Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: DSWrRh1v28DAMkdZNOjZi8lsqU0SEdaTF0DlXo69ReA=
Subject key identifier: 15:CB:AE:6D:0E:4D:0E:4E:76:4E:BF:0D:8E:D8:0A:8F:94:B4:73:51
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 019E1C104602D9AAEAEAA81C961A6F1B9E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 18BF
Signing time: Tue 12 May 2026 12:01:28 +0000
Manifest this update: Tue 12 May 2026 12:01:28 +0000
Manifest next update: Wed 13 May 2026 12:01:28 +0000
Files and hashes: 1: BZsgeYjNsI-TrRFg5BP7kG-awrA.asa (hash: ufP7A3glS5C1ttJSNJgnaiCLyGOMe/t4RYLh1fKQTdc=)
2: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: vYwfRIOJocMHdPtQgIpQoEDXkDqNVujZZrFOcE1wFPo=)
3: PCXd-9EviSUuR2-KbIZUWi0riBQ.roa (hash: nefgPfEo2Djt4hqoZTxg0xbxcxTGKZQtmu/1O0o4rzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:46:02:d9:aa:ea:ea:a8:1c:96:1a:6f:1b:9e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: May 12 12:01:28 2026 GMT
Not After : May 13 12:01:28 2026 GMT
Subject: CN=15cbae6d0e4d0e4e764ebf0d8ed80a8f94b47351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:98:b0:41:b9:a9:85:93:00:da:bf:f6:83:
ae:e5:13:ed:53:5a:c6:f2:6f:bd:80:58:7b:a0:ed:
d3:38:37:c9:bc:86:26:b9:f5:b6:b3:0d:31:f7:a3:
fe:e8:d3:9e:bc:10:43:c7:d0:fa:b2:bd:b4:fe:91:
ec:d0:88:3f:86:a0:97:98:f3:6c:61:c0:c6:b3:ae:
ad:95:ee:0c:c8:ef:a1:4e:05:27:bc:81:40:9d:33:
9f:5d:9b:c7:b7:19:66:6e:2a:46:41:ef:57:12:3a:
49:30:8e:44:cc:23:21:45:72:68:a8:1d:71:aa:13:
5e:60:99:2c:8d:b5:10:0a:fe:af:22:18:68:32:ee:
7f:bc:df:ed:d7:db:6f:86:70:f6:cc:d3:b5:87:03:
11:c3:3f:6f:d5:33:49:72:0f:9e:78:a8:45:94:39:
4d:1c:e0:ef:83:1c:45:04:32:e1:7f:20:f8:0c:59:
3f:4f:71:88:fc:ef:3c:29:fc:de:8c:92:50:7a:ce:
f0:42:a8:fc:be:7b:d7:9b:4b:ef:80:a0:78:8e:af:
3a:56:8a:ab:1c:de:89:a2:48:c8:59:6b:f1:78:11:
85:00:f4:62:cc:3d:b0:f3:31:b7:fe:56:0e:45:a9:
37:b9:38:be:3b:49:d4:cc:81:5e:72:a7:16:da:38:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CB:AE:6D:0E:4D:0E:4E:76:4E:BF:0D:8E:D8:0A:8F:94:B4:73:51
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c9:dd:f0:d3:84:9d:41:25:0a:c8:62:9e:1d:af:03:df:6b:
18:71:f1:b7:10:5e:0a:3f:08:42:3a:db:d9:54:62:b4:e3:fc:
23:cf:5d:0f:30:34:58:4a:0e:6e:03:68:c8:f9:9c:a3:8c:96:
42:a6:99:7b:54:b6:d5:68:0a:a7:1b:df:f1:72:ad:6f:33:63:
ee:d7:e2:ab:6a:5b:15:b2:df:c2:ed:1a:e4:3b:f6:f2:fd:f9:
53:82:17:ae:8f:c3:40:7e:28:5a:0d:dc:86:c9:06:5a:2f:c3:
f3:e4:85:21:28:50:8f:e1:ac:1b:8c:db:b1:6e:89:23:97:11:
d1:9c:fd:63:34:70:94:3d:95:86:54:32:d5:f1:e7:a5:bc:83:
5c:c0:a2:8a:c6:17:53:6d:65:6c:cc:c5:bb:6d:e2:e8:cf:e1:
73:2d:19:ac:c3:8e:fc:9f:20:9d:03:bc:3a:f1:a7:35:43:1c:
41:98:3d:b8:1e:12:63:93:e9:89:05:22:5e:20:bf:24:ca:72:
25:eb:95:95:74:98:dc:c8:d2:0c:77:4a:23:d6:d2:e3:77:82:
a9:c5:80:be:89:2f:53:2b:a5:fa:17:ed:01:09:b7:0f:97:77:
53:81:d3:f9:5b:ae:24:71:4c:e5:eb:a8:74:b6:17:93:4e:6c:
e5:b4:80:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:37 2026 by rpki-client