Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: 0dOu+jYJeRGEmdlDIHd/mn7/g8mmMlRG0kU4XoKqibM=
Subject key identifier: 95:67:95:CA:25:2A:15:23:21:9D:79:AE:32:2B:18:38:81:19:FD:09
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 019D28BB80DCA8852783B062B32722A098F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 17CB
Signing time: Thu 26 Mar 2026 06:01:09 +0000
Manifest this update: Thu 26 Mar 2026 06:01:09 +0000
Manifest next update: Fri 27 Mar 2026 06:01:09 +0000
Files and hashes: 1: NvNBBzczdvedzfA0zmq_oqTjNy0.roa (hash: aNRFQnk32ELUJc2di3VPfCYAy8SNGZZzchv0G1guk1k=)
2: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: czXswG2UeQHdTl2BqYRvNBF2BxuXezQRvKbVJSAzPpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:80:dc:a8:85:27:83:b0:62:b3:27:22:a0:98:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Mar 26 06:01:09 2026 GMT
Not After : Mar 27 06:01:09 2026 GMT
Subject: CN=956795ca252a1523219d79ae322b18388119fd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:49:ec:ea:1e:a8:ca:05:43:de:2d:f6:7f:
cf:31:af:bc:23:82:19:8b:de:c7:2a:1f:32:d6:18:
d1:a3:d8:eb:6e:7e:a7:53:c0:85:38:96:59:36:a8:
4b:7b:b7:7c:7a:d9:d5:20:7e:ec:ef:a6:0d:18:09:
c2:ac:63:3c:c4:25:8d:98:4f:91:ad:45:b7:a7:b0:
f9:4e:a8:d2:cb:3b:2e:bd:ac:06:1d:bf:24:43:6e:
d5:01:19:81:60:19:9a:7b:2e:da:23:ed:5e:09:77:
54:e6:97:0b:7d:25:40:a4:04:5b:a0:d1:00:2d:57:
bb:30:87:92:3b:79:98:2a:58:10:71:6b:02:eb:84:
8a:f1:1d:1c:e9:2b:76:e4:02:48:42:07:2a:61:83:
14:73:14:07:04:a7:43:39:84:1d:ac:53:1e:c6:95:
c9:73:d0:de:91:83:2b:7f:73:4b:58:74:a8:de:a5:
d9:86:5d:45:57:71:27:8c:29:20:9c:38:0d:83:85:
d0:6c:64:9b:52:9f:db:4f:4e:94:a2:eb:fa:dd:86:
6b:fa:d7:db:31:b0:42:11:6c:78:4e:40:16:09:ac:
00:ee:91:3f:34:fd:0f:24:49:9a:15:a7:2d:a4:fd:
94:08:65:4f:a7:f3:27:a1:83:f3:d0:33:64:cb:f9:
23:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:67:95:CA:25:2A:15:23:21:9D:79:AE:32:2B:18:38:81:19:FD:09
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:98:2d:2a:87:a2:41:43:e7:78:0b:8a:5b:3f:5d:31:a4:f3:
0a:c7:67:bb:da:4a:6b:be:50:a1:7e:d2:03:dc:cd:7b:9d:2c:
46:d1:9e:bd:dd:f0:05:49:54:3f:b8:fe:5c:52:d4:96:b3:9c:
18:4f:14:7a:2e:d4:d1:fb:ec:78:4b:88:20:e3:c9:23:2f:66:
fa:03:d1:20:37:74:bf:4f:d5:cb:05:1e:a8:07:54:f2:87:54:
f4:e6:73:ba:89:e2:a9:ed:47:c2:b6:3e:cc:dc:ee:f7:d8:c4:
0e:f4:dc:f9:1a:db:f8:13:0e:e5:d3:75:f4:38:4f:06:bb:e4:
9e:c4:9b:71:75:b0:52:88:a1:c3:bd:43:67:4f:89:1f:a7:4b:
1c:92:8e:a3:7e:ef:20:7e:09:e2:3b:51:c1:53:de:17:4f:85:
7f:1f:8b:37:00:84:f3:b1:c1:51:cd:39:92:aa:6a:a5:6b:29:
ff:7a:98:1a:b8:c2:04:50:22:63:61:8e:54:b5:ee:5c:27:03:
7b:6a:5e:b8:f8:f7:d6:4f:d0:70:75:45:48:c5:86:0d:17:76:
68:3e:18:f0:3d:83:e6:9e:8c:35:89:64:86:ba:26:1e:94:37:
31:fe:b9:f0:3b:af:64:46:ce:67:9c:87:fe:94:b3:b8:af:eb:
e3:87:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:58 2026 by rpki-client