Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: cVsuPKgIg5cCpig357DGwPvMciAeIVumzYPAFblpLZw=
Subject key identifier: 1F:46:D0:43:F3:00:AE:1B:FF:5D:11:C2:23:31:8E:95:1E:06:4F:F4
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019E1D90099D1FF724D4F6F4F12430BCABC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:00:39 +0000
Manifest this update: Tue 12 May 2026 19:00:39 +0000
Manifest next update: Wed 13 May 2026 19:00:39 +0000
Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=)
2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: x1x/iK/8B4DHvNz/K7a9D4XEBeDV51aMT8OPJdRftTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:09:9d:1f:f7:24:d4:f6:f4:f1:24:30:bc:ab:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: May 12 19:00:39 2026 GMT
Not After : May 13 19:00:39 2026 GMT
Subject: CN=1f46d043f300ae1bff5d11c223318e951e064ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:7a:d0:95:7c:78:71:e7:08:70:f2:76:cf:
ea:af:14:ce:a2:33:57:75:84:61:d5:66:34:34:88:
6a:4e:ab:3f:fa:49:e3:67:5b:47:33:c3:bd:c1:df:
16:1f:10:f3:3f:60:e9:73:a4:91:6e:fc:fc:c0:0d:
65:ec:7d:df:c0:1f:1a:08:8d:4d:ba:1c:91:fb:46:
f4:7e:73:46:3e:af:d0:29:e0:28:36:1c:f3:ed:65:
f9:38:ee:83:22:c3:4d:65:23:e6:77:f8:14:08:d3:
1d:5e:d1:6a:c2:c5:e8:ff:48:5e:6b:f8:67:b0:d6:
2d:29:60:bc:c1:47:b6:83:4c:14:2c:73:19:c4:86:
c0:5f:ab:27:dc:33:42:2a:e9:67:e6:a8:71:35:5a:
c7:4a:d0:8f:d2:6f:0e:4a:24:00:f8:0a:63:8b:bb:
54:d6:10:6c:55:a0:41:94:8a:98:5b:96:dd:e7:8b:
82:0e:02:36:35:e8:b8:4f:c0:db:7f:11:60:30:d1:
b9:23:00:a5:0f:50:82:f7:4d:ab:1d:ef:70:da:c6:
ea:ef:2a:46:39:3f:09:ed:e5:a7:44:3c:e4:8d:9b:
cb:57:b6:34:9f:48:6d:b3:37:4e:a3:08:b0:4f:ad:
6b:2d:8e:9d:c1:c5:bf:fe:58:68:fd:f2:15:3b:94:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:46:D0:43:F3:00:AE:1B:FF:5D:11:C2:23:31:8E:95:1E:06:4F:F4
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:66:21:06:d4:0a:c7:85:d7:98:ef:a7:ba:06:2c:1d:52:2e:
08:ea:fb:7f:42:3c:f8:2c:f9:a4:22:9f:6d:04:55:f0:d9:e8:
b2:b5:69:77:20:42:c6:f9:17:e6:0e:2d:59:6b:3d:fe:f1:13:
63:0f:52:32:bb:7f:b3:be:36:2c:de:0a:ad:ce:7d:b1:a1:fd:
10:33:ad:c8:69:51:bc:75:4f:2f:be:bc:6b:84:19:18:d4:9a:
f5:ea:41:ee:27:ae:93:b5:ed:db:f9:95:bd:b1:c4:32:88:65:
e6:13:c1:f1:e6:e7:f8:13:78:0c:9a:4a:c7:de:81:3b:09:66:
7a:e3:8a:4e:ef:5a:00:26:8c:cf:e2:2c:11:57:d2:68:ab:c1:
45:31:a2:37:0a:70:5d:50:49:cf:88:67:5c:dd:1b:99:cd:0d:
a3:63:da:2b:2a:c8:0e:af:0a:e2:a7:07:f9:d4:aa:df:d5:03:
37:5f:2b:06:91:b7:7e:7a:f0:df:1a:6d:87:f0:a8:60:51:e7:
61:9e:a4:44:e3:c8:19:ea:55:54:66:eb:9b:97:18:f5:e8:c1:
53:90:b6:e5:14:ec:09:cb:99:0c:84:01:e2:28:41:5f:c0:66:
89:fe:96:b0:99:60:7e:a9:e8:25:47:aa:f9:83:47:d7:93:a5:
19:df:c6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:30 2026 by rpki-client