Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: +AziImUytKTV5ZG4Lr4EVkAAUnYceFfllAbSe41X7tc=
Subject key identifier: 02:7E:76:18:6A:88:08:9F:64:D7:57:83:CA:ED:10:6B:03:28:0A:A0
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019F905A49A7AB2EA71893E00324A45E73B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 19:01:03 +0000
Manifest this update: Thu 23 Jul 2026 19:01:03 +0000
Manifest next update: Fri 24 Jul 2026 19:01:03 +0000
Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=)
2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: 7pvYTiYd+FDqAu/+xNo+asYt8xasNFb/meS3DzEwuMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:49:a7:ab:2e:a7:18:93:e0:03:24:a4:5e:73:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Jul 23 19:01:03 2026 GMT
Not After : Jul 24 19:01:03 2026 GMT
Subject: CN=027e76186a88089f64d75783caed106b03280aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:3e:2f:14:d0:0e:bd:f3:e1:e1:ee:be:57:
18:37:ef:3b:2e:2f:c0:1e:ee:17:50:9c:da:83:72:
a7:ae:a5:32:60:c5:f8:8e:23:9e:ba:ef:45:0e:56:
10:e7:42:33:1b:26:20:a6:0d:98:cb:bf:74:2b:db:
d3:5e:b5:ff:3d:2b:ae:fd:a5:22:19:c4:04:51:8c:
0f:e9:ce:5f:e7:9e:c3:50:b1:05:ed:9c:a5:ef:be:
75:bc:ed:e1:93:25:c1:f2:24:32:55:3e:5f:ee:ea:
ab:ba:e9:45:6e:47:d0:e0:57:a3:f9:f7:54:87:7f:
ca:08:30:cc:c0:5e:c3:c4:1e:b7:e5:cb:59:50:bf:
8a:f9:e4:80:98:bd:1c:32:49:4d:d8:51:1f:49:a5:
68:49:72:72:d2:99:d1:7b:81:fa:e2:3d:7f:b0:09:
f1:65:f3:65:f3:04:9a:2c:03:9c:00:47:f1:0c:f8:
e4:10:97:40:04:ff:97:dc:1c:96:5a:d9:da:71:ed:
62:40:12:44:e6:ce:db:c3:61:0b:65:6b:52:8e:04:
d1:b3:01:95:43:5b:50:0f:67:1f:1a:de:bb:cd:18:
c8:b0:7e:dd:59:1d:d2:35:14:43:3b:0e:2d:66:c5:
16:77:9b:55:49:da:4b:86:24:44:6f:b3:0f:9a:ff:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7E:76:18:6A:88:08:9F:64:D7:57:83:CA:ED:10:6B:03:28:0A:A0
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f4:c8:9f:8f:50:ff:b8:cc:84:c9:a7:fe:b9:87:5b:5f:67:
c6:64:b4:aa:82:4a:17:aa:5b:15:fd:63:47:5b:d5:5b:17:68:
3a:03:4a:20:f0:4f:34:45:59:3c:77:e3:6a:e6:85:10:75:cc:
18:b6:af:03:d6:a6:04:81:d4:1b:36:c4:ec:ff:3f:90:2d:74:
28:64:1b:63:f7:89:ef:78:3a:80:60:96:66:f7:14:b4:47:05:
ba:96:f3:83:e8:e3:78:4d:40:fe:d6:e7:b5:f7:17:a5:76:7a:
cd:7e:53:a4:a2:0e:4f:e7:a3:4b:f9:46:0d:b9:4b:21:33:c6:
81:b2:a2:4d:2e:0e:66:96:68:a4:27:92:a0:6d:83:7b:74:f9:
69:13:de:16:b8:2f:db:77:50:b7:3b:bb:d6:ab:c5:f3:29:9c:
60:fa:17:ce:e4:bb:7d:8c:64:c7:77:ea:90:ef:f4:6f:96:c0:
53:73:56:cc:81:1f:eb:ec:4d:c0:60:5e:54:c2:90:3a:91:e6:
62:9e:b9:73:ee:41:35:19:ca:d4:8c:1f:5d:af:7e:30:9d:5a:
83:fe:ee:79:3f:08:e4:e5:d6:17:43:37:69:05:89:e9:61:50:
48:4a:81:64:12:34:ca:06:ae:21:fa:a5:91:85:4e:86:1e:17:
a8:d6:a9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:10:13 2026 by rpki-client