Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: 7utQDmOLKA3qk+hyIKL06sz7yIh9GFA+ITXdMZfEUjc=
Subject key identifier: FA:B8:D2:4C:8F:A1:B1:5B:CE:DB:B7:AC:78:91:A3:F0:55:B6:E1:27
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 019D26CD4A23D70BD848794369368160D528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 1840
Signing time: Wed 25 Mar 2026 21:01:21 +0000
Manifest this update: Wed 25 Mar 2026 21:01:21 +0000
Manifest next update: Thu 26 Mar 2026 21:01:21 +0000
Files and hashes: 1: BZsgeYjNsI-TrRFg5BP7kG-awrA.asa (hash: ufP7A3glS5C1ttJSNJgnaiCLyGOMe/t4RYLh1fKQTdc=)
2: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: 4LyEIyGja0+A3b93SFb652hNmAOPkk2AHyexj7qOPps=)
3: PCXd-9EviSUuR2-KbIZUWi0riBQ.roa (hash: nefgPfEo2Djt4hqoZTxg0xbxcxTGKZQtmu/1O0o4rzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4a:23:d7:0b:d8:48:79:43:69:36:81:60:d5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Mar 25 21:01:21 2026 GMT
Not After : Mar 26 21:01:21 2026 GMT
Subject: CN=fab8d24c8fa1b15bcedbb7ac7891a3f055b6e127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:81:a3:c9:5e:9e:b0:a8:62:97:01:93:d5:
bc:cb:f3:3a:f4:82:73:64:e1:45:45:ba:e1:70:0c:
3c:34:60:65:81:6d:98:1f:b7:30:36:8e:81:20:5a:
3a:2a:98:02:84:ac:15:d1:2e:bc:10:7c:f7:89:cd:
70:4d:85:45:d3:75:9b:37:cb:a3:b7:a7:66:d6:ba:
f7:d0:75:d4:86:83:12:6a:27:44:76:16:0f:e6:90:
3e:0a:07:fb:e4:36:6c:13:7c:1a:e2:b9:0e:26:95:
ef:3d:f8:b2:66:dc:be:06:4f:ac:3b:56:02:23:e8:
37:e9:49:e8:bd:49:6f:73:92:eb:c5:79:21:52:30:
a2:75:6c:33:ad:f2:ed:dd:8c:c3:0d:cd:9d:d6:a5:
10:22:30:a0:44:7b:0c:3e:b7:69:0d:b8:19:5f:8f:
74:2a:7b:5b:06:c8:e4:a5:98:14:b3:c0:fc:73:0b:
b6:6b:d1:8e:73:8e:81:92:74:cb:00:b4:a4:80:8c:
e8:1a:0a:25:ce:b5:ec:46:da:9b:91:cf:a1:76:db:
60:ba:dd:59:fa:af:48:88:a5:10:75:b1:b2:2c:3c:
f0:7a:42:69:ef:7e:9b:6b:cb:be:13:65:7a:0f:2f:
a5:1a:38:57:34:93:d5:f7:a2:bd:2b:66:61:8c:f3:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B8:D2:4C:8F:A1:B1:5B:CE:DB:B7:AC:78:91:A3:F0:55:B6:E1:27
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8c:5a:dc:42:a9:0f:25:81:8d:42:51:d6:f0:85:d9:61:7f:
b4:4c:db:dd:e5:f0:cb:f1:3b:ee:cc:cf:16:75:1e:00:f1:05:
13:94:c4:5b:8a:b4:36:0f:d0:fe:2e:f6:a5:ef:96:80:17:a2:
b0:d0:47:25:12:50:8b:d9:8f:04:87:71:3d:17:07:a0:6c:6a:
df:c0:86:71:60:bb:d2:c8:37:40:ee:43:2c:45:2f:57:d9:a5:
9a:2b:aa:75:be:09:fa:68:cd:cc:39:86:26:57:27:f7:86:0c:
95:4e:f2:0a:7c:c8:a6:ec:a4:37:ff:cf:0d:a7:99:cb:f9:af:
8a:08:bf:ca:b0:a7:73:7f:b7:f8:85:00:5e:5a:69:b7:37:ad:
cc:ef:8c:30:f8:19:c5:3f:dc:17:18:5d:87:a1:6e:96:d9:9b:
29:63:bd:e6:12:09:ad:f8:e7:a5:5f:e6:c1:d3:99:f4:51:36:
63:81:5a:ab:4b:3d:e2:81:ee:f9:c3:df:ca:ed:9d:21:45:0f:
49:9d:fc:9b:1c:b1:f1:8f:68:85:0d:33:01:40:fd:00:f6:cc:
5d:c9:e2:12:27:9f:d7:74:ea:07:b1:14:d6:6b:b2:58:c0:28:
5f:7c:fc:96:b0:5f:83:45:cc:11:6a:d8:bd:25:85:da:af:be:
c6:fa:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:09 2026 by rpki-client