Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/17f540-d461-465d-a69d-a9509f1c8d4f/1/Ckb6izRJstOe_L7NRAJOAT2btXk.mft
File: Ckb6izRJstOe_L7NRAJOAT2btXk.mft (raw, json)
Hash identifier: TYsSByIFEAIm6YMjum3x1CuoIAYNYtBRaWS7GIVbwyQ=
Subject key identifier: 4E:8E:9A:4D:CD:C1:87:E6:3B:BD:E4:6E:96:8F:BB:38:95:95:3D:B3
Authority key identifier: 0A:46:FA:8B:34:49:B2:D3:9E:FC:BE:CD:44:02:4E:01:3D:9B:B5:79
Certificate issuer: /CN=0a46fa8b3449b2d39efcbecd44024e013d9bb579
Certificate serial: 01A1DEDE7A969ACA9C51ABE62C6E34FEBD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ckb6izRJstOe_L7NRAJOAT2btXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/17f540-d461-465d-a69d-a9509f1c8d4f/1/Ckb6izRJstOe_L7NRAJOAT2btXk.mft
Manifest number: 38
Signing time: Sun 15 Nov 2026 11:01:24 +0000
Manifest this update: Sun 15 Nov 2026 11:01:24 +0000
Manifest next update: Mon 16 Nov 2026 11:01:24 +0000
Files and hashes: 1: Ckb6izRJstOe_L7NRAJOAT2btXk.crl (hash: z201x7weny00o4RYY0ItJMNOAPAauSogvOGHI1zN4Zc=)
2: DJIw6GjCu-C3KI6OVVLmZyV_fT8.asa (hash: RPPe5W19Pi6AeAc0vXkuyOfvEYf5YrCW2598aFUbtqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/17f540-d461-465d-a69d-a9509f1c8d4f/1/Ckb6izRJstOe_L7NRAJOAT2btXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/17f540-d461-465d-a69d-a9509f1c8d4f/1/Ckb6izRJstOe_L7NRAJOAT2btXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ckb6izRJstOe_L7NRAJOAT2btXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:7a:96:9a:ca:9c:51:ab:e6:2c:6e:34:fe:bd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a46fa8b3449b2d39efcbecd44024e013d9bb579
Validity
Not Before: Nov 15 11:01:24 2026 GMT
Not After : Nov 16 11:01:24 2026 GMT
Subject: CN=4e8e9a4dcdc187e63bbde46e968fbb3895953db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:19:35:03:f3:c0:25:40:45:08:29:1d:33:
dc:b2:6a:f3:ee:f4:11:ad:73:9b:f1:11:de:59:9e:
0b:a2:92:4b:3c:23:00:63:38:c6:89:7a:21:85:e0:
59:d4:74:8e:49:86:ac:25:aa:eb:d8:3f:69:e9:be:
18:8d:cf:e6:4b:d9:38:6f:a1:8d:2c:5a:4a:15:fa:
ef:07:0c:3a:86:7e:fe:9a:f0:45:5e:10:e1:ae:c4:
57:30:c6:1e:2c:ed:14:94:f0:ba:bf:5e:6c:f9:8b:
04:53:25:95:ac:d7:1a:9b:06:c1:e4:83:91:b7:fa:
8d:f5:9e:66:9d:c0:bf:a7:9e:f3:bb:55:f9:d4:7c:
25:a6:dc:8a:21:db:94:51:8e:40:30:48:31:ee:ef:
50:e6:68:0c:98:29:20:53:cb:a6:68:bc:f5:77:2b:
43:1f:6d:0b:91:47:ce:65:0f:bf:ab:db:43:c9:9f:
f0:f7:43:08:73:1b:ac:99:43:64:1c:ec:dd:67:6b:
f9:4c:41:2b:3d:4f:84:fc:6b:df:bf:cb:2e:97:09:
0e:bd:db:14:71:a6:ce:82:24:36:e6:87:a7:8e:d7:
43:e9:69:4b:8b:51:8f:df:ac:30:3c:90:0b:57:c5:
d1:55:04:cc:b0:41:31:a9:f0:e2:51:25:e4:7c:25:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8E:9A:4D:CD:C1:87:E6:3B:BD:E4:6E:96:8F:BB:38:95:95:3D:B3
X509v3 Authority Key Identifier:
