Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: iGMgQJhdw+dBM8he0LPZ1tL6i4pGU3NWV7XiZB0j0RU=
Subject key identifier: 4F:83:74:57:46:E9:E4:56:4D:84:C1:DE:43:7A:5F:70:92:3A:6A:7F
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 019F91355DDABE68E120CE6E0BC527CA7AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 19CF
Signing time: Thu 23 Jul 2026 23:00:21 +0000
Manifest this update: Thu 23 Jul 2026 23:00:21 +0000
Manifest next update: Fri 24 Jul 2026 23:00:21 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: jEEB4zOTWjX6oTCAdT25IvQZ5iWrOPCdBpDvULGYdac=)
2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:5d:da:be:68:e1:20:ce:6e:0b:c5:27:ca:7a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Jul 23 23:00:21 2026 GMT
Not After : Jul 24 23:00:21 2026 GMT
Subject: CN=4f83745746e9e4564d84c1de437a5f70923a6a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:fd:55:1a:c3:27:ba:d9:b5:eb:cc:d1:2e:
68:61:78:6e:8e:bc:53:56:2c:2c:21:0e:80:2c:44:
96:cd:cf:dd:ae:a8:8a:7e:57:96:0e:f5:30:49:1c:
99:b7:96:7e:7e:3b:02:ee:d8:97:29:0e:b3:71:3e:
0f:67:e7:f8:ed:d8:5b:f4:76:b5:ce:e1:41:33:8b:
a2:78:99:63:45:0a:0c:ea:d6:a2:00:f2:70:8e:8e:
b2:9f:55:64:87:60:9f:45:5e:ee:f4:94:f5:2d:09:
cd:71:6d:eb:05:b3:99:87:4d:55:d8:bf:09:24:3a:
17:03:c1:1d:72:c0:ed:d5:b8:cb:e7:36:d5:58:24:
fd:c9:d3:22:92:d9:cb:80:bd:6c:9e:85:c4:8a:ed:
be:d0:14:df:cd:27:5c:52:0c:23:f6:6e:aa:4b:05:
40:d4:28:bb:d1:4c:33:3b:51:d0:ab:e4:5c:15:e7:
16:29:0f:f6:ea:c8:76:53:70:8d:14:d6:8c:1e:0c:
95:e7:f2:e7:d3:8c:f4:d6:e1:6f:24:f3:a8:35:54:
d1:8d:fb:9b:56:87:40:11:c4:20:b8:25:ff:b0:21:
b0:78:73:83:4a:72:e5:75:e5:78:31:ed:8f:7c:11:
68:f1:64:85:72:62:5d:fd:52:2b:39:12:7c:91:16:
e8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:83:74:57:46:E9:E4:56:4D:84:C1:DE:43:7A:5F:70:92:3A:6A:7F
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9c:42:20:62:09:8a:4d:c1:d5:d0:3b:2a:4d:96:66:60:96:
01:fc:68:01:91:27:9a:6b:d4:0d:ab:3a:90:c0:bc:50:e5:86:
95:ed:43:48:52:00:f2:51:a5:bd:d6:9b:39:f6:cc:36:68:9e:
a4:ea:a6:95:54:01:8b:26:29:c3:ba:47:cc:cf:fb:6f:70:da:
74:87:9d:2e:13:8f:81:d5:96:90:3c:9b:2e:f9:6d:56:da:9b:
c4:b8:35:c7:79:69:e2:25:14:09:d2:12:e7:63:bf:0a:5f:af:
d6:04:40:2e:22:37:25:a6:2e:bf:90:59:31:ab:17:b1:03:19:
02:95:00:18:80:fa:1f:c5:a2:db:04:f8:d8:b4:7f:cd:71:5d:
13:46:c1:92:4f:25:b3:7b:72:c9:3e:ce:7e:81:da:89:ba:a4:
ff:5d:ac:70:88:bb:5e:17:7e:91:d0:92:a8:14:b3:20:68:30:
4b:bd:b1:a5:9b:ac:0a:10:24:bf:63:2e:f1:02:cd:ea:03:95:
7c:e3:19:42:1f:73:93:b7:82:94:f9:0e:0b:da:13:c1:92:71:
eb:ed:46:6a:06:90:46:7a:5a:89:65:82:90:22:84:5f:4a:cf:
1e:1a:65:ae:0b:26:84:07:3e:ef:ab:96:9f:fc:97:73:06:89:
0d:76:0e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:06 2026 by rpki-client