Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
File: CkJzuedRDQGfLFMps_NOrvKuvKY.mft (raw, json)
Hash identifier: L2J8Ai5A0Md915oQ6Jy07kbljX6O/2oJJUo4lyUOlS8=
Subject key identifier: DD:A3:89:2F:D6:51:00:21:74:3F:3C:E9:0C:56:EC:22:62:8F:E7:C2
Authority key identifier: 0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
Certificate issuer: /CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Certificate serial: 019F91DAA26B165E218CD5DD11A340347EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
Manifest number: 0137
Signing time: Fri 24 Jul 2026 02:00:52 +0000
Manifest this update: Fri 24 Jul 2026 02:00:52 +0000
Manifest next update: Sat 25 Jul 2026 02:00:52 +0000
Files and hashes: 1: CkJzuedRDQGfLFMps_NOrvKuvKY.crl (hash: sdhhbgHfCWW+9Wob/M6g5oXSvcfkNwPSMhhxr5EuXr0=)
2: yGVHSJihmK5lz-YBtlg1ypGdz5I.asa (hash: LHCOSJtU6LRqO7/ToKVntknxN1V5181fXBdOKoO29NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:a2:6b:16:5e:21:8c:d5:dd:11:a3:40:34:7e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4273b9e7510d019f2c5329b3f34eaef2aebca6
Validity
Not Before: Jul 24 02:00:52 2026 GMT
Not After : Jul 25 02:00:52 2026 GMT
Subject: CN=dda3892fd6510021743f3ce90c56ec22628fe7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:53:86:91:a8:3a:40:5e:50:44:de:33:de:
4b:c0:22:70:e3:2b:f5:47:0b:f3:4c:5c:4d:7b:12:
2e:50:24:7a:8d:bf:7b:26:69:6a:8f:2d:e5:69:ee:
f3:ee:72:92:9a:35:52:a6:11:3f:62:5c:21:00:d4:
3d:80:83:f9:62:49:fb:b4:89:a1:d4:e1:2a:59:b3:
0e:e2:cd:c8:fc:46:02:d9:f4:8e:99:de:b2:c9:59:
e2:b9:be:90:20:57:90:86:1f:50:ab:c8:33:89:c5:
e9:da:d6:a1:7e:9e:02:7f:5b:76:0f:79:22:69:47:
72:69:02:bd:7f:68:b7:bf:4c:10:de:3c:35:a2:0a:
df:51:55:99:f3:bd:e5:e1:31:ed:8f:d0:ed:3c:ab:
58:c1:cc:4a:4a:9c:54:79:41:07:e7:c6:85:d4:41:
0e:20:f4:08:ab:91:f7:52:d3:7d:09:00:08:62:25:
bb:09:ac:e1:5a:99:e6:c5:fb:36:f0:82:4e:16:ca:
09:29:de:ce:45:a2:92:41:09:dc:3c:db:7a:60:4d:
30:da:3c:0b:b1:19:6f:c9:82:19:90:c3:67:81:db:
08:90:3a:0c:9f:6b:78:13:9c:e4:64:cb:f0:f7:a5:
88:ba:d1:26:28:e1:1e:75:11:84:06:90:19:6a:c7:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A3:89:2F:D6:51:00:21:74:3F:3C:E9:0C:56:EC:22:62:8F:E7:C2
X509v3 Authority Key Identifier:
keyid:0A:42:73:B9:E7:51:0D:01:9F:2C:53:29:B3:F3:4E:AE:F2:AE:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkJzuedRDQGfLFMps_NOrvKuvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/152f0f-6935-41c1-9b5f-1ef9a1167ed4/1/CkJzuedRDQGfLFMps_NOrvKuvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fc:78:0a:a2:23:bc:f4:26:be:c5:58:8b:f4:f9:99:dc:a3:
