Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
File: ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json)
Hash identifier: 1IfWk32eScDKsfQDqu8Ql3f8oRYPBy5YzXyeNNZGqss=
Subject key identifier: 22:D8:93:97:28:C9:11:5E:B9:E0:F0:99:F3:16:9B:FD:5B:8A:E9:98
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial: 01A1DC82C9252DE79705D4B1D7AE7803D738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
Manifest number: 0D5B
Signing time: Sun 15 Nov 2026 00:02:00 +0000
Manifest this update: Sun 15 Nov 2026 00:02:00 +0000
Manifest next update: Mon 16 Nov 2026 00:02:00 +0000
Files and hashes: 1: b7voUZ91irBy-SIdwQFXM1Mmisg.roa (hash: u5pJ8/7+RE55Lx1+l+Oy8gg74nJnCPyFku6WokUubNU=)
2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: bPZSDuBuszHwcmvXvY4JMtKsq1FEMke60+NeqX6arDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:c9:25:2d:e7:97:05:d4:b1:d7:ae:78:03:d7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Validity
Not Before: Nov 15 00:02:00 2026 GMT
Not After : Nov 16 00:02:00 2026 GMT
Subject: CN=22d8939728c9115eb9e0f099f3169bfd5b8ae998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:f3:7a:cc:51:77:27:52:9d:07:7d:65:5e:
bc:e2:04:ab:18:54:bb:27:9c:6e:2f:8a:bc:10:8b:
f9:bc:c9:43:55:00:c6:ee:91:f1:c8:18:42:66:f1:
f3:2b:c5:2c:36:35:69:49:03:7c:c4:25:a0:cb:96:
a9:b0:c4:53:8f:b2:c4:7d:ef:c7:19:40:21:5c:24:
42:c4:d4:de:72:80:fe:43:c0:6e:2e:31:68:ad:67:
31:66:e2:c1:79:56:e7:41:a9:88:8e:8d:2a:6d:41:
e2:9f:f4:fa:34:79:f3:23:a5:a7:d1:34:c8:a9:b3:
3f:b8:5e:35:57:10:6b:28:3a:16:84:e0:09:da:b9:
68:08:d7:63:f0:28:ec:2e:ac:75:02:fb:bf:6f:1a:
c8:72:21:63:20:dc:10:1f:05:9d:a5:a0:8e:fc:9f:
fc:d0:f9:ba:f7:24:d8:ff:88:8d:64:0d:8e:b5:86:
70:ca:07:72:2a:32:55:14:74:57:c0:d9:44:b4:ed:
65:00:bd:9d:5c:d2:cb:9d:fe:44:78:f6:59:01:77:
52:9a:31:63:04:dc:e9:ff:05:09:5e:77:06:fd:b5:
88:66:c4:42:b2:ff:19:ac:e0:9f:21:c5:d3:9d:77:
8e:cd:d0:cb:c9:4d:26:01:7a:14:cf:0a:19:6b:12:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D8:93:97:28:C9:11:5E:B9:E0:F0:99:F3:16:9B:FD:5B:8A:E9:98
X509v3 Authority Key Identifier:
keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:60:01:37:b1:5e:d5:1a:6e:35:15:ca:c3:e9:c5:de:e3:f2:
ce:76:cb:0a:99:ac:c9:50:af:a4:9e:b5:83:cf:a3:f7:a1:19:
9b:dc:a5:71:a2:3f:fe:10:e0:76:92:be:bf:e0:ad:ba:ae:38:
9c:aa:83:dc:7a:68:47:f6:4a:01:39:66:d1:76:68:63:52:0d:
13:1e:cb:bb:fa:8a:6b:40:07:43:3b:a9:2d:de:d4:29:8f:4a:
52:1e:48:e4:c3:5c:4b:f2:b7:cd:8e:ad:9a:b0:94:ff:7e:f3:
30:a5:6b:94:2b:80:2b:1e:93:d6:6a:ee:a7:c7:e8:b3:12:5f:
83:4c:c4:f0:89:8d:f1:f0:d4:24:ef:1e:6a:be:bd:86:a5:dc:
46:d6:5a:88:74:8b:93:e6:4b:05:04:09:e8:25:46:0f:db:ea:
56:8c:38:94:66:f1:60:4b:23:65:55:70:f3:13:e2:9e:f8:83:
12:28:69:c5:76:ca:f2:52:65:6f:54:50:9a:4a:9f:28:a5:62:
dc:c3:68:e0:1e:ee:76:d4:46:6a:b4:a8:ea:46:5f:a0:1a:78:
72:63:50:64:2c:d8:b3:21:73:25:24:72:61:62:9b:b4:d4:6d:
ef:e7:9f:bc:c3:bc:6c:cb:d6:7f:3a:f0:85:d8:a7:7b:8a:2c:
f4:c0:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:46:20 2026 by rpki-client