Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: Mjq41soayjPGZ+o3q+mGK5CpMb5CYPcHxXUtTVRqcso=
Subject key identifier: D7:09:EF:49:23:51:AA:25:B4:ED:B5:62:40:40:0B:33:96:A4:D9:52
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 019D26CD295D4B33C23B4418285CD0A07AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 21:01:12 +0000
Manifest this update: Wed 25 Mar 2026 21:01:12 +0000
Manifest next update: Thu 26 Mar 2026 21:01:12 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: C6dSeZM1ZZZwlFS4SaRbJ7keIheHwCoxWGhTbSpnpRI=)
2: LfBxCi_T6d0bglwaFaNfqmxOUo8.roa (hash: nCJqjZS1Ks0JHWJEQU7QcXEZQwSVxL2fqIOkUlaTeGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:29:5d:4b:33:c2:3b:44:18:28:5c:d0:a0:7a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Mar 25 21:01:12 2026 GMT
Not After : Mar 26 21:01:12 2026 GMT
Subject: CN=d709ef492351aa25b4edb56240400b3396a4d952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:c5:23:ba:95:fc:da:da:1e:02:58:45:5e:
46:dc:82:e9:aa:76:fc:30:f3:f1:0b:f8:70:fb:68:
53:0d:ae:1e:74:83:73:7c:90:e8:4c:d1:fb:be:ad:
3c:b1:b0:a5:53:bb:0e:b9:94:63:e6:94:be:ea:2e:
4c:2e:55:c1:08:23:d3:88:ff:81:af:56:bc:8b:92:
92:8c:69:c6:bc:ed:af:cb:65:47:c8:d2:97:31:c4:
65:fd:13:4a:a6:99:47:92:57:4d:bf:d0:64:0f:85:
8e:4c:85:4a:9f:b7:ca:6f:06:4d:5e:97:03:05:4e:
be:91:88:3c:5b:fa:a5:ac:43:cb:dd:ac:1f:2c:d3:
e9:f8:b1:b1:34:b0:ed:17:dc:be:75:d4:cc:bb:1b:
b7:07:2b:5d:23:c5:14:a4:77:a1:ff:00:6c:63:09:
4b:ba:f6:d4:e7:01:59:d5:23:74:d3:de:74:c7:ac:
a9:41:aa:43:5e:0e:fd:fc:cd:86:da:a9:17:5b:c1:
4f:68:23:ab:c2:67:86:fb:0e:5c:79:ca:90:b1:6c:
b8:e3:25:2c:bd:e1:f2:50:b7:d9:6b:83:89:a0:37:
4b:1d:77:ac:2d:58:42:ea:38:80:43:9c:53:9c:4e:
98:2f:df:88:79:67:35:08:70:61:98:49:5d:0c:92:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:09:EF:49:23:51:AA:25:B4:ED:B5:62:40:40:0B:33:96:A4:D9:52
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c9:21:e1:db:d2:b6:f8:77:3a:18:bd:06:67:82:0f:29:f5:
5b:6b:ce:e5:05:d0:e5:ba:66:d1:32:24:f2:65:be:e7:0f:f1:
9f:a1:9f:b0:14:c9:71:be:95:88:5b:0a:5f:1e:76:5b:f7:74:
de:5c:7c:ce:39:f6:18:4c:2d:d3:bd:de:fa:d0:25:50:01:63:
b1:1a:75:33:cd:9e:e0:a7:b4:f7:93:19:66:bb:af:94:d2:45:
ee:d6:30:67:a5:bb:53:87:8b:ce:23:d8:a6:19:6c:4b:4c:95:
58:0b:a4:a8:c5:a2:0d:db:71:5d:65:b9:f6:ea:f3:cc:9a:de:
b3:91:6d:3d:1f:6e:80:79:89:03:7f:08:9c:c0:f0:fc:a4:70:
7a:5b:74:30:44:69:4b:9c:4e:31:a5:cc:e6:66:c0:16:f3:84:
2f:4f:ab:aa:6d:02:bf:3f:33:1a:43:3f:a3:02:24:8a:4f:7e:
81:dd:8b:e9:bb:9a:d6:0a:c3:87:17:16:d8:c8:c0:53:bc:f1:
e7:ed:39:a1:8e:5b:23:48:55:eb:7c:22:d4:94:b9:7c:29:bf:
2e:5a:0f:22:ea:38:9b:1e:ff:1f:9b:68:29:95:2a:4b:b0:06:
80:d1:2e:a7:d0:83:4f:fc:1a:85:92:35:23:d1:9b:aa:26:a5:
4e:cc:b9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:32 2026 by rpki-client