Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft
File: ckaDTR5JovonRtw_ZtcMItUPRvk.mft (raw, json)
Hash identifier: wRQoMtNxzTRdraCq3ollC5HnU4YVqJs7XjrQLdvl/SQ=
Subject key identifier: F1:46:6F:74:4F:AD:EB:B9:58:3A:E2:3C:8B:2F:C6:FB:CB:B2:D0:65
Authority key identifier: 72:46:83:4D:1E:49:A2:FA:27:46:DC:3F:66:D7:0C:22:D5:0F:46:F9
Certificate issuer: /CN=7246834d1e49a2fa2746dc3f66d70c22d50f46f9
Certificate serial: 019D292962F4AD0D5EA2862A826B4731FD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft
Manifest number: 0178
Signing time: Thu 26 Mar 2026 08:01:11 +0000
Manifest this update: Thu 26 Mar 2026 08:01:11 +0000
Manifest next update: Fri 27 Mar 2026 08:01:11 +0000
Files and hashes: 1: D0YVmo9mr1QCrJsZ4C4hDCzezLM.roa (hash: UdjfDamS4qs4bhJckWQ8N8fInzYyEcckWpGaP0ttl4k=)
2: ckaDTR5JovonRtw_ZtcMItUPRvk.crl (hash: LBEkZsNg/WtGL6C8JW90Bw8TynI++mZe8SMcKkGY1mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:62:f4:ad:0d:5e:a2:86:2a:82:6b:47:31:fd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7246834d1e49a2fa2746dc3f66d70c22d50f46f9
Validity
Not Before: Mar 26 08:01:11 2026 GMT
Not After : Mar 27 08:01:11 2026 GMT
Subject: CN=f1466f744fadebb9583ae23c8b2fc6fbcbb2d065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:da:85:d4:b4:bf:df:a4:de:8e:da:6e:5f:
49:d2:74:8f:b2:96:a8:f4:36:32:55:4c:24:0b:e9:
b4:95:5d:c0:f3:32:cb:27:a1:6b:a6:9e:ff:ab:09:
9a:2b:72:67:50:04:43:77:27:a4:67:a5:6d:b9:6e:
46:9b:18:dc:7f:a4:82:8a:14:5e:8a:55:b1:40:7d:
9e:51:6f:17:63:38:cd:3e:f3:58:bb:cf:19:fb:16:
03:6b:6f:72:eb:d3:ea:0a:67:d4:ba:ed:76:f3:90:
74:12:10:c2:63:0c:3b:b5:63:e8:a7:02:3b:62:1b:
6f:28:e1:13:fe:c0:a0:66:36:03:e5:d4:b3:df:df:
80:39:03:7c:b6:b3:01:51:88:4a:05:8c:25:ef:2a:
33:09:55:03:a6:8a:41:53:dd:cc:67:f8:50:91:83:
77:a1:a3:84:f3:6f:1d:4d:84:d1:7e:02:ff:35:d3:
34:e5:78:bc:e6:fa:8e:8f:db:2d:b6:a1:01:47:18:
65:00:4e:50:b1:06:3e:c1:82:07:b8:8b:b7:32:43:
2d:ee:4f:05:66:97:08:61:31:c7:67:46:e2:d6:3c:
9a:b5:e1:ff:a9:55:a2:4a:a2:fe:a4:18:ad:3b:3d:
46:bf:06:2b:0a:b9:5b:77:be:94:40:b6:ec:3a:94:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:46:6F:74:4F:AD:EB:B9:58:3A:E2:3C:8B:2F:C6:FB:CB:B2:D0:65
X509v3 Authority Key Identifier:
keyid:72:46:83:4D:1E:49:A2:FA:27:46:DC:3F:66:D7:0C:22:D5:0F:46:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f3:13:c7:3f:a0:f5:f5:5c:e6:28:58:92:9c:8f:16:59:2a:
af:d6:b8:68:63:ee:3c:95:04:e3:5a:8f:aa:91:2a:a8:2e:15:
8a:2e:d0:38:88:ae:ec:6c:c9:6a:3d:75:60:bc:bc:af:c0:b2:
64:e8:e6:0e:13:f5:c2:07:f3:7f:44:0d:28:c2:2b:52:d8:4c:
1e:ef:db:cb:de:20:ab:8b:46:99:db:b7:1e:0d:95:0a:d1:9f:
51:83:bb:a5:d9:3d:25:7c:23:bd:00:89:8e:10:7c:16:5a:d0:
f5:88:bc:5f:bc:30:91:33:1c:e5:fa:67:68:a1:3e:bf:14:9b:
6c:a9:7c:b3:00:ab:26:2a:4e:f6:bf:88:6e:4c:cf:5a:13:44:
28:3c:94:9f:74:05:9c:82:0b:ec:f8:f0:36:de:bd:e3:fe:28:
53:53:6b:c3:e2:57:c5:a1:09:03:fe:7b:65:f5:53:5e:24:ed:
5d:ee:19:25:d9:6a:81:0f:1b:1b:53:ee:ff:37:08:e3:41:6a:
8a:1b:34:e0:5f:6d:ec:2d:e2:84:45:b5:9b:3b:20:87:8e:3b:
26:a2:8f:8a:db:75:96:71:9f:2b:ae:0a:50:db:16:61:f6:a3:
2b:e6:cb:40:55:92:1e:d0:e7:f9:ce:7e:04:d4:12:70:dd:13:
3b:de:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:36 2026 by rpki-client