Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: L5kFhzUpPoxEfIlk0cl8EEO4+LxN2COik6n4INE2txA=
Subject key identifier: A1:53:9E:C0:80:5A:6A:33:BA:4F:43:FD:A1:88:E6:81:1E:83:36:6C
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 019D29610246D4510A845696DABBCBA8596A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 17C8
Signing time: Thu 26 Mar 2026 09:01:56 +0000
Manifest this update: Thu 26 Mar 2026 09:01:56 +0000
Manifest next update: Fri 27 Mar 2026 09:01:56 +0000
Files and hashes: 1: YpSZhok7D_iJk1qiU7Mu_hY8E3Q.roa (hash: NxSxMzYasyCjB5BO8JzAFcBo/KBnMoapQAl4A8Q+rNU=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: 6FOxMtLohwXgWH1bzbzMj59tmIezhAbOIY27nOSqW7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:02:46:d4:51:0a:84:56:96:da:bb:cb:a8:59:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Mar 26 09:01:56 2026 GMT
Not After : Mar 27 09:01:56 2026 GMT
Subject: CN=a1539ec0805a6a33ba4f43fda188e6811e83366c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:46:17:22:75:6b:af:8d:d2:f6:78:fd:66:
4d:a4:3e:57:40:b7:b0:fb:25:20:56:e1:ac:58:bb:
ad:79:b5:0c:11:90:38:76:ab:cf:7d:fe:98:8a:08:
99:95:56:a2:44:2b:73:ef:46:a5:b5:bf:67:83:0a:
5c:3c:1e:cf:19:ac:b4:cc:9c:15:a6:ce:21:d8:64:
27:b6:bd:ae:b0:9d:b2:3c:02:e3:c5:c5:65:f8:e8:
3c:37:e7:ef:8d:d1:cb:d9:ce:f5:76:4b:be:6d:54:
4b:18:b8:65:5b:12:aa:2d:7d:df:68:db:ee:d5:eb:
34:c3:77:c2:c4:6a:a7:a6:fc:72:ca:1e:27:4c:3f:
2c:ad:98:66:32:bc:a2:e3:ca:31:f7:71:84:e3:44:
03:33:4e:9a:d6:ce:00:b2:10:f2:2d:92:e7:9d:1e:
ce:ef:84:17:c6:d4:d9:88:4a:66:47:4d:82:36:c1:
37:3d:d0:1a:7a:1c:ff:fa:10:7d:87:7c:14:a7:fb:
ba:d5:63:dd:2f:d1:fe:f9:e6:d5:00:24:9f:a5:60:
9a:12:14:f1:ee:db:eb:38:ed:3e:cd:c4:55:a6:40:
ce:f4:3d:49:db:73:73:38:73:87:e3:05:ab:4e:cc:
ca:17:43:48:ed:0b:e3:c7:27:53:79:20:07:f9:d5:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:53:9E:C0:80:5A:6A:33:BA:4F:43:FD:A1:88:E6:81:1E:83:36:6C
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a4:46:9c:68:9b:e6:5c:0b:ee:8d:1e:7d:ad:88:b3:a9:7a:
cb:05:ba:f9:3f:64:3e:d9:6c:09:b8:ca:7e:7c:3f:ee:0e:9f:
d1:4a:82:2d:50:a5:19:25:13:e7:f3:7a:29:30:ec:5e:bc:22:
5b:73:75:e6:a4:18:62:3e:4c:82:0d:8b:a9:7d:28:67:74:9a:
b0:a9:75:51:f4:ea:80:27:c4:df:49:ef:39:56:99:e0:76:79:
76:5d:19:8c:31:c4:b5:d5:be:75:2a:87:cf:a1:c3:d4:f5:45:
75:3b:43:ea:d5:1f:8c:85:4d:ae:0d:ca:2f:9d:f1:ff:9a:14:
18:1a:04:2b:b3:a3:71:95:b2:43:e0:5a:e0:ee:f8:4d:f8:68:
86:70:cb:c7:04:a3:ee:cf:7e:9a:1f:9d:17:50:71:d5:23:05:
13:52:31:2e:1f:c2:c2:af:41:51:c1:12:f2:0a:9e:6f:33:ce:
a7:00:ae:b9:65:19:39:c2:ef:eb:0a:d6:81:a4:4c:b8:60:a5:
be:b2:a7:11:94:12:b7:87:8d:f7:39:8e:34:9b:83:5b:2c:d3:
00:8d:e8:57:64:35:0c:fe:f1:2d:cb:82:35:47:0e:67:8e:af:
0e:77:03:61:d4:37:68:00:53:d8:2a:85:7e:aa:b9:0a:3b:80:
a8:e2:69:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:08 2026 by rpki-client