70:69:97:35:f8:13:bc:9e:c4:fb:40:48:6b:7c:a0:6f:9f:d5:
57:3d:49:0e:d9:3b:db:1b:27:70:c2:de:81:96:53:4b:05:4e:
2d:d2:e8:d2:98:93:ce:ba:64:99:7a:9a:23:48:29:ea:04:c0:
42:94:74:15:01:3c:2d:cb:ed:4d:c4:80:ab:c7:f0:d6:71:d4:
80:89:b9:a7:ef:a4:ca:3f:84:75:d5:ad:49:d4:2c:d1:90:fc:
54:3e:61:0f:d7:a5:7d:e1:c8:08:c8:4e:b4:c5:2f:b7:f3:d2:
29:ac:50:d0:77:ce:bc:7e:f9:0a:c8:fb:9b:3e:2e:4f:30:d0:
62:1c:a6:ec:64:ae:f9:f8:f8:26:06:b2:b3:f3:9f:a0:89:73:
e8:55:46:73:19:45:51:f0:36:ec:f9:03:1e:32:ff:08:08:56:
b6:1e:e6:ae:08:4f:18:41:b9:72:c2:a3:df:fd:68:47:78:b9:
19:e3:09:1c:c1:a2:70:76:66:bc:77:07:14:2d:54:0e:c0:18:
44:db:f0:a4:89:15:11:b0:05:f2:da:25:ea:eb:b2:1e:9d:09:
5d:75:8e:ac:b5:18:55:ec:af:c5:f1:e3:2a:e6:b6:15:33:6d:
56:dc:fb:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2qJrFl4hjNXdEaNANH7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDI3M2I5ZTc1MTBkMDE5ZjJjNTMyOWIzZjM0ZWFlZjJh
ZWJjYTYwHhcNMjYwNzI0MDIwMDUyWhcNMjYwNzI1MDIwMDUyWjAzMTEwLwYDVQQD
EyhkZGEzODkyZmQ2NTEwMDIxNzQzZjNjZTkwYzU2ZWMyMjYyOGZlN2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3ZThpGoOkBeUETeM95LwCJw4yv1
RwvzTFxNexIuUCR6jb97Jmlqjy3lae7z7nKSmjVSphE/YlwhANQ9gIP5Ykn7tImh
1OEqWbMO4s3I/EYC2fSOmd6yyVniub6QIFeQhh9Qq8gzicXp2tahfp4Cf1t2D3ki
aUdyaQK9f2i3v0wQ3jw1ogrfUVWZ873l4THtj9DtPKtYwcxKSpxUeUEH58aF1EEO
IPQIq5H3UtN9CQAIYiW7CazhWpnmxfs28IJOFsoJKd7ORaKSQQncPNt6YE0w2jwL
sRlvyYIZkMNngdsIkDoMn2t4E5zkZMvw96WIutEmKOEedRGEBpAZaseJTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2jiS/WUQAhdD886QxW7CJij+fCMB8GA1UdIwQY
MBaAFApCc7nnUQ0BnyxTKbPzTq7yrrymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tKenVlZFJEUUdmTEZNcHNfTk9ydkt1dktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xNTJmMGYtNjkzNS00MWMxLTliNWYt
MWVmOWExMTY3ZWQ0LzEvQ2tKenVlZFJEUUdmTEZNcHNfTk9ydkt1dktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8xNTJmMGYtNjkzNS00MWMxLTliNWYtMWVmOWExMTY3ZWQ0
LzEvQ2tKenVlZFJEUUdmTEZNcHNfTk9ydkt1dktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/x4CqIj
vPQmvsVYi/T5mdyjcGmXNfgTvJ7E+0BIa3ygb5/VVz1JDtk72xsncMLegZZTSwVO
LdLo0piTzrpkmXqaI0gp6gTAQpR0FQE8LcvtTcSAq8fw1nHUgIm5p++kyj+EddWt
SdQs0ZD8VD5hD9elfeHICMhOtMUvt/PSKaxQ0HfOvH75Csj7mz4uTzDQYhym7GSu
+fj4Jgays/OfoIlz6FVGcxlFUfA27PkDHjL/CAhWth7mrghPGEG5csKj3/1oR3i5
GeMJHMGicHZmvHcHFC1UDsAYRNvwpIkVEbAF8tol6uuyHp0JXXWOrLUYVeyvxfHj
Kua2FTNtVtz70A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:52:57 2026 by rpki-client