Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: iqjEtVOfFybcQ0ZDM/0H3gNDbjk7BL11LmG5WCBllwo=
Subject key identifier: 3E:0C:BC:F7:D7:67:49:52:6E:8A:40:51:1A:ED:34:A8:13:8A:8C:61
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 01A0CDB5FB386B32C56D15884C068FB07B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 1A72
Signing time: Wed 23 Sep 2026 10:00:50 +0000
Manifest this update: Wed 23 Sep 2026 10:00:50 +0000
Manifest next update: Thu 24 Sep 2026 10:00:50 +0000
Files and hashes: 1: 1WFjwMGMePlEAC8bm7XUOdRFj34.roa (hash: fW2dzpRcyQ80IgEJ6uR/Uw++9kayO/2mr9G7qpsC/1w=)
2: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: GFTbRIckF6c7VrKY+C5z6f2xwXMqCN5mZe0OITRFGPI=)
3: TImJJUhHSPbQkRUq3GD4PoxkHbQ.roa (hash: 8czZJ0iGrV8f7eo8Glrc6/FdpLKC2UfW5wYgtnaT0dA=)
4: rHFkeLh05qkzhm3XqYX2jCr6Jwc.roa (hash: rLIRPVEJIS1dHp/fkMSEkxmJ0YQCqnoXU1iytE3RgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:fb:38:6b:32:c5:6d:15:88:4c:06:8f:b0:7b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Sep 23 10:00:50 2026 GMT
Not After : Sep 24 10:00:50 2026 GMT
Subject: CN=3e0cbcf7d76749526e8a40511aed34a8138a8c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:53:8d:d0:ab:e5:6c:fb:14:c7:7d:3b:4c:
1f:3a:7f:3c:e6:c8:2e:60:ff:59:18:eb:fc:a2:73:
bb:bb:2c:ea:95:1d:81:e5:a3:34:ef:99:a1:5a:6c:
ba:1b:07:fe:ce:7b:c6:cd:8b:56:b2:ee:df:1b:4b:
62:4f:62:08:bb:45:c1:dd:01:d8:ba:32:f2:6b:c9:
97:a4:90:d5:c7:d3:e8:88:c0:81:6b:93:e0:c9:c5:
fc:15:81:91:35:ee:b7:64:d0:ca:81:c6:61:ed:74:
c9:6e:e3:80:63:c9:0b:08:b6:0a:c4:d6:4a:ec:08:
78:89:1e:20:99:8c:2a:a8:aa:2c:75:9b:20:18:f9:
2b:a6:07:2f:76:e5:45:61:00:a9:f5:53:e6:50:8a:
2a:91:77:ad:8e:19:f4:c0:49:0c:6c:e2:f3:27:2f:
42:05:3e:e2:ba:66:99:3f:b0:ae:89:b5:e7:d0:18:
1b:d8:98:58:dd:08:bd:17:bd:9b:d8:de:b5:63:7d:
08:e4:cd:82:25:61:67:4b:66:2e:74:cb:d6:3d:27:
e4:9b:dd:0c:70:88:2d:82:35:3a:7a:60:bf:f2:19:
59:f9:aa:80:db:5d:ca:bb:c4:11:a1:2f:e3:87:88:
f6:fc:04:ba:55:e9:36:34:60:93:9a:7c:7f:ea:f6:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:BC:F7:D7:67:49:52:6E:8A:40:51:1A:ED:34:A8:13:8A:8C:61
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:80:7e:be:2f:61:77:6c:ec:40:97:04:b2:3b:b3:49:14:91:
80:e9:57:02:01:1a:c2:01:c6:7a:e3:b5:c0:ee:fe:66:42:b7:
0b:8d:63:59:6d:4a:e0:36:fb:87:3b:d2:a2:ea:79:40:20:c9:
e8:8c:85:65:87:6a:73:c5:b1:b1:53:15:0b:09:6a:81:2f:fa:
d9:7f:36:4c:b4:ce:86:76:30:ea:eb:b7:df:31:81:a7:a0:ed:
91:98:16:c5:0b:46:a9:5e:55:a2:45:84:24:3d:d7:54:6f:ff:
12:98:7a:d9:1b:80:32:cf:b9:06:24:fc:a8:67:b9:6a:bb:90:
2e:64:65:be:73:27:e2:5b:ce:09:ae:34:fc:f1:ef:58:f8:12:
8e:68:3b:59:2a:f8:31:db:b9:7a:bb:56:4a:87:1e:4a:0a:41:
63:16:a5:7f:b3:e9:2c:8e:a5:ca:23:8e:1d:5e:ba:14:b2:83:
36:78:a9:7a:a4:32:a3:a6:a5:0c:54:44:09:ad:74:ae:af:8d:
0a:0e:da:a0:45:39:aa:1f:cb:34:7f:74:04:c2:a8:51:92:dc:
75:c3:e1:ef:b7:7e:c8:0b:89:bc:59:cf:99:98:74:30:c2:05:
c9:6f:8e:ac:dd:a1:55:8e:03:d6:b8:0c:d1:bf:44:0e:35:d2:
80:ae:72:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:39:50 2026 by rpki-client