Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
File: ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json)
Hash identifier: 9NheaJC7XWxT6BFG2b4kg8XmiCWRbnLDmietYjyQ+88=
Subject key identifier: F7:90:AC:70:F2:96:92:7C:00:F8:5C:9D:FD:40:44:7B:3A:6C:18:B4
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial: 019D2772C900335BD57361DE277FD6A6DC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
Manifest number: 0AEB
Signing time: Thu 26 Mar 2026 00:02:07 +0000
Manifest this update: Thu 26 Mar 2026 00:02:07 +0000
Manifest next update: Fri 27 Mar 2026 00:02:07 +0000
Files and hashes: 1: b7voUZ91irBy-SIdwQFXM1Mmisg.roa (hash: u5pJ8/7+RE55Lx1+l+Oy8gg74nJnCPyFku6WokUubNU=)
2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: fDCPQjy/+mdKP3NQDohNiIfdx/8RQv+0W+xg6IEp594=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c9:00:33:5b:d5:73:61:de:27:7f:d6:a6:dc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Validity
Not Before: Mar 26 00:02:07 2026 GMT
Not After : Mar 27 00:02:07 2026 GMT
Subject: CN=f790ac70f296927c00f85c9dfd40447b3a6c18b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4f:d5:17:e0:5e:c5:51:df:42:31:81:94:a2:
b5:b4:70:dc:53:1a:55:87:6e:f4:38:53:36:ac:53:
88:13:85:a2:a6:40:62:66:00:04:24:2b:96:3d:7e:
a8:ae:9a:c8:ea:58:fb:62:f2:cc:da:b3:dc:52:fa:
92:4b:a2:d2:94:72:98:b7:1c:b4:0d:20:a9:36:13:
3c:31:31:48:77:c0:0a:f0:0e:b9:2b:39:a4:61:f1:
9d:a1:4b:64:23:1e:b8:c7:46:f1:ad:b9:e9:b1:ab:
5d:89:11:ed:3b:2d:e2:3b:4d:aa:50:f3:ce:c3:55:
04:ba:b9:bc:5c:7f:5a:8f:39:b3:46:5c:8f:ce:cf:
46:5f:4a:63:98:16:13:e4:b5:5d:0e:f7:3a:dc:55:
b3:41:5c:bd:19:a0:a0:5d:16:ad:2a:e6:f6:b3:c2:
27:ee:15:b3:af:96:a7:81:a0:38:83:87:ab:61:8e:
9e:df:ad:f1:fd:88:f8:4d:e7:92:62:04:d3:79:a5:
c7:b9:9b:c3:aa:1d:d8:38:ae:d8:b1:3d:7e:f7:9b:
3d:65:e7:5f:7e:6a:9a:4d:e9:c3:d9:92:32:3e:1a:
1f:7a:b9:e6:c7:b5:d4:eb:2c:8d:28:b6:55:b4:c3:
f3:34:4b:5d:8b:22:5e:88:2c:48:10:ed:fe:1a:bc:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:90:AC:70:F2:96:92:7C:00:F8:5C:9D:FD:40:44:7B:3A:6C:18:B4
X509v3 Authority Key Identifier:
keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:aa:96:f1:56:4f:9b:cb:3a:0b:48:52:bf:95:bc:a2:c7:a0:
94:87:f0:f1:fe:e2:fb:86:6e:9d:06:78:7c:16:d5:32:ef:a0:
d6:10:bf:71:8a:95:48:12:c9:42:56:4d:83:ee:b4:55:51:41:
7a:0c:51:62:db:96:e4:4f:4d:27:73:c3:91:51:9f:1c:fc:3b:
de:0a:26:d6:c3:e8:72:03:f9:a6:9e:2d:41:01:1b:62:5c:b4:
09:4b:6e:aa:48:f7:58:9e:25:9f:4f:a4:1b:bc:07:1e:82:e2:
fe:4d:ea:14:64:28:5b:bf:4b:98:49:f8:3b:3a:38:7b:f7:26:
ee:42:8d:bc:dc:c4:cc:f0:09:ad:92:46:6f:8e:ed:bb:98:21:
69:f2:88:8d:bc:bf:1f:ed:a1:6c:50:53:8b:bd:d1:39:eb:dc:
ae:ec:0d:ff:8a:58:99:8f:dc:f6:0e:9e:b2:c2:21:a0:1d:87:
79:40:7f:ba:9a:ef:1b:71:4f:58:96:4a:62:b4:a2:ae:d0:b8:
10:a1:1e:26:da:c7:b1:f8:27:c5:a2:27:e3:aa:fb:4e:2c:af:
fc:3c:51:49:1d:0d:79:dd:a4:a7:3c:9f:60:73:7e:00:bc:f3:
c6:85:f5:46:02:36:74:11:92:17:0c:95:34:c1:cc:da:01:94:
71:c4:41:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:30 2026 by rpki-client