Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
File: CKkhe9gwYnyz5lfAuQY8giNN28s.mft (raw, json)
Hash identifier: lmK18G2UTxqBlyiuZdyUX5ZTvSAIp9pAVb5KlhBFx7w=
Subject key identifier: 1B:3E:67:9F:E7:12:CD:8D:15:BD:00:E5:4B:52:A4:40:FE:90:C8:A5
Authority key identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
Certificate issuer: /CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Certificate serial: 019F8F7F07347B49DB6AF7C71BAAB2634B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 15:01:34 +0000
Manifest this update: Thu 23 Jul 2026 15:01:34 +0000
Manifest next update: Fri 24 Jul 2026 15:01:34 +0000
Files and hashes: 1: CKkhe9gwYnyz5lfAuQY8giNN28s.crl (hash: 58Lj8vw49gvn8c0XlzJyq76FKUU65o9pJq66YUBziY4=)
2: r2staIGPnAB2fC8C0axIG4AKOBk.roa (hash: uFZHYgrj8p1JmsefAGSYoXv3EhDU7aOqOew1OyVD1rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:07:34:7b:49:db:6a:f7:c7:1b:aa:b2:63:4b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Validity
Not Before: Jul 23 15:01:34 2026 GMT
Not After : Jul 24 15:01:34 2026 GMT
Subject: CN=1b3e679fe712cd8d15bd00e54b52a440fe90c8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:e7:a1:28:41:3e:4d:8b:31:e5:ab:bb:6c:
e9:d8:9f:42:c6:97:f3:c5:d7:27:da:f4:e6:7a:4e:
d3:a9:cc:f2:17:73:83:50:19:a9:c5:8e:67:d9:6f:
0f:75:e4:ce:46:d8:a1:78:93:98:f5:93:56:f4:6c:
6d:c6:8d:5a:19:51:5c:1c:08:fa:7f:3b:dd:2d:80:
b6:5b:e5:d2:d9:3a:58:48:f9:98:62:76:b0:25:fa:
3b:78:57:ca:aa:14:b5:6b:e7:87:64:d1:91:be:a4:
6c:e5:a5:37:c3:22:9e:fe:63:67:33:5a:7a:f3:67:
76:41:aa:40:86:77:30:7e:30:ea:d5:cf:58:da:a9:
db:df:19:4b:c1:4a:18:e9:44:f2:db:23:75:ca:25:
c2:a9:12:b9:1e:f7:dd:c0:3d:76:fd:09:e3:06:0d:
c6:b9:bb:a6:06:c8:77:ad:f6:b2:fd:8e:30:08:0f:
19:e9:20:57:3c:99:6a:cf:76:b9:a4:2a:03:38:58:
a1:2d:b1:76:80:3f:a0:04:8b:47:e7:3e:81:f6:3a:
73:1d:5f:d3:7d:ef:66:9a:63:8b:d9:1b:c9:33:6d:
7e:d5:7e:e6:3c:ef:43:d2:79:26:5f:21:e0:b8:07:
eb:7b:25:c3:ea:88:58:33:54:fc:3c:69:a4:43:bd:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3E:67:9F:E7:12:CD:8D:15:BD:00:E5:4B:52:A4:40:FE:90:C8:A5
X509v3 Authority Key Identifier:
keyid:08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6a:52:31:07:ef:fb:58:02:4a:99:63:ac:68:e0:5f:47:b4:
26:80:4c:a8:de:00:6a:33:23:ee:a6:39:da:74:27:74:da:4a:
dc:4d:b0:42:bc:ec:e6:9c:5f:c2:b8:71:c9:a3:56:b2:7f:a7:
4b:90:5c:c7:6c:2c:28:41:12:6a:be:7c:ed:cf:71:5e:77:63:
a0:62:ba:43:52:7e:4a:a4:4f:4d:fd:be:6c:bc:95:15:72:05:
03:25:60:64:34:87:c9:28:97:fa:51:66:0e:6a:11:d4:cc:54:
18:14:a6:bb:68:73:90:d3:c7:61:64:01:06:fc:2e:2f:51:20:
3c:c6:75:5c:83:06:07:28:2c:96:90:95:06:50:4c:e0:33:a5:
4e:68:26:17:b9:aa:28:f1:7a:be:cf:1f:7b:29:5c:40:c5:ac:
d0:75:ec:08:41:ce:83:27:41:f4:a9:14:83:04:5c:04:9f:2a:
21:2b:88:26:99:1d:67:fb:96:9e:c3:50:3b:f2:12:29:14:ba:
f1:bc:1d:57:21:33:18:52:de:06:5a:7a:6b:35:df:8b:53:d8:
50:80:a6:06:28:87:c0:6a:26:18:49:ef:58:14:da:ca:47:c7:
45:2d:0b:f3:b3:77:17:0d:73:ab:0c:b8:97:96:59:40:7b:2b:
ae:69:1c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:12 2026 by rpki-client