Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: CFAasU4PU+NL9Agnzw+9kdUFsEpKCxnsFpvexalZ96E=
Subject key identifier: 76:9E:2E:F4:F9:D1:13:77:30:79:C2:FA:3C:07:5F:BE:44:AA:22:55
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 019E1C7D81CA84AB2C00BCB2FDF58867AC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 190E
Signing time: Tue 12 May 2026 14:00:47 +0000
Manifest this update: Tue 12 May 2026 14:00:47 +0000
Manifest next update: Wed 13 May 2026 14:00:47 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: KFfc5lzmgMOhqndUN95+vJ24CR3uEkFU9OnGowD1JSU=)
2: aWTgs2vGx6eCX3ogkViZVgIbB84.roa (hash: OPjISeyo2zmbOWegu24LQLulcRUAPHOa4VrL4S3R9cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:81:ca:84:ab:2c:00:bc:b2:fd:f5:88:67:ac:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: May 12 14:00:47 2026 GMT
Not After : May 13 14:00:47 2026 GMT
Subject: CN=769e2ef4f9d113773079c2fa3c075fbe44aa2255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:9c:41:4b:12:c7:8b:4a:82:b5:11:33:f8:
e1:17:db:a7:b3:37:98:02:3e:0a:89:2f:ca:22:53:
0b:8a:82:0d:41:43:77:e5:6f:d6:40:c0:04:69:e2:
0a:c2:40:4c:98:c8:7d:9f:69:e0:10:d0:08:6b:fe:
3f:67:e4:0b:90:4d:23:06:13:95:40:c6:e7:f9:64:
e8:29:a6:5e:68:1a:5c:a5:cc:d9:25:96:d2:fc:a8:
58:3e:38:66:81:f5:18:8e:bf:50:12:49:ba:e1:99:
95:7a:e2:15:3e:86:1a:44:2d:83:74:a3:23:74:11:
59:4d:ae:1f:8e:c0:86:27:c3:b7:80:c8:97:40:11:
2d:78:0b:1f:49:dc:89:49:0b:5c:b1:c5:ee:65:0f:
27:d4:7a:81:d8:fd:fc:15:ea:52:63:6e:27:f2:b6:
b4:04:65:3c:44:a2:1f:78:02:95:98:8d:c4:9f:53:
09:7c:54:b2:fb:ee:ac:c7:13:d5:f1:73:a1:8b:41:
5d:1e:f1:ad:66:f9:89:e7:3a:e7:06:54:41:e2:d0:
62:3a:29:e1:28:48:5b:6b:8e:c2:85:8c:03:2b:b6:
2f:81:d4:e3:5a:50:8a:8d:44:32:d8:f2:64:89:84:
6a:e3:70:ba:56:00:10:bd:1f:61:bb:fe:8d:34:a5:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9E:2E:F4:F9:D1:13:77:30:79:C2:FA:3C:07:5F:BE:44:AA:22:55
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7b:cf:ad:b4:1e:cb:44:5b:78:db:e4:98:a9:b6:ed:4a:2c:
ab:18:0e:22:45:e2:29:d7:44:76:86:96:4c:a1:d5:ff:c9:e2:
cd:96:d3:85:09:7f:e5:6e:86:aa:8d:78:b9:5b:af:9f:d6:7e:
93:71:97:71:ce:72:d7:85:3c:69:e8:e8:eb:1c:46:0e:79:ab:
f8:90:22:d8:12:dd:a4:34:23:04:e7:c7:66:ce:5c:4b:7b:8f:
45:d8:65:b4:d6:76:82:c3:de:6b:7e:66:04:d4:0e:c1:b4:0f:
43:cc:50:ce:3d:27:c4:5b:c7:42:be:ad:15:7c:10:95:45:a4:
7e:b3:53:be:f9:79:a0:2d:cc:e7:d4:e9:0a:7f:3b:32:9d:bf:
5a:3c:5c:27:ca:d7:cc:58:40:78:53:1b:d6:36:e0:06:7d:ae:
8b:52:3b:d5:c3:fd:40:b1:2a:74:c8:cd:c8:05:d0:fe:44:25:
3d:f9:55:db:d3:b1:24:9d:78:e1:44:f7:9f:4f:2f:aa:d4:e5:
0b:fa:87:ee:69:3b:bc:c5:e4:61:94:f9:21:c5:7a:47:dd:92:
b0:62:4a:1f:ed:4f:03:ec:6c:01:50:38:24:29:62:d4:8b:fd:
e9:57:65:80:f9:2a:27:81:6c:ff:af:af:1c:1d:a8:aa:65:64:
50:f0:a2:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfYHKhKssALyy/fWIZ6wGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGE4NjFkN2MxNGI0Y2E1ZTZkMWM3ZDYwYWFlZWIzMmVh
OGVmNjEwHhcNMjYwNTEyMTQwMDQ3WhcNMjYwNTEzMTQwMDQ3WjAzMTEwLwYDVQQD
Eyg3NjllMmVmNGY5ZDExMzc3MzA3OWMyZmEzYzA3NWZiZTQ0YWEyMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5ScQUsSx4tKgrURM/jhF9unszeY
Aj4KiS/KIlMLioINQUN35W/WQMAEaeIKwkBMmMh9n2ngENAIa/4/Z+QLkE0jBhOV
QMbn+WToKaZeaBpcpczZJZbS/KhYPjhmgfUYjr9QEkm64ZmVeuIVPoYaRC2DdKMj
dBFZTa4fjsCGJ8O3gMiXQBEteAsfSdyJSQtcscXuZQ8n1HqB2P38FepSY24n8ra0
BGU8RKIfeAKVmI3En1MJfFSy++6sxxPV8XOhi0FdHvGtZvmJ5zrnBlRB4tBiOinh
KEhba47ChYwDK7YvgdTjWlCKjUQy2PJkiYRq43C6VgAQvR9hu/6NNKXHXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaeLvT50RN3MHnC+jwHX75EqiJVMB8GA1UdIwQY
MBaAFApKhh18FLTKXm0cfWCq7rMuqO9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2It
OTRkYmYzZmQwZTJkLzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2ItOTRkYmYzZmQwZTJk
LzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHvPrbQe
y0RbeNvkmKm27UosqxgOIkXiKddEdoaWTKHV/8nizZbThQl/5W6Gqo14uVuvn9Z+
k3GXcc5y14U8aejo6xxGDnmr+JAi2BLdpDQjBOfHZs5cS3uPRdhltNZ2gsPea35m
BNQOwbQPQ8xQzj0nxFvHQr6tFXwQlUWkfrNTvvl5oC3M59TpCn87Mp2/WjxcJ8rX
zFhAeFMb1jbgBn2ui1I71cP9QLEqdMjNyAXQ/kQlPflV29OxJJ144UT3n08vqtTl
C/qH7mk7vMXkYZT5IcV6R92SsGJKH+1PA+xsAVA4JCli1Iv96VdlgPkqJ4Fs/6+v
HB2oqmVkUPCiEA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:39:31 2026 by rpki-client