Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: x360oSEZyVlWtYyVexADDDxOfcDYCFwjeQiF43JQxww=
Subject key identifier: E4:F1:1D:97:C8:C0:81:B5:F2:DF:06:A4:9C:18:4F:EE:AF:13:DE:32
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 01A0CFDB39143C4D764EA660805BE8438884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 1A74
Signing time: Wed 23 Sep 2026 20:00:45 +0000
Manifest this update: Wed 23 Sep 2026 20:00:45 +0000
Manifest next update: Thu 24 Sep 2026 20:00:45 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: LpXewTG03Qsj5qvt4wR3wqDARSnPHUL1UAlmrOB1+Xw=)
2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:39:14:3c:4d:76:4e:a6:60:80:5b:e8:43:88:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Sep 23 20:00:45 2026 GMT
Not After : Sep 24 20:00:45 2026 GMT
Subject: CN=e4f11d97c8c081b5f2df06a49c184feeaf13de32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:46:d6:a5:f9:c3:18:28:62:d2:c2:6e:1b:
27:0d:c3:7a:11:46:38:c3:22:3b:f2:46:00:d1:09:
4b:12:f7:51:29:41:9d:60:84:46:5e:e5:94:e2:b1:
72:6d:0d:39:62:30:3b:d5:14:93:bb:b1:3c:40:ed:
5b:ad:0d:1b:e2:bf:bc:81:ce:d4:7f:19:fc:f0:af:
6b:c2:02:bf:15:06:89:28:62:a4:b5:af:21:ed:90:
94:01:f0:bf:ae:e6:fe:87:54:79:df:3b:ee:42:51:
31:e3:63:d1:ba:b8:16:6e:92:ae:b4:55:5e:4e:a5:
c1:1f:e6:11:a5:d2:78:80:60:1b:b1:1c:08:e6:d2:
ae:64:60:6c:e1:ba:af:58:f7:7e:78:30:11:14:b1:
62:b1:2c:e3:61:e8:a8:cb:82:6d:74:3e:c3:e0:4c:
86:af:54:33:d7:14:f6:e3:cf:68:30:2a:a9:66:15:
fa:19:ec:ff:ef:75:a8:d4:57:c8:3d:20:e2:5b:fd:
57:e8:fe:ec:48:71:b5:eb:46:c0:2a:8b:f7:43:33:
3b:76:7a:17:88:48:0e:2d:88:c9:26:82:1e:09:1a:
b9:3c:40:a1:98:ab:f4:27:11:16:19:90:73:22:12:
5c:56:04:c9:5a:67:99:fd:a1:29:a5:84:35:4b:92:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F1:1D:97:C8:C0:81:B5:F2:DF:06:A4:9C:18:4F:EE:AF:13:DE:32
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ed:61:6a:28:27:6b:50:b8:38:27:98:36:61:cb:db:c4:d4:
91:6a:b1:76:b0:bf:fc:59:ae:1a:58:ec:a0:2b:2a:0b:3b:d3:
03:f1:c0:56:be:b4:5e:34:d2:fb:cb:3e:12:62:78:c7:f3:c4:
0c:c1:04:e8:4c:a8:5c:10:d9:f3:fb:28:5d:92:ef:07:68:06:
6e:4b:05:d5:bc:dc:2e:0e:1d:d7:d3:99:df:4f:a2:3d:42:fb:
8a:ad:e3:d3:cc:e7:fb:12:44:44:ab:b6:19:a5:38:8d:9c:e4:
54:55:85:56:03:86:84:b4:4c:ac:1b:4b:b3:31:f8:89:a3:16:
cf:8b:09:4e:fa:47:50:50:20:aa:33:cd:51:ae:2f:b7:3f:20:
cc:73:c3:e3:81:86:e4:21:27:0e:77:e2:74:2d:b4:5e:2e:42:
0d:0e:68:db:b7:75:ef:f8:e0:81:c9:f6:20:43:64:14:81:a0:
c6:fe:ba:d8:79:f8:ff:60:41:60:0b:86:28:ec:1f:5a:d3:ba:
98:dc:80:6b:d6:87:99:2c:24:6b:b2:82:02:33:cc:6c:09:74:
ce:03:2d:65:c6:82:d4:9b:94:a4:64:e9:4a:fd:d3:96:cd:0f:
f3:d8:02:40:ff:11:82:c2:86:aa:61:86:08:2f:f3:ef:24:67:
dd:06:cf:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP2zkUPE12TqZggFvoQ4iEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGE4NjFkN2MxNGI0Y2E1ZTZkMWM3ZDYwYWFlZWIzMmVh
OGVmNjEwHhcNMjYwOTIzMjAwMDQ1WhcNMjYwOTI0MjAwMDQ1WjAzMTEwLwYDVQQD
EyhlNGYxMWQ5N2M4YzA4MWI1ZjJkZjA2YTQ5YzE4NGZlZWFmMTNkZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq75G1qX5wxgoYtLCbhsnDcN6EUY4
wyI78kYA0QlLEvdRKUGdYIRGXuWU4rFybQ05YjA71RSTu7E8QO1brQ0b4r+8gc7U
fxn88K9rwgK/FQaJKGKkta8h7ZCUAfC/rub+h1R53zvuQlEx42PRurgWbpKutFVe
TqXBH+YRpdJ4gGAbsRwI5tKuZGBs4bqvWPd+eDARFLFisSzjYeioy4JtdD7D4EyG
r1Qz1xT2489oMCqpZhX6Gez/73Wo1FfIPSDiW/1X6P7sSHG160bAKov3QzM7dnoX
iEgOLYjJJoIeCRq5PEChmKv0JxEWGZBzIhJcVgTJWmeZ/aEppYQ1S5JtcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTxHZfIwIG18t8GpJwYT+6vE94yMB8GA1UdIwQY
MBaAFApKhh18FLTKXm0cfWCq7rMuqO9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2It
OTRkYmYzZmQwZTJkLzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2ItOTRkYmYzZmQwZTJk
LzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEe1haign
a1C4OCeYNmHL28TUkWqxdrC//FmuGljsoCsqCzvTA/HAVr60XjTS+8s+EmJ4x/PE
DMEE6EyoXBDZ8/soXZLvB2gGbksF1bzcLg4d19OZ30+iPUL7iq3j08zn+xJERKu2
GaU4jZzkVFWFVgOGhLRMrBtLszH4iaMWz4sJTvpHUFAgqjPNUa4vtz8gzHPD44GG
5CEnDnfidC20Xi5CDQ5o27d17/jggcn2IENkFIGgxv662Hn4/2BBYAuGKOwfWtO6
mNyAa9aHmSwka7KCAjPMbAl0zgMtZcaC1JuUpGTpSv3Tls0P89gCQP8RgsKGqmGG
CC/z7yRn3QbPpQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:56:40 2026 by rpki-client