Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: uZIHC1+BnSF52qyp/jCtc6VRxjuCVtPxhnR6N62tYlc=
Subject key identifier: 62:1E:64:37:5B:42:39:F6:5D:46:86:0E:4F:91:AA:72:B3:81:15:18
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019D265F84461DF3FA55A95A82FD6A61227B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:27 +0000
Manifest this update: Wed 25 Mar 2026 19:01:27 +0000
Manifest next update: Thu 26 Mar 2026 19:01:27 +0000
Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=)
2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: Y1asLX2V8kfjaBfZXUTgYHP5UG7i9eaDuGxXFYkSJ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:84:46:1d:f3:fa:55:a9:5a:82:fd:6a:61:22:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Mar 25 19:01:27 2026 GMT
Not After : Mar 26 19:01:27 2026 GMT
Subject: CN=621e64375b4239f65d46860e4f91aa72b3811518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:75:ef:b1:