Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
File: CKkhe9gwYnyz5lfAuQY8giNN28s.mft (raw, json)
Hash identifier: LwBGZzvxj0+1+zc8HHWDuI1TuqZl9rR2OTyi/yPsGUk=
Subject key identifier: FE:54:34:0F:ED:18:4C:2C:ED:5C:36:22:D9:18:62:AA:5B:04:0C:33
Authority key identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
Certificate issuer: /CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Certificate serial: 01A0D20092296369011FBDE57E95525884E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 06:00:47 +0000
Manifest this update: Thu 24 Sep 2026 06:00:47 +0000
Manifest next update: Fri 25 Sep 2026 06:00:47 +0000
Files and hashes: 1: CKkhe9gwYnyz5lfAuQY8giNN28s.crl (hash: hD0O4S73LkTpC+yaEo7/f7T3NgK6jdfy3iAZldweIJc=)
2: r2staIGPnAB2fC8C0axIG4AKOBk.roa (hash: uFZHYgrj8p1JmsefAGSYoXv3EhDU7aOqOew1OyVD1rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:92:29:63:69:01:1f:bd:e5:7e:95:52:58:84:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Validity
Not Before: Sep 24 06:00:47 2026 GMT
Not After : Sep 25 06:00:47 2026 GMT
Subject: CN=fe54340fed184c2ced5c3622d91862aa5b040c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:4b:e8:44:0c:66:ce:dd:f6:47:6b:7b:b9:
bf:f5:be:8a:8d:90:e8:51:42:1b:16:91:39:79:d3:
33:fc:e2:aa:e9:4b:37:f9:ea:77:09:c0:d4:03:fe:
2b:5b:47:40:60:2e:5b:4c:37:b9:aa:f9:89:e6:48:
1e:d8:9b:ac:05:3e:fe:db:ca:55:de:64:a0:98:75:
9a:c1:d4:51:c4:25:12:62:a2:8f:42:4d:5e:9c:7c:
92:04:e3:29:e8:08:1e:d4:d8:ea:26:09:4d:44:b6:
14:b9:6e:da:e9:74:9d:37:4b:2e:dc:77:f4:21:b3:
f3:9d:13:fd:e2:4e:88:4a:60:dc:bf:96:42:9e:13:
b9:9b:6d:34:90:04:9d:f1:47:ca:32:29:2c:5d:a7:
e0:9d:11:6a:39:81:23:c2:ad:79:07:1c:bc:b5:bb:
a2:34:c2:75:38:51:cf:cd:73:e7:e2:8b:c7:40:09:
7b:03:15:55:a5:54:63:6e:94:88:e6:d7:ed:dc:6d:
93:5b:e0:65:53:1c:59:81:61:b2:1e:86:3a:13:f9:
05:19:50:49:14:41:cf:5d:23:40:d7:ac:c7:a9:75:
51:7e:6e:71:18:1d:88:d6:11:f2:7b:91:65:ec:79:
4f:b4:6f:96:ad:e3:db:1e:6b:e7:8a:f2:97:42:aa:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:54:34:0F:ED:18:4C:2C:ED:5C:36:22:D9:18:62:AA:5B:04:0C:33
X509v3 Authority Key Identifier:
keyid:08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:17:cf:ac:13:fb:9d:3a:f2:b7:b8:8d:7b:4c:52:01:23:38:
a5:be:3f:a2:fb:4e:c2:24:eb:5d:a9:0a:1a:c0:78:0b:80:9b:
12:2b:76:de:32:04:21:a1:46:5a:74:db:6d:2c:cc:b3:40:63:
ae:5c:c8:3d:7f:f3:63:7a:81:17:50:00:17:8f:6d:40:d3:b4:
cc:d4:0f:0d:f7:7b:5a:ad:11:f9:44:d0:ad:6d:3e:de:ca:92:
ae:fe:53:eb:3a:da:81:f2:ec:2b:32:92:24:30:34:c7:43:5d:
cc:cd:91:20:62:40:ef:23:5c:29:f3:0a:67:7b:82:24:c1:af:
e9:91:d0:75:48:e4:ea:de:79:ee:7a:42:a9:51:d8:0d:34:33:
f8:4d:69:ff:f7:1a:de:16:aa:94:45:b9:0b:da:49:0f:73:79:
1f:81:70:cf:fd:b3:26:26:97:63:61:5c:99:39:c2:d3:c9:7e:
2e:4c:ef:c0:45:b4:46:24:d4:0d:9f:35:95:0b:13:0f:55:f5:
02:b0:7c:83:29:ea:92:b7:27:43:2b:92:be:27:f0:f7:53:65:
bd:f4:3a:d8:e5:74:13:0f:86:28:77:75:36:bd:2c:3b:5a:7b:
d8:de:67:4c:7f:04:4d:a4:a1:6e:f1:3f:87:38:cb:95:b7:10:
4e:4d:ff:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:28:41 2026 by rpki-client