Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: D22h6p3IWFtwjkG0FkSDm3QaoOwocss6y0SsC0CFGTg=
Subject key identifier: 0A:9A:DF:92:D8:BB:EF:1B:BB:2C:EB:13:2C:15:AD:32:59:FD:85:72
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 01A0CB22745DFEFB04726474350016F6C71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 22:00:27 +0000
Manifest this update: Tue 22 Sep 2026 22:00:27 +0000
Manifest next update: Wed 23 Sep 2026 22:00:27 +0000
Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=)
2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: i1LWQoDm5E6BNMRsG3ehV1popjeWPqgEqwf7GM2eZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:74:5d:fe:fb:04:72:64:74:35:00:16:f6:c7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Sep 22 22:00:27 2026 GMT
Not After : Sep 23 22:00:27 2026 GMT
Subject: CN=0a9adf92d8bbef1bbb2ceb132c15ad3259fd8572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:7a:cf:f7:06:30:10:76:e4:a3:18:4c:8a:
8a:ff:33:88:54:fb:fc:ed:83:1f:d2:33:c1:b8:b3:
d8:54:56:17:b1:f7:cf:d1:a6:53:dd:95:7e:92:1b:
7b:20:e9:e6:ba:5a:77:17:cd:e3:b9:ea:36:16:6c:
04:19:1d:7e:ba:02:75:6c:2a:45:d1:95:91:36:6b:
9c:1f:37:ca:ec:d3:10:74:3a:e7:93:15:2c:c2:54:
e2:b5:52:6f:b0:d8:0d:64:a6:e5:d9:ab:c4:72:69:
bc:eb:6a:f0:f9:1f:2a:82:81:1d:96:db:26:1b:bf:
fe:dc:44:6c:29:a0:47:7b:bb:55:3c:e5:0d:02:e3:
aa:f0:53:13:4a:10:78:0b:98:77:a6:d9:e2:8e:e1:
24:4e:95:b0:8e:3e:7c:c5:38:a4:f1:e3:0b:70:94:
f2:ad:6f:1f:31:e2:3f:f4:93:22:c9:27:fd:95:10:
ce:7a:10:c3:b6:70:a8:be:41:67:c9:83:58:e3:46:
2b:16:be:53:7d:fc:d1:d4:ea:43:d5:46:37:4f:7a:
2b:dc:ba:58:2c:22:37:cd:8e:05:fd:42:9d:95:01:
03:60:53:31:6c:be:79:29:6f:21:af:e3:db:2b:c9:
f2:5f:08:9e:48:00:d9:33:c7:59:d5:90:f5:a3:43:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9A:DF:92:D8:BB:EF:1B:BB:2C:EB:13:2C:15:AD:32:59:FD:85:72
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cd:12:f9:2a:9a:bb:51:d9:44:e6:41:d2:7f:0e:c7:09:a3:
b7:c3:a3:3d:eb:06:d0:56:48:c1:cc:10:2b:46:88:c6:d4:61:
29:d0:8a:6c:f4:5e:41:6d:35:09:45:99:4d:a7:87:28:19:62:
c4:46:89:fe:ce:b8:bd:0f:14:5b:53:a6:51:a1:29:04:e0:32:
7e:45:ef:66:e7:05:9c:35:74:ba:c1:8e:46:72:f7:86:50:8c:
37:1c:ac:d3:04:82:12:c8:33:ab:48:31:da:1f:ef:4d:ac:3b:
4d:6f:6f:94:cc:5e:58:0a:a9:4b:ed:9b:6f:45:b9:5c:ef:2b:
13:ec:7f:58:74:45:2f:50:ce:f7:3a:b4:d1:03:ad:a7:31:1c:
60:59:56:0b:94:9b:cd:0d:ef:a7:ce:d4:41:bc:67:f0:b5:33:
1b:b9:f4:c7:24:58:22:4f:ef:46:23:7b:d8:bf:ed:dc:70:13:
f2:a4:0e:ae:1d:f6:2f:85:84:e0:20:7a:88:d2:8d:42:bb:33:
36:ce:51:64:fa:15:93:df:56:80:8a:0a:f0:48:4b:d6:c4:62:
6a:8e:61:68:ed:f7:3b:e2:8e:35:9c:a8:35:f0:c2:89:3f:04:
5f:dc:83:91:1e:e3:a3:76:f5:b4:72:b2:c2:ac:d6:d1:97:93:
a4:d3:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:00:38 2026 by rpki-client