keyid:0A:46:FA:8B:34:49:B2:D3:9E:FC:BE:CD:44:02:4E:01:3D:9B:B5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ckb6izRJstOe_L7NRAJOAT2btXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/17f540-d461-465d-a69d-a9509f1c8d4f/1/Ckb6izRJstOe_L7NRAJOAT2btXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/17f540-d461-465d-a69d-a9509f1c8d4f/1/Ckb6izRJstOe_L7NRAJOAT2btXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:68:1f:32:2f:39:0d:27:b2:44:92:82:c3:a1:51:29:7a:a6:
ae:30:ec:56:53:20:f0:62:32:78:d0:0e:6e:c3:5b:1a:8a:fc:
de:00:f0:cb:b6:60:67:7a:95:45:3c:70:c0:ab:53:f7:3b:4e:
7d:5f:fb:98:fb:82:46:64:35:46:1b:4a:71:8a:8e:5b:47:6b:
20:e1:2a:c3:4b:fe:21:ff:02:1c:03:0d:ab:9b:72:33:b1:94:
bb:c4:5e:1d:1a:d1:0e:76:fb:4c:2d:34:90:f7:a6:81:16:cc:
b1:08:08:fa:6f:33:5b:d1:48:74:1b:9f:6c:fb:b5:27:96:0f:
8b:35:7a:77:1e:50:2e:a5:5c:ee:ab:01:d5:be:df:dd:fc:79:
05:b6:3e:a4:2d:ec:01:97:f2:1d:b0:89:c2:de:3b:b3:8b:70:
dd:0b:7e:17:7f:0a:ff:c1:28:f5:61:ab:45:35:8c:cb:41:fd:
75:17:f2:0d:ac:04:66:08:fe:07:15:ba:35:eb:f0:5d:f3:bf:
fb:7d:b3:3d:33:9e:d3:ae:29:7c:44:06:6c:3c:fb:8f:b2:22:
09:d7:54:a7:56:56:15:b0:a0:34:4b:5c:4d:ec:d4:35:77:1b:
56:7e:25:9c:22:5b:a1:e1:f5:a9:74:e6:09:10:40:37:fe:1b:
98:22:8e:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3nqWmsqcUavmLG40/r2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDZmYThiMzQ0OWIyZDM5ZWZjYmVjZDQ0MDI0ZTAxM2Q5
YmI1NzkwHhcNMjYxMTE1MTEwMTI0WhcNMjYxMTE2MTEwMTI0WjAzMTEwLwYDVQQD
Eyg0ZThlOWE0ZGNkYzE4N2U2M2JiZGU0NmU5NjhmYmIzODk1OTUzZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoUZNQPzwCVARQgpHTPcsmrz7vQR
rXOb8RHeWZ4LopJLPCMAYzjGiXohheBZ1HSOSYasJarr2D9p6b4Yjc/mS9k4b6GN
LFpKFfrvBww6hn7+mvBFXhDhrsRXMMYeLO0UlPC6v15s+YsEUyWVrNcamwbB5IOR
t/qN9Z5mncC/p57zu1X51HwlptyKIduUUY5AMEgx7u9Q5mgMmCkgU8umaLz1dytD
H20LkUfOZQ+/q9tDyZ/w90MIcxusmUNkHOzdZ2v5TEErPU+E/Gvfv8sulwkOvdsU
cabOgiQ25oenjtdD6WlLi1GP36wwPJALV8XRVQTMsEExqfDiUSXkfCXpZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6Omk3NwYfmO73kbpaPuziVlT2zMB8GA1UdIwQY
MBaAFApG+os0SbLTnvy+zUQCTgE9m7V5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tiNml6UkpzdE9lX0w3TlJBSk9BVDJidFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xN2Y1NDAtZDQ2MS00NjVkLWE2OWQt
YTk1MDlmMWM4ZDRmLzEvQ2tiNml6UkpzdE9lX0w3TlJBSk9BVDJidFhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xN2Y1NDAtZDQ2MS00NjVkLWE2OWQtYTk1MDlmMWM4ZDRm
LzEvQ2tiNml6UkpzdE9lX0w3TlJBSk9BVDJidFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2gfMi85
DSeyRJKCw6FRKXqmrjDsVlMg8GIyeNAObsNbGor83gDwy7ZgZ3qVRTxwwKtT9ztO
fV/7mPuCRmQ1RhtKcYqOW0drIOEqw0v+If8CHAMNq5tyM7GUu8ReHRrRDnb7TC00
kPemgRbMsQgI+m8zW9FIdBufbPu1J5YPizV6dx5QLqVc7qsB1b7f3fx5BbY+pC3s
AZfyHbCJwt47s4tw3Qt+F38K/8Eo9WGrRTWMy0H9dRfyDawEZgj+BxW6NevwXfO/
+32zPTOe064pfEQGbDz7j7IiCddUp1ZWFbCgNEtcTezUNXcbVn4lnCJboeH1qXTm
CRBAN/4bmCKODg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:41:33 2026 by rpki-client