Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/ea7021-4c0d-4e1a-aa6c-af77d5e560ac/1/CkGiIV3WwNnh5XQbk4dYA7UTU3k.mft
File: CkGiIV3WwNnh5XQbk4dYA7UTU3k.mft (raw, json)
Hash identifier: 0uKlNfjl0O7RT2lmvC/g++RKY4xzUF0nY1WUgl6YTME=
Subject key identifier: 18:3C:21:C3:02:4B:4D:5E:29:02:2D:3F:48:18:13:B5:51:63:56:CD
Authority key identifier: 0A:41:A2:21:5D:D6:C0:D9:E1:E5:74:1B:93:87:58:03:B5:13:53:79
Certificate issuer: /CN=0a41a2215dd6c0d9e1e5741b93875803b5135379
Certificate serial: 01A0D0ED6A999C7BCAB0BDA7080DEC29DF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGiIV3WwNnh5XQbk4dYA7UTU3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ea7021-4c0d-4e1a-aa6c-af77d5e560ac/1/CkGiIV3WwNnh5XQbk4dYA7UTU3k.mft
Manifest number: 17
Signing time: Thu 24 Sep 2026 01:00:15 +0000
Manifest this update: Thu 24 Sep 2026 01:00:15 +0000
Manifest next update: Fri 25 Sep 2026 01:00:15 +0000
Files and hashes: 1: CkGiIV3WwNnh5XQbk4dYA7UTU3k.crl (hash: xDJRMfaXApJy1UbVFZAZBfsBwYBc9SsBZiH1byTTN08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ea7021-4c0d-4e1a-aa6c-af77d5e560ac/1/CkGiIV3WwNnh5XQbk4dYA7UTU3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ea7021-4c0d-4e1a-aa6c-af77d5e560ac/1/CkGiIV3WwNnh5XQbk4dYA7UTU3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGiIV3WwNnh5XQbk4dYA7UTU3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:6a:99:9c:7b:ca:b0:bd:a7:08:0d:ec:29:df:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a2215dd6c0d9e1e5741b93875803b5135379
Validity
Not Before: Sep 24 01:00:15 2026 GMT
Not After : Sep 25 01:00:15 2026 GMT
Subject: CN=183c21c3024b4d5e29022d3f481813b5516356cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:dc:8f:fa:3a:aa:38:6d:9b:6a:a2:6b:90:
e0:7c:1c:98:c2:43:1e:cb:6b:46:6c:5d:cb:7f:39:
5d:18:e0:69:bb:d6:d8:a4:6e:37:74:31:45:84:f6:
74:d0:ff:18:20:6d:bb:cc:e6:0d:67:8d:d4:47:b0:
dd:49:af:b3:82:66:c8:9c:aa:8e:42:49:23:98:23:
8a:f4:79:6a:58:31:07:39:16:02:92:dc:2a:ca:d2:
ac:45:3f:44:27:68:4b:9e:d4:54:af:74:13:ab:30:
d3:56:90:95:0c:75:36:3a:db:6f:fb:cd:fb:f0:9f:
4a:c8:b7:28:9f:b5:9f:6b:0c:e6:2d:79:0e:e0:21:
e2:e8:3f:4d:d0:66:5d:76:84:af:60:6f:55:d2:c5:
c8:69:ec:87:79:43:6f:94:42:bd:9b:94:e1:9b:53:
38:f8:06:90:29:ca:ce:ac:35:39:6c:9b:05:26:df:
90:92:5d:3c:64:b2:64:a0:2c:b4:9d:12:54:46:35:
60:cb:40:51:3b:e0:9b:39:c3:1e:ef:b2:bc:f2:41:
64:a5:41:f9:fa:7c:ee:1f:1f:44:62:f1:ac:86:5f:
30:a8:d3:56:20:0a:41:99:40:35:c8:78:4c:bf:d6:
8c:ff:2d:ff:ff:4c:3d:97:b2:53:33:52:47:bf:25:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3C:21:C3:02:4B:4D:5E:29:02:2D:3F:48:18:13:B5:51:63:56:CD
X509v3 Authority Key Identifier:
keyid:0A:41:A2:21:5D:D6:C0:D9:E1:E5:74:1B:93:87:58:03:B5:13:53:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGiIV3WwNnh5XQbk4dYA7UTU3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ea7021-4c0d-4e1a-aa6c-af77d5e560ac/1/CkGiIV3WwNnh5XQbk4dYA7UTU3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ea7021-4c0d-4e1a-aa6c-af77d5e560ac/1/CkGiIV3WwNnh5XQbk4dYA7UTU3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:39:e1:0b:95:d5:6c:c5:82:12:2a:f2:fe:f9:5c:3d:35:80:
3b:8f:43:8f:6d:4e:9d:5a:e1:e2:62:34:d4:c4:d5:2e:f1:28:
e3:73:03:d9:9f:b6:95:b0:ae:72:c1:1c:14:5c:db:85:01:05:
c9:29:8c:df:22:6f:33:62:80:c7:fd:4b:20:89:1d:d2:6f:c7:
85:a6:b1:33:96:22:82:2d:ec:86:f2:1e:e5:b1:16:87:6f:ee:
c1:29:7b:14:01:a7:63:8b:82:d1:a0:4a:e3:72:8a:47:4a:b3:
c8:ff:08:dc:f8:b7:b9:10:29:d5:b7:4d:d5:d5:15:cd:a8:db:
00:a5:3b:66:da:d7:e6:b4:ca:85:06:6d:85:97:3a:24:7d:b2:
95:b7:14:0c:c5:2b:dd:14:f2:4f:89:e5:3f:63:19:7a:69:2f:
52:94:88:5b:13:9d:bc:ce:da:99:2f:e1:f7:91:ad:24:8c:64:
a0:0e:1c:7c:31:f7:a9:4c:9b:3f:de:8c:80:79:cd:a3:0f:53:
16:53:c4:6d:28:97:5d:b7:12:7e:09:9a:e6:66:c7:c9:bd:56:
13:fd:42:08:31:89:a9:c4:4e:b3:4b:4b:06:51:a9:23:a1:c7:
0b:e0:fc:d6:f8:82:64:50:c2:db:b4:25:cd:99:51:2b:38:16:
21:06:78:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7WqZnHvKsL2nCA3sKd8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDFhMjIxNWRkNmMwZDllMWU1NzQxYjkzODc1ODAzYjUx
MzUzNzkwHhcNMjYwOTI0MDEwMDE1WhcNMjYwOTI1MDEwMDE1WjAzMTEwLwYDVQQD
EygxODNjMjFjMzAyNGI0ZDVlMjkwMjJkM2Y0ODE4MTNiNTUxNjM1NmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiDcj/o6qjhtm2qia5DgfByYwkMe
y2tGbF3LfzldGOBpu9bYpG43dDFFhPZ00P8YIG27zOYNZ43UR7DdSa+zgmbInKqO
QkkjmCOK9HlqWDEHORYCktwqytKsRT9EJ2hLntRUr3QTqzDTVpCVDHU2Ottv+837
8J9KyLcon7WfawzmLXkO4CHi6D9N0GZddoSvYG9V0sXIaeyHeUNvlEK9m5Thm1M4
+AaQKcrOrDU5bJsFJt+Qkl08ZLJkoCy0nRJURjVgy0BRO+CbOcMe77K88kFkpUH5
+nzuHx9EYvGshl8wqNNWIApBmUA1yHhMv9aM/y3//0w9l7JTM1JHvyVH5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBg8IcMCS01eKQItP0gYE7VRY1bNMB8GA1UdIwQY
MBaAFApBoiFd1sDZ4eV0G5OHWAO1E1N5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tHaUlWM1d3Tm5oNVhRYms0ZFlBN1VUVTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lYTcwMjEtNGMwZC00ZTFhLWFhNmMt
YWY3N2Q1ZTU2MGFjLzEvQ2tHaUlWM1d3Tm5oNVhRYms0ZFlBN1VUVTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lYTcwMjEtNGMwZC00ZTFhLWFhNmMtYWY3N2Q1ZTU2MGFj
LzEvQ2tHaUlWM1d3Tm5oNVhRYms0ZFlBN1VUVTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDnhC5XV
bMWCEiry/vlcPTWAO49Dj21OnVrh4mI01MTVLvEo43MD2Z+2lbCucsEcFFzbhQEF
ySmM3yJvM2KAx/1LIIkd0m/HhaaxM5Yigi3shvIe5bEWh2/uwSl7FAGnY4uC0aBK
43KKR0qzyP8I3Pi3uRAp1bdN1dUVzajbAKU7ZtrX5rTKhQZthZc6JH2ylbcUDMUr
3RTyT4nlP2MZemkvUpSIWxOdvM7amS/h95GtJIxkoA4cfDH3qUybP96MgHnNow9T
FlPEbSiXXbcSfgma5mbHyb1WE/1CCDGJqcROs0tLBlGpI6HHC+D81viCZFDC27Ql
zZlRKzgWIQZ4wA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:35:26 2026 by rpki-client