Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: pRAJDe1+lXCmNz4lRYzgyuQxy0r+oXSMZ4sA5dUBSyw=
Subject key identifier: A3:23:64:B6:6E:4A:B1:B4:5E:5A:D6:89:29:2F:BD:3E:03:EB:12:5A
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 019F8FEC3037FC2F3D9495D2A44B0BE3F286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 1980
Signing time: Thu 23 Jul 2026 17:00:48 +0000
Manifest this update: Thu 23 Jul 2026 17:00:48 +0000
Manifest next update: Fri 24 Jul 2026 17:00:48 +0000
Files and hashes: 1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: s0n2EHhicKI+712GFs9KJ9uekTaENdQv7PkGwJWUm7Y=)
2: PCXd-9EviSUuR2-KbIZUWi0riBQ.roa (hash: nefgPfEo2Djt4hqoZTxg0xbxcxTGKZQtmu/1O0o4rzc=)
3: SaY7wOsMp2MJxwq5R4bQXJX5cKQ.asa (hash: 6aCmS8ZJo5oF+zi2/gpyJE6v5ir07/SV3sv2+dwp8nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:30:37:fc:2f:3d:94:95:d2:a4:4b:0b:e3:f2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Jul 23 17:00:48 2026 GMT
Not After : Jul 24 17:00:48 2026 GMT
Subject: CN=a32364b66e4ab1b45e5ad689292fbd3e03eb125a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6a:c0:7b:4e:fd:f6:0a:9c:5d:e9:e2:16:8e:
7c:c3:4a:d6:44:e8:7c:69:55:09:77:cc:da:a2:95:
55:7e:1b:b6:f6:0c:f0:ca:39:14:68:3f:4a:e0:70:
c9:f0:6a:46:0d:93:25:4e:d6:8d:89:ea:36:34:8d:
3b:93:3f:8a:b9:31:6f:bc:e3:d4:32:70:93:57:7a:
af:45:97:13:48:4c:a9:73:d0:4b:60:59:6d:84:87:
3b:e8:77:a8:50:de:63:a3:54:9b:7e:b3:91:d4:2c:
ea:19:57:08:88:54:f1:78:c1:01:fa:f4:2b:cc:d6:
f5:37:84:56:eb:06:57:46:1b:f6:4c:d7:2e:b2:62:
a1:79:8c:f7:b3:ee:ea:4a:31:3d:55:58:c2:50:80:
33:ff:17:59:f1:1b:f1:ab:8d:e9:31:42:e8:5e:47:
7c:2f:db:5d:94:02:46:c9:bb:d5:27:a3:2c:53:f7:
81:b9:1f:18:76:22:f5:44:fe:c3:5f:be:bd:bb:83:
2b:98:44:64:f3:47:42:0e:7b:4b:31:61:d2:5e:2a:
4c:30:74:c7:86:c7:71:5f:64:ee:40:82:78:c6:29:
fa:e5:b8:52:5c:38:e8:68:5d:3f:1d:9d:a2:05:e5:
46:87:36:77:1c:76:80:76:24:4e:93:62:3d:2e:cb:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:23:64:B6:6E:4A:B1:B4:5E:5A:D6:89:29:2F:BD:3E:03:EB:12:5A
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0a:43:cf:1d:70:eb:32:31:51:12:e8:39:41:a9:c1:f6:f0:
22:7d:68:9e:7a:4b:7b:ad:1a:cb:a0:db:56:0a:de:93:ef:e2:
8f:8a:ac:06:82:f6:a1:c2:86:7b:c3:3d:e8:2c:73:96:2d:66:
e2:0e:67:7c:08:75:c5:51:40:e9:35:c5:93:0d:71:b4:40:f2:
43:47:af:7f:31:82:9f:fc:29:1b:34:82:c9:85:ee:71:e6:c1:
2f:ea:21:98:9c:8d:f7:f6:ab:10:3c:30:05:40:49:23:bb:46:
72:df:df:31:51:13:b6:eb:b4:dc:5f:79:aa:88:ec:60:6b:23:
62:99:4e:5e:31:bd:6f:25:c2:81:55:e1:94:b5:16:f2:6c:b7:
41:16:b3:8b:7f:0b:03:54:43:9e:9a:98:25:7e:73:5d:69:1a:
6c:9c:40:69:98:89:51:74:74:9f:ca:82:e9:c3:a1:ae:16:82:
4f:e0:14:9e:c9:28:d5:db:7d:c0:5b:c0:78:4b:3a:d7:e4:ea:
d1:75:9b:2b:b8:71:c2:dd:85:19:11:d0:cb:5f:7b:f6:c0:e8:
ab:af:88:71:a9:fb:ed:08:12:f1:88:d5:10:7b:37:72:e3:c3:
1c:c3:7c:94:16:62:d5:9f:19:82:bc:3b:d1:6f:73:b7:77:32:
44:ab:5f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:52 2026 by rpki-client