Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: TQmqFXuG+r4dlVr9aIOJB9FirtiAM44Qkp4LSGHBIcc=
Subject key identifier: CD:58:EC:39:44:F2:93:D9:66:47:92:53:27:B5:7B:A9:4B:41:45:3F
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 019F8FEC894A63A7621D8C649E368B9C8FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 17:01:11 +0000
Manifest this update: Thu 23 Jul 2026 17:01:11 +0000
Manifest next update: Fri 24 Jul 2026 17:01:11 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: VPFz140skudXlmvbCHFbMo5xZMPgirgneBn9CGHqOII=)
2: cDoC-jSYN7u0frpLx2bXUSxluu0.roa (hash: 0c+KBOgKhiecSN5vnMV9D8GmEY0jyIF5LXtXoNSNf7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:89:4a:63:a7:62:1d:8c:64:9e:36:8b:9c:8f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Jul 23 17:01:11 2026 GMT
Not After : Jul 24 17:01:11 2026 GMT
Subject: CN=cd58ec3944f293d96647925327b57ba94b41453f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:fb:eb:eb:17:51:19:a1:f2:40:cf:71:37:
8b:d6:ed:10:cc:0f:ed:bb:b6:5d:65:2e:43:dc:a5:
59:33:26:e4:8b:da:61:e4:b9:bf:9e:89:e6:3a:cb:
36:07:b2:27:7a:1d:2a:d3:83:07:7e:e7:2d:c0:cc:
74:50:6b:a1:a9:30:3e:7b:83:47:c2:c2:3f:fb:08:
ff:b6:ef:1e:92:e0:8f:9c:51:bb:58:11:ba:34:12:
2b:f5:7c:66:92:f3:94:e5:39:df:0a:93:10:5e:f6:
97:a3:dc:1e:0d:ad:be:8a:44:aa:62:4b:74:40:d7:
ea:b2:64:af:cc:bb:5d:58:ab:59:17:9c:dc:6c:4d:
ac:0e:39:35:e9:c1:93:d3:75:14:7e:3e:dd:63:59:
bf:c7:0d:96:b8:bf:90:c6:3f:44:32:d8:34:03:ab:
20:32:a6:d1:3f:53:0c:c3:94:d7:c9:78:0e:d3:eb:
a4:64:e7:80:18:4d:45:89:84:3b:fc:8b:2c:73:21:
b2:06:08:1e:06:ed:16:02:5c:23:bc:05:63:fc:e3:
ba:f8:39:33:1e:05:8b:46:f0:f3:7c:e3:65:94:40:
f4:d9:cc:a1:57:6a:7c:f2:5a:5f:e8:ea:e9:36:31:
fc:c2:90:ed:37:cc:5e:99:46:72:ef:71:9a:0f:d6:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:EC:39:44:F2:93:D9:66:47:92:53:27:B5:7B:A9:4B:41:45:3F
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:04:c9:4b:97:da:a9:00:06:5d:8f:2c:d1:eb:7e:31:5a:1f:
81:1f:45:a4:a7:2a:14:88:ef:ee:ff:fd:72:27:c2:70:98:ba:
96:e0:3e:53:ea:0b:81:01:63:15:5d:a1:b1:62:ee:a9:b0:7a:
6b:d9:a8:d6:48:1f:5b:a1:3f:aa:eb:a7:7c:c3:36:8f:5b:f6:
14:cd:11:ba:e6:fa:54:03:d2:fe:c9:29:5f:1d:37:f6:dc:26:
ca:3a:6b:74:f8:98:ea:47:10:17:de:17:9d:9c:50:2f:f2:f6:
1f:45:3a:d1:9c:14:a6:e1:a3:ec:4d:48:f0:7c:ba:59:ec:1e:
c1:17:90:f2:1a:90:32:c9:61:85:aa:38:dd:8d:f6:ba:92:8c:
c5:a7:06:0b:31:e3:35:fa:98:65:b8:d6:fb:2b:8b:95:79:8f:
82:34:54:59:c8:9e:00:fc:51:35:7a:42:e2:ed:28:16:e0:e6:
60:22:f9:b0:dd:5b:38:1d:cc:43:1e:dc:01:5e:df:46:71:a7:
a2:6b:87:92:03:6e:00:10:d2:fa:b5:ef:02:21:9c:ae:11:95:
ce:09:d1:0c:aa:53:bc:3e:0a:3a:d0:fb:5d:f6:26:31:f9:dd:
a6:65:94:3e:51:a7:89:92:04:40:94:85:51:18:30:2c:45:34:
0e:6e:b7:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7IlKY6diHYxknjaLnI/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTVjM2FiYTQyMWI3OGE3ZDVkMDliNzViNGNlM2JlNTI3
M2NhYWMwHhcNMjYwNzIzMTcwMTExWhcNMjYwNzI0MTcwMTExWjAzMTEwLwYDVQQD
EyhjZDU4ZWMzOTQ0ZjI5M2Q5NjY0NzkyNTMyN2I1N2JhOTRiNDE0NTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQb76+sXURmh8kDPcTeL1u0QzA/t
u7ZdZS5D3KVZMybki9ph5Lm/nonmOss2B7Ineh0q04MHfuctwMx0UGuhqTA+e4NH
wsI/+wj/tu8ekuCPnFG7WBG6NBIr9XxmkvOU5TnfCpMQXvaXo9weDa2+ikSqYkt0
QNfqsmSvzLtdWKtZF5zcbE2sDjk16cGT03UUfj7dY1m/xw2WuL+Qxj9EMtg0A6sg
MqbRP1MMw5TXyXgO0+ukZOeAGE1FiYQ7/IsscyGyBggeBu0WAlwjvAVj/OO6+Dkz
HgWLRvDzfONllED02cyhV2p88lpf6OrpNjH8wpDtN8xemUZy73GaD9aVowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1Y7DlE8pPZZkeSUye1e6lLQUU/MB8GA1UdIwQY
MBaAFAilw6ukIbeKfV0Jt1tM475Sc8qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQt
MzY0ZmFlN2M3MmM0LzEvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQtMzY0ZmFlN2M3MmM0
LzEvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQTJS5fa
qQAGXY8s0et+MVofgR9FpKcqFIjv7v/9cifCcJi6luA+U+oLgQFjFV2hsWLuqbB6
a9mo1kgfW6E/quunfMM2j1v2FM0Ruub6VAPS/skpXx039twmyjprdPiY6kcQF94X
nZxQL/L2H0U60ZwUpuGj7E1I8Hy6WewewReQ8hqQMslhhao43Y32upKMxacGCzHj
NfqYZbjW+yuLlXmPgjRUWcieAPxRNXpC4u0oFuDmYCL5sN1bOB3MQx7cAV7fRnGn
omuHkgNuABDS+rXvAiGcrhGVzgnRDKpTvD4KOtD7XfYmMfndpmWUPlGniZIEQJSF
URgwLEU0Dm63CA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:25:51 2026 by rpki-client