Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json)
Hash identifier: B7I6PkPoVhJcWTYr3cUrvXMTinZh9U+xmF4H8werPPI=
Subject key identifier: 4C:24:EB:73:E0:9C:9B:D4:AB:98:04:EB:41:5D:EB:FC:8F:FA:FD:11
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial: 019D262839F3401A70B6401BF3203FA211E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
Manifest number: 14DE
Signing time: Wed 25 Mar 2026 18:01:03 +0000
Manifest this update: Wed 25 Mar 2026 18:01:03 +0000
Manifest next update: Thu 26 Mar 2026 18:01:03 +0000
Files and hashes: 1: YHvvyK4ZKR8SZ6aC_FLps6Aqe0s.roa (hash: gm42s7vK+4MOMqCS31qZX96qjCMC7m5X5ZwK72bSkdc=)
2: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: IwOSvlAwVRdoVPM+HG+1HcSSiR6B768ulexDL/PRJA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:39:f3:40:1a:70:b6:40:1b:f3:20:3f:a2:11:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Validity
Not Before: Mar 25 18:01:03 2026 GMT
Not After : Mar 26 18:01:03 2026 GMT
Subject: CN=4c24eb73e09c9bd4ab9804eb415debfc8ffafd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:bd:2c:a3:be:ea:98:5d:fd:1d:f2:b8:5d:
f1:08:7a:8a:a8:03:37:c0:d4:4c:96:61:51:ec:3c:
6c:0c:83:9a:f0:da:87:f6:36:1b:71:99:4f:0a:95:
0f:46:f6:7a:38:d9:89:2e:07:8f:79:04:11:33:eb:
64:27:87:b6:cd:30:c1:e7:44:b3:52:6e:db:fa:19:
51:a3:9a:1f:ac:b3:e2:bd:7e:76:46:70:b2:ce:3f:
d9:c7:30:ca:83:be:dc:8e:89:d8:e4:57:e4:7b:9d:
02:b4:95:e0:f3:5f:b9:68:21:6c:df:d7:6d:c9:e5:
c0:6d:3f:fb:99:79:6e:2e:f1:52:74:42:bc:8b:30:
78:d8:11:38:cb:5f:fe:4b:bf:31:77:fd:a2:82:a1:
b9:45:df:28:12:13:42:10:6b:f8:33:47:9e:9e:51:
f0:2b:e2:ec:8c:cb:f7:17:b2:39:da:6c:e8:b2:1c:
1a:17:ae:ce:70:3a:50:af:b9:ec:3d:b2:50:01:a4:
99:83:0a:2e:f7:23:45:26:9e:9d:55:07:07:0a:d1:
c2:3c:84:ba:8b:55:0b:ed:95:2b:e0:e0:bb:91:10:
d4:56:38:bf:dc:94:50:2e:e5:82:60:80:ad:da:4e:
3b:1e:84:34:9b:90:94:20:04:12:23:b4:86:4d:da:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:24:EB:73:E0:9C:9B:D4:AB:98:04:EB:41:5D:EB:FC:8F:FA:FD:11
X509v3 Authority Key Identifier:
keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:81:66:fb:55:74:45:50:3a:dd:61:ee:9a:df:1b:47:f4:8d:
cd:bc:2a:29:fa:aa:ee:a9:65:c9:9d:aa:1a:f3:23:d5:60:87:
e6:9a:87:53:88:4f:3a:13:03:4c:37:b9:0d:f7:ba:38:84:78:
93:b1:46:03:3a:83:92:56:d2:42:13:dd:96:e5:e2:47:13:8b:
fc:ee:65:8c:b0:b7:8b:2b:9c:06:9a:a4:2e:6d:ee:85:d1:b9:
f0:fa:89:02:e0:62:35:36:12:7e:db:bb:e0:dc:47:3c:eb:c0:
bf:94:81:c7:c3:e3:cc:a5:90:c3:b9:91:c2:d0:31:c4:0d:04:
8e:11:f1:a6:91:4d:9a:99:e8:ce:60:ec:dd:2b:84:82:e6:f7:
35:3c:67:53:10:da:11:fc:2b:72:41:3b:df:20:d6:b5:76:7d:
a2:31:b0:98:d3:13:10:46:9c:9d:88:10:0f:bc:c0:58:8a:28:
af:62:b1:dd:74:06:b9:7a:06:8f:28:42:01:fb:2f:e0:0e:79:
98:c0:f7:60:5f:5d:f6:50:fb:bd:ca:e9:f9:9b:de:e1:3e:8c:
c4:49:e7:5c:d0:c8:40:d4:0e:2f:e9:49:1f:d2:63:af:c7:86:
2b:5b:52:67:31:b2:13:9a:3e:08:25:91:d1:47:ef:93:0b:28:
f5:00:fb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:06 2026 by rpki-client