Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
File: CKKX-M-hzm0_4sUmkRxGippjGNA.mft (raw, json)
Hash identifier: S7tdMOpxOkxpS5rYVoFsgpEZQVcHo3kQ1NvxcWsYBkI=
Subject key identifier: 99:45:41:B6:B8:ED:F6:32:EC:39:A6:02:07:30:A7:11:CE:8D:E1:C2
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 019F91DA749306B6B53AD417B80BDEB778E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 02:00:40 +0000
Manifest this update: Fri 24 Jul 2026 02:00:40 +0000
Manifest next update: Sat 25 Jul 2026 02:00:40 +0000
Files and hashes: 1: 5dqgcQc20DZK2fFn6bpH-A8uyQ8.roa (hash: eVKJis7Ad9o9z5jyjcFOLQfOP7WhBCGivw8hyFer3JM=)
2: CKKX-M-hzm0_4sUmkRxGippjGNA.crl (hash: m1H7twd85M3nabhgQ7y6x2VKz9Ltvjue3eU4VNJCv9g=)
3: RMuTV-vXrFsXAt5l344yDIEdodg.roa (hash: 4Y7+XsWOTPcRpIgGXMuxA5FSDFIupn4tgYoKEVmPgqU=)
4: UL14P1AhHlUZzAIOnswglPjo1V8.roa (hash: oIVyB68rjWbYMJyZsMbtBMTHDcN1LK+tN3ZZZFRb1s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:74:93:06:b6:b5:3a:d4:17:b8:0b:de:b7:78:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Jul 24 02:00:40 2026 GMT
Not After : Jul 25 02:00:40 2026 GMT
Subject: CN=994541b6b8edf632ec39a6020730a711ce8de1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f3:cd:db:ff:54:18:b2:94:a2:a8:62:ac:06:
61:f9:dd:4a:b2:79:e2:db:80:f8:f1:8b:7f:6d:23:
ae:bf:ff:43:2d:8c:be:28:ad:1e:cb:b8:1b:77:bb:
ab:8d:e5:18:64:88:a9:23:78:55:d6:77:0b:74:aa:
e2:d3:7a:43:70:4f:80:4e:c2:67:ee:98:e8:2e:ca:
48:7f:58:73:14:88:6c:2e:a3:c1:c8:da:01:c6:2e:
20:00:6d:6a:23:db:a5:41:62:38:f3:03:69:be:c9:
21:27:25:5a:08:3e:89:28:45:d8:76:a9:24:25:13:
5f:1f:a8:ad:9d:8a:e1:27:07:77:ed:1d:a7:9e:1e:
b3:67:d0:cc:63:6d:02:17:56:08:ee:06:df:b6:2a:
2a:df:94:b5:84:e6:33:39:8e:0f:72:62:c7:ae:e9:
85:29:94:6d:bb:7f:d3:5e:41:95:c6:16:2c:cc:50:
3f:26:b6:83:a2:bd:92:1a:8e:ff:96:93:b6:89:cd:
96:62:fd:aa:20:24:d5:55:0d:01:48:4b:b5:56:cd:
7e:7c:e6:e0:5f:4e:3f:85:22:83:91:2b:99:e6:63:
11:20:57:16:49:81:b8:41:ac:4a:db:ec:e4:c2:32:
e8:59:14:d3:78:c4:4f:64:bd:1e:ef:2c:c2:4e:00:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:45:41:B6:B8:ED:F6:32:EC:39:A6:02:07:30:A7:11:CE:8D:E1:C2
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c6:97:3f:9d:74:d1:46:ae:aa:cb:61:14:34:84:e7:05:9a:
ac:29:ab:3c:4f:78:1a:86:39:d4:1c:0c:85:8c:1e:03:84:9e:
51:e6:25:60:84:ce:76:bb:f4:ca:af:19:b3:26:e0:61:0d:7d:
49:91:f6:b9:38:d8:62:cf:1b:37:51:9b:79:4a:60:5a:8e:93:
ae:71:e7:f3:5c:8e:3c:de:c2:d0:b3:79:78:02:c5:51:b0:7b:
85:73:58:6e:77:b2:a4:d7:da:84:c7:02:24:d5:a8:5f:b4:b5:
6e:95:42:50:2b:e6:05:ff:e9:40:19:81:9d:ee:51:53:df:cb:
c8:e4:ea:13:cf:ce:ec:77:ff:57:4e:61:77:01:8a:1b:e5:ff:
29:80:88:56:53:d8:01:9b:74:40:ae:f2:3d:bc:ae:60:1d:7a:
f0:f9:2d:9e:10:18:6c:84:d1:b8:ec:7f:9d:d3:79:13:5f:22:
21:61:1d:0c:72:f1:e8:db:16:ae:fb:fb:2b:7b:53:e7:e3:7a:
fd:d8:d4:0e:55:18:5b:52:41:c0:71:11:c5:32:af:61:84:c3:
a6:99:0a:fd:c8:01:d1:4a:cf:ba:43:e1:f2:19:7e:4f:8f:24:
2b:07:f6:70:5c:67:2a:65:81:c8:60:f2:97:c5:38:d9:ce:e5:
13:a9:bf:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2nSTBra1OtQXuAvet3jmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTI5N2Y4Y2ZhMWNlNmQzZmUyYzUyNjkxMWM0NjhhOWE2
MzE4ZDAwHhcNMjYwNzI0MDIwMDQwWhcNMjYwNzI1MDIwMDQwWjAzMTEwLwYDVQQD
Eyg5OTQ1NDFiNmI4ZWRmNjMyZWMzOWE2MDIwNzMwYTcxMWNlOGRlMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvPN2/9UGLKUoqhirAZh+d1Ksnni
24D48Yt/bSOuv/9DLYy+KK0ey7gbd7urjeUYZIipI3hV1ncLdKri03pDcE+ATsJn
7pjoLspIf1hzFIhsLqPByNoBxi4gAG1qI9ulQWI48wNpvskhJyVaCD6JKEXYdqkk
JRNfH6itnYrhJwd37R2nnh6zZ9DMY20CF1YI7gbftioq35S1hOYzOY4PcmLHrumF
KZRtu3/TXkGVxhYszFA/JraDor2SGo7/lpO2ic2WYv2qICTVVQ0BSEu1Vs1+fObg
X04/hSKDkSuZ5mMRIFcWSYG4QaxK2+zkwjLoWRTTeMRPZL0e7yzCTgDeHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlFQba47fYy7DmmAgcwpxHOjeHCMB8GA1UdIwQY
MBaAFAiil/jPoc5tP+LFJpEcRoqaYxjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjct
OTcxMTM5NTE0YmIxLzEvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjctOTcxMTM5NTE0YmIx
LzEvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcaXP510
0UauqsthFDSE5wWarCmrPE94GoY51BwMhYweA4SeUeYlYITOdrv0yq8ZsybgYQ19
SZH2uTjYYs8bN1GbeUpgWo6TrnHn81yOPN7C0LN5eALFUbB7hXNYbneypNfahMcC
JNWoX7S1bpVCUCvmBf/pQBmBne5RU9/LyOTqE8/O7Hf/V05hdwGKG+X/KYCIVlPY
AZt0QK7yPbyuYB168PktnhAYbITRuOx/ndN5E18iIWEdDHLx6NsWrvv7K3tT5+N6
/djUDlUYW1JBwHERxTKvYYTDppkK/cgB0UrPukPh8hl+T48kKwf2cFxnKmWByGDy
l8U42c7lE6m/qQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:50 2026 by rpki-client