Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
File: CKKX-M-hzm0_4sUmkRxGippjGNA.mft (raw, json)
Hash identifier: S9KT0OXFQm36ueS1RD21XO4uL0zh+VOtGphle1Ak5DQ=
Subject key identifier: D8:FA:0D:13:20:CB:E4:6A:A1:5F:58:90:73:5F:AE:B6:B7:7A:16:B4
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 01A0E1E1B01BE08CDA7BD413FC16269BB36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 08:00:59 +0000
Manifest this update: Sun 27 Sep 2026 08:00:59 +0000
Manifest next update: Mon 28 Sep 2026 08:00:59 +0000
Files and hashes: 1: 5dqgcQc20DZK2fFn6bpH-A8uyQ8.roa (hash: eVKJis7Ad9o9z5jyjcFOLQfOP7WhBCGivw8hyFer3JM=)
2: CKKX-M-hzm0_4sUmkRxGippjGNA.crl (hash: 08hH7jvrnKK/u6XW3yXDEBderjclNuqz+oTqTwh+iZA=)
3: RMuTV-vXrFsXAt5l344yDIEdodg.roa (hash: 4Y7+XsWOTPcRpIgGXMuxA5FSDFIupn4tgYoKEVmPgqU=)
4: UL14P1AhHlUZzAIOnswglPjo1V8.roa (hash: oIVyB68rjWbYMJyZsMbtBMTHDcN1LK+tN3ZZZFRb1s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e1:b0:1b:e0:8c:da:7b:d4:13:fc:16:26:9b:b3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Sep 27 08:00:59 2026 GMT
Not After : Sep 28 08:00:59 2026 GMT
Subject: CN=d8fa0d1320cbe46aa15f5890735faeb6b77a16b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:52:43:20:5f:46:e5:9e:2d:c0:80:d6:a7:
57:51:60:a2:6c:33:0c:8d:88:3c:01:5d:b1:58:68:
fa:7d:de:4e:b7:65:07:b4:17:8c:8b:90:93:f8:08:
31:d8:f1:da:e1:e6:50:63:3e:1f:d6:2c:82:5e:03:
87:1e:b3:85:ff:05:d3:9f:5c:ea:f4:28:bf:94:d8:
f9:01:64:7d:08:dd:09:7d:93:51:06:d9:46:bd:ed:
ff:5c:5a:6b:d9:1a:50:1f:91:72:a2:ad:3e:1e:10:
8c:c4:e1:8d:cf:f2:db:31:dd:a2:be:61:21:69:4d:
6f:b5:b7:31:28:04:f7:ad:e6:06:69:6f:9b:15:21:
ed:a5:da:a5:af:0b:af:5c:85:bb:11:22:66:5d:c9:
95:31:45:c6:5a:7b:df:ad:93:27:4b:88:59:db:23:
33:23:3d:ad:b0:18:fb:d3:ef:b9:5a:cc:3e:69:f0:
1a:d5:28:9e:82:58:02:13:ff:94:fa:0d:ce:ed:91:
a1:f1:55:70:2a:d2:4a:be:b1:50:f5:d4:b9:85:82:
71:5a:cd:17:74:36:83:55:d1:bd:ac:3a:a4:d1:9f:
df:34:c8:fa:03:77:49:6f:20:ba:41:a4:be:4f:14:
87:23:1b:3b:e6:b7:7a:86:b1:f3:c0:e5:b5:f9:d1:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FA:0D:13:20:CB:E4:6A:A1:5F:58:90:73:5F:AE:B6:B7:7A:16:B4
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f0:dc:8e:fb:6f:ad:eb:85:0c:84:7a:1a:c1:07:4a:48:2e:
9e:95:a7:a6:02:5a:9a:06:bd:47:81:72:3a:17:dd:fc:99:5e:
b0:c6:eb:4f:de:32:29:c7:a8:00:d6:08:27:5e:c7:d3:87:ef:
48:bf:6a:21:50:ad:06:1d:63:39:83:53:3a:60:9a:d4:bc:f9:
b9:dc:5e:c2:21:d7:b4:4f:01:88:85:06:4a:2b:b7:59:16:e1:
66:56:c6:50:06:7e:9e:fb:3a:d3:76:78:d0:77:96:01:2a:85:
91:c3:94:8a:2d:c3:2a:2e:5a:7b:37:04:75:7a:f6:ba:39:9f:
0d:be:8e:95:3c:27:ff:82:67:0b:5d:23:06:45:ae:fe:61:89:
d7:3c:1a:69:03:94:43:e6:6f:2c:f9:a1:71:6c:93:90:9e:d5:
0d:5b:de:05:d9:29:18:ae:6e:f1:61:31:d7:cc:fa:3c:c1:0e:
a9:3c:51:4e:fa:98:d6:f1:e1:75:e3:9c:7a:32:36:b2:8f:db:
49:53:33:3b:79:ea:90:b2:85:80:fd:fe:7e:06:3a:0e:f4:97:
0d:ab:a7:c1:41:18:46:9d:e4:40:11:83:be:cc:ee:ee:76:a6:
2e:c4:40:7a:16:61:68:46:c8:4f:9b:3e:d2:28:3d:9b:c9:cf:
38:06:a7:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDh4bAb4Izae9QT/BYmm7NvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTI5N2Y4Y2ZhMWNlNmQzZmUyYzUyNjkxMWM0NjhhOWE2
MzE4ZDAwHhcNMjYwOTI3MDgwMDU5WhcNMjYwOTI4MDgwMDU5WjAzMTEwLwYDVQQD
EyhkOGZhMGQxMzIwY2JlNDZhYTE1ZjU4OTA3MzVmYWViNmI3N2ExNmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqtSQyBfRuWeLcCA1qdXUWCibDMM
jYg8AV2xWGj6fd5Ot2UHtBeMi5CT+Agx2PHa4eZQYz4f1iyCXgOHHrOF/wXTn1zq
9Ci/lNj5AWR9CN0JfZNRBtlGve3/XFpr2RpQH5Fyoq0+HhCMxOGNz/LbMd2ivmEh
aU1vtbcxKAT3reYGaW+bFSHtpdqlrwuvXIW7ESJmXcmVMUXGWnvfrZMnS4hZ2yMz
Iz2tsBj70++5Wsw+afAa1SieglgCE/+U+g3O7ZGh8VVwKtJKvrFQ9dS5hYJxWs0X
dDaDVdG9rDqk0Z/fNMj6A3dJbyC6QaS+TxSHIxs75rd6hrHzwOW1+dFfdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj6DRMgy+RqoV9YkHNfrra3eha0MB8GA1UdIwQY
MBaAFAiil/jPoc5tP+LFJpEcRoqaYxjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjct
OTcxMTM5NTE0YmIxLzEvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjctOTcxMTM5NTE0YmIx
LzEvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafDcjvtv
reuFDIR6GsEHSkgunpWnpgJamga9R4FyOhfd/JlesMbrT94yKceoANYIJ17H04fv
SL9qIVCtBh1jOYNTOmCa1Lz5udxewiHXtE8BiIUGSiu3WRbhZlbGUAZ+nvs603Z4
0HeWASqFkcOUii3DKi5aezcEdXr2ujmfDb6OlTwn/4JnC10jBkWu/mGJ1zwaaQOU
Q+ZvLPmhcWyTkJ7VDVveBdkpGK5u8WEx18z6PMEOqTxRTvqY1vHhdeOcejI2so/b
SVMzO3nqkLKFgP3+fgY6DvSXDaunwUEYRp3kQBGDvszu7namLsRAehZhaEbIT5s+
0ig9m8nPOAanPQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:06:50 2026 by rpki-client