
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: 9uoqYTpF3AaqHOhHJNrkKf2eIi1psRtSwobI2kL/c80=
Subject key identifier: 37:AB:8C:17:97:43:16:9F:47:B4:AE:05:95:21:91:6D:67:20:84:46
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 019F92115F5C822C9226F5073A82CBE9C289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 03:00:39 +0000
Manifest this update: Fri 24 Jul 2026 03:00:39 +0000
Manifest next update: Sat 25 Jul 2026 03:00:39 +0000
Files and hashes: 1: 1WFjwMGMePlEAC8bm7XUOdRFj34.roa (hash: fW2dzpRcyQ80IgEJ6uR/Uw++9kayO/2mr9G7qpsC/1w=)
2: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: fnOGHXmB0w38Kgh/tuLFvc1IARmVcbT17ies/pP2R/E=)
3: Z0Yd5ryo6CVHolrVfgTJW3VNRio.roa (hash: qAoF6R0Ct6kB3sTz/3lrppb3yX+381mHA9jGPvlKM8Y=)
4: rHFkeLh05qkzhm3XqYX2jCr6Jwc.roa (hash: rLIRPVEJIS1dHp/fkMSEkxmJ0YQCqnoXU1iytE3RgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:5f:5c:82:2c:92:26:f5:07:3a:82:cb:e9:c2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Jul 24 03:00:39 2026 GMT
Not After : Jul 25 03:00:39 2026 GMT
Subject: CN=37ab8c179743169f47b4ae059521916d67208446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:04:84:3e:ec:ba:71:26:49:86:82:1a:ec:
50:95:07:d4:ac:46:0c:b6:12:1b:77:b2:12:e4:43:
82:89:78:b7:79:2b:f6:6a:4b:ba:53:e1:2e:d8:3a:
5a:9c:26:5e:31:f5:c8:41:a0:43:f9:fe:89:8d:2b:
80:db:df:f1:1c:56:a0:46:20:bb:63:99:9a:2d:e7:
fc:19:7d:2e:36:f4:28:ae:65:01:8f:0c:82:9a:45:
16:82:98:b1:80:3c:21:34:72:b5:0d:9a:3b:89:2a:
0e:df:7d:40:0a:39:6b:74:81:6f:c4:a0:51:48:9d:
d7:98:86:70:06:ed:d0:66:ba:f5:76:74:cd:c6:c4:
8e:cc:68:53:a2:95:29:24:6d:12:3e:c0:77:e3:bf:
93:05:ae:5c:32:62:e2:ca:4e:65:a9:04:ff:95:34:
a2:a8:5e:5a:f1:e4:39:d9:be:12:19:73:00:d4:5e:
60:00:b3:7c:a1:7a:d5:db:2e:a4:95:eb:63:11:83:
92:03:ca:10:e3:8d:2d:3f:77:4e:f0:e8:e9:42:ad:
87:3f:4b:f3:33:a3:ee:44:c7:d1:4f:b7:ee:4d:a6:
38:b0:79:f0:03:1b:27:f2:2a:e2:ca:bc:45:34:8f:
81:c6:7b:de:12:f8:20:3c:4e:46:ab:70:ac:78:7d:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:8C:17:97:43:16:9F:47:B4:AE:05:95:21:91:6D:67:20:84:46
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1d:d0:d7:74:45:4c:7e:74:45:38:22:d0:16:51:c8:11:a3:
b8:f5:22:3d:71:9d:86:2f:da:6a:31:98:04:9e:1d:7b:aa:24:
a2:67:b4:0c:e4:bd:08:61:53:a9:70:b9:9e:9d:01:5f:f0:ff:
f3:b1:f8:00:50:54:e8:49:b9:22:da:ab:19:4d:e7:8b:8f:55:
62:24:f5:ad:b2:c8:eb:13:d2:4b:c0:2b:74:f2:d5:58:42:c3:
61:68:9e:ac:3b:8d:f3:29:f9:1d:e3:5f:93:5a:a8:d8:89:e6:
e7:6e:f3:6f:e7:89:f7:ab:62:05:e4:05:27:ee:b9:0e:62:a5:
2f:f1:9f:bc:13:7b:58:fd:83:4d:02:9b:f0:90:54:99:87:ad:
f5:01:69:45:46:c6:b5:c6:32:ec:cc:45:fe:93:79:b9:a6:38:
3e:4c:b6:cf:2c:57:e5:0a:c7:45:9f:76:ca:69:a0:11:90:00:
f6:ab:e0:cb:97:93:a7:c0:51:2c:c5:10:ed:83:33:19:ef:e1:
6d:15:6c:71:d5:49:a4:28:e8:97:38:67:58:66:70:0b:7e:9f:
85:ee:35:7e:4c:48:5f:81:65:78:98:2d:b7:03:a6:74:0f:e9:
22:ff:54:08:9f:1a:a7:65:98:d0:79:5e:90:88:3a:7a:e5:39:
92:4f:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:38:45 2026 by rpki-client