Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: YWUjbZHRjdzpFXzh7ks6b6ggUt81QLEj0wYKM7rOwJI=
Subject key identifier: 89:DB:80:6E:92:D6:D8:6B:DF:E7:C7:49:FC:5D:4A:3A:9C:C8:1E:BC
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 019D292955DD71AC639FEDC343B7FAAAFD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 08:01:07 +0000
Manifest this update: Thu 26 Mar 2026 08:01:07 +0000
Manifest next update: Fri 27 Mar 2026 08:01:07 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: LyaTtctEy2MqE/M6H/uLGnZopu+0f3N/UxY5DyJrV48=)
2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:55:dd:71:ac:63:9f:ed:c3:43:b7:fa:aa:fd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Mar 26 08:01:07 2026 GMT
Not After : Mar 27 08:01:07 2026 GMT
Subject: CN=89db806e92d6d86bdfe7c749fc5d4a3a9cc81ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:c6:96:4d:a4:19:4b:70:9a:8a:4d:ee:63:
eb:ba:89:78:7e:a4:e2:9d:ca:76:e5:95:84:e6:3c:
de:fd:39:1c:a3:05:9b:4f:7a:b8:ec:03:23:56:77:
58:16:d8:99:7e:42:ac:94:eb:31:ea:3b:c8:05:4c:
25:ce:c0:f9:ca:d3:12:5c:f4:3b:9c:16:f0:b9:9e:
2d:d5:99:01:87:81:cf:ee:18:b6:40:f6:f9:da:c1:
cd:89:9d:a5:c0:47:25:6d:c2:b8:ab:11:23:e4:78:
3b:20:37:dc:28:e3:b6:e2:ba:8e:d2:b4:63:c5:aa:
3a:f2:f5:f9:ff:9c:09:7d:da:08:8d:15:f6:04:d8:
5e:1f:df:24:bb:f1:23:db:c1:87:a1:e4:b3:55:51:
c6:c6:0e:84:31:7d:c0:4a:e6:83:39:7e:35:ad:3d:
19:af:90:58:0b:2b:43:2c:ae:60:18:0d:e2:4e:95:
bf:9f:a2:98:f5:58:f6:63:28:6e:01:5f:03:b8:ec:
aa:b6:17:61:80:06:e0:08:19:4d:24:a2:97:85:9f:
80:59:e5:ca:b0:45:bd:ca:85:08:54:b0:56:f7:7a:
f6:a4:e0:c5:fa:be:21:ab:24:cf:57:a5:a1:fe:29:
5c:3c:c4:1f:fc:dc:43:fd:e5:d7:9b:2f:17:19:69:
64:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DB:80:6E:92:D6:D8:6B:DF:E7:C7:49:FC:5D:4A:3A:9C:C8:1E:BC
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cf:b8:c4:ca:6b:e3:5f:67:1c:d3:bf:d5:76:23:52:f5:80:
bd:1a:ca:2a:0c:71:3a:ed:eb:41:38:f2:70:86:ad:da:3f:50:
44:d1:85:5c:0f:b8:d4:24:c3:bb:70:9a:41:6f:0d:a8:bb:bd:
df:24:51:9d:c0:49:1a:ce:24:2d:0d:8f:f9:47:35:96:d9:cf:
fc:e5:77:75:8a:a0:c3:76:a7:ba:e8:21:8b:3e:a8:ac:ac:03:
02:23:46:1d:4a:60:b0:24:f9:2f:39:b8:77:3d:59:55:a3:86:
08:7a:9d:1d:6d:e5:c5:26:d7:cb:11:bc:d6:79:c3:b6:c2:fc:
f3:3e:c5:32:91:b7:44:5c:66:17:47:bd:c6:30:e0:a0:95:40:
4f:47:89:d5:46:41:1d:53:9f:5e:61:fb:90:2d:32:7d:ac:46:
fc:bd:fa:02:0e:f9:b7:18:63:3a:86:dc:ac:8e:a6:9e:7c:69:
47:dd:e0:f3:c3:f6:8e:6e:32:67:81:f3:31:2e:bd:4b:18:db:
9f:fc:f5:1e:d9:c5:20:73:56:af:a9:35:82:64:6e:48:3f:5d:
f2:d0:60:e6:47:11:fd:6b:a0:fe:59:31:03:00:38:2c:aa:f6:
80:a8:39:37:fd:b4:91:fe:70:c9:c9:14:11:92:3e:73:f5:a5:
83:5e:f5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:01 2026 by rpki-client