:6f:33:86:1b:12:f0:13:d1:4e:43:07:1a:60:5a:a5:72:
a3:e5:b6:72:f0:7a:12:62:6b:2c:f2:fb:66:ef:07:9b:b6:1d:
06:bb:d6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:55:19 2026 by rpki-client