Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
File: ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json)
Hash identifier: mD43S+1pZVnYj/kNBokDimyLRHyYbRxaSaHV+GmqCYw=
Subject key identifier: 38:2A:BA:DE:62:A7:DF:71:DB:00:92:41:28:95:B6:11:5C:FD:9B:EF
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial: 01A0CC35458111D896989F3A3C4496D192D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
Manifest number: 0CCE
Signing time: Wed 23 Sep 2026 03:00:38 +0000
Manifest this update: Wed 23 Sep 2026 03:00:38 +0000
Manifest next update: Thu 24 Sep 2026 03:00:38 +0000
Files and hashes: 1: b7voUZ91irBy-SIdwQFXM1Mmisg.roa (hash: u5pJ8/7+RE55Lx1+l+Oy8gg74nJnCPyFku6WokUubNU=)
2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: 8rWbS2b1Gd0LzGKktgr9WhoKK5DRo0GwIW9SoEE9bV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:45:81:11:d8:96:98:9f:3a:3c:44:96:d1:92:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Validity
Not Before: Sep 23 03:00:38 2026 GMT
Not After : Sep 24 03:00:38 2026 GMT
Subject: CN=382abade62a7df71db0092412895b6115cfd9bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:7d:89:c1:49:8a:d6:19:32:ab:50:18:11:
e3:ae:1e:fa:fa:1c:9d:61:79:20:36:28:68:e3:22:
09:8f:37:be:41:30:c9:98:3e:2b:bb:13:1a:6f:09:
63:dd:c8:de:c8:97:e6:29:f2:58:6c:49:e2:0c:a6:
37:7a:69:54:eb:29:23:d6:4a:3e:5a:ba:48:16:cf:
74:b2:7c:7f:38:08:94:11:5a:30:d1:47:e9:ef:f8:
50:40:c2:af:e8:ae:d5:ab:9b:36:08:c9:dc:4c:5e:
ca:d4:eb:fc:32:1f:7b:22:31:21:1b:bf:21:8e:f4:
95:d7:4f:5f:30:54:56:c5:27:a8:7d:3f:7d:40:4b:
9a:50:f5:8c:78:65:c2:53:0a:9f:9e:66:ac:7a:a1:
57:04:21:d6:5c:34:fb:11:2d:cb:54:bf:a1:f6:d6:
4b:0a:fd:f4:6d:c3:a8:d2:40:f0:a6:b1:36:05:f6:
36:44:1e:9e:42:c9:3d:5d:62:ac:65:87:53:be:84:
f0:3e:a7:f5:6d:e4:e5:c8:d3:7d:db:b2:b4:21:0f:
b9:ef:f2:1a:99:56:da:e1:a3:53:10:24:eb:c4:cd:
73:5d:41:a6:b4:ee:ee:83:4b:22:e9:b0:37:7f:61:
e2:48:5b:2d:b3:95:0b:f6:14:21:9c:8b:ac:9b:75:
de:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2A:BA:DE:62:A7:DF:71:DB:00:92:41:28:95:B6:11:5C:FD:9B:EF
X509v3 Authority Key Identifier:
keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:01:38:0e:50:4b:8d:c2:6e:d8:68:c8:46:17:95:b0:c5:14:
23:a0:c3:f4:25:85:8f:f9:bd:82:67:17:e4:6e:8c:63:41:3f:
35:fc:db:28:ae:44:2e:12:02:a6:d6:0a:86:4f:f3:68:fa:ed:
d1:5e:67:5e:72:77:59:1b:b3:44:00:de:b9:b4:4c:66:7d:32:
56:e1:1b:d1:36:37:05:06:19:6f:e3:c4:77:7f:4c:55:e9:bc:
fc:03:5c:b9:7f:28:65:2d:03:d4:ca:15:19:9e:10:69:59:97:
e6:b2:7b:85:fa:75:e5:b4:81:ce:87:61:8c:ca:d2:93:9d:55:
a5:18:1c:a1:d7:a4:f2:b8:e2:da:49:1a:01:15:8b:68:b0:86:
aa:aa:f6:ec:d2:40:08:1b:4c:02:8b:1d:02:4e:50:ae:1c:cd:
a6:54:56:67:56:29:08:86:29:d3:c3:8a:77:37:91:a1:56:63:
4f:d0:a2:5b:99:a9:72:57:95:15:0f:bb:78:3c:c8:4e:3c:1a:
b0:56:db:fc:6d:b4:ba:49:2f:0f:69:9e:40:43:08:7c:2f:c1:
6a:a0:66:74:d7:eb:5e:72:d5:be:fa:40:47:19:20:8c:90:10:
27:9d:47:95:39:e7:a5:dd:ea:21:28:c0:eb:7f:62:a8:5c:3b:
f4:e8:c5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:30:28 2026 by rpki-client