Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: 6+IxEgV8JusQtxRBzkQOG85oWqgGNL+QmYKl9zUhwnM=
Subject key identifier: AB:F0:A5:16:1F:2A:C6:37:F3:5E:B9:C1:EF:36:A2:1A:49:03:BC:D5
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 019D2BBCDBF9BF2549D43C81606BD7096AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 20:01:30 +0000
Manifest this update: Thu 26 Mar 2026 20:01:30 +0000
Manifest next update: Fri 27 Mar 2026 20:01:30 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: f54x3jBwgbUVS82nHWF7wDiTrSJrz0+BhLjl7Neqe0E=)
2: cDoC-jSYN7u0frpLx2bXUSxluu0.roa (hash: 0c+KBOgKhiecSN5vnMV9D8GmEY0jyIF5LXtXoNSNf7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:db:f9:bf:25:49:d4:3c:81:60:6b:d7:09:6a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Mar 26 20:01:30 2026 GMT
Not After : Mar 27 20:01:30 2026 GMT
Subject: CN=abf0a5161f2ac637f35eb9c1ef36a21a4903bcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:99:3f:25:4f:ee:e1:6e:70:29:6d:2a:4a:
00:73:01:d0:e4:ad:c0:7d:b5:ec:29:c6:df:df:7e:
15:80:f4:d6:cd:87:1c:22:d4:0b:29:45:8d:d9:dd:
fd:b3:8d:15:72:be:ac:24:49:75:3f:81:b9:86:68:
79:91:c2:b9:ae:60:5e:56:a3:61:c3:fa:a5:8b:37:
59:be:19:bb:82:20:0d:3d:dc:36:34:c3:f8:99:3f:
86:e1:4d:79:99:17:0b:f4:a9:c8:cf:af:61:51:9b:
56:a4:ef:e0:0e:7d:b7:92:17:39:4e:3b:f9:e2:e0:
9a:d8:4e:14:88:7f:b3:2d:4a:f6:07:62:4b:b0:b7:
95:a2:e8:04:0c:58:47:63:17:bc:d1:f5:78:73:43:
3e:d8:9f:ef:0a:0c:c5:af:05:3c:bf:db:b1:f5:ca:
e0:e1:b7:80:e8:a5:13:59:e8:33:b5:a5:34:47:58:
4d:42:1e:ee:1e:4e:2e:3f:05:ec:4e:90:7f:97:6c:
9c:82:20:c2:44:c3:7f:14:e5:fa:e8:6f:62:05:1f:
bc:60:7f:9f:c1:4d:41:a8:ea:c4:1c:8d:5e:6d:46:
39:21:1a:e8:16:00:ac:fa:3e:07:3a:ae:19:62:3e:
15:05:2c:45:1f:10:29:2b:34:69:5d:c9:a1:e4:3b:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F0:A5:16:1F:2A:C6:37:F3:5E:B9:C1:EF:36:A2:1A:49:03:BC:D5
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f2:f6:d2:e8:d1:5e:90:22:f7:be:37:d6:3b:de:15:f4:22:
72:4a:75:4d:a1:4d:28:cd:ff:4a:2f:81:34:28:82:15:4b:dd:
aa:27:fb:b8:49:ac:e5:3c:78:51:63:13:9b:ae:9c:81:62:b9:
5b:f6:6f:d7:06:45:2e:30:38:3c:41:7c:c5:f3:ae:09:0c:ef:
41:c7:06:60:6d:30:6e:fe:2c:39:2b:24:fe:2e:e3:88:10:9a:
32:6d:73:56:62:48:7c:58:5c:b1:e4:21:61:8d:6f:4c:61:8c:
06:33:59:46:57:fe:1a:0a:56:3d:30:49:6b:01:e2:0f:eb:29:
16:db:3d:51:1d:43:ee:96:6e:65:05:99:ca:6c:c1:3f:3c:ed:
fe:4f:c5:0b:c0:99:cf:ae:a8:a8:5d:3e:b6:66:9c:a6:d6:f5:
e1:88:45:86:c1:b4:17:a3:64:84:61:0d:d6:7f:e9:fb:bb:f4:
ba:0e:2f:2b:8a:58:f8:86:cd:ae:8f:26:1f:ef:88:5b:5e:c8:
bb:9b:fc:4b:91:18:a4:49:1d:c0:9e:54:f7:04:11:be:d3:a3:
eb:e6:e9:36:58:33:60:7a:c6:32:1b:ee:a5:cc:33:e8:fa:f4:
1b:13:96:4d:0f:75:67:3c:b2:6f:34:6e:f5:50:be:3b:4f:fe:
a6:0d:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:44:22 2026 by rpki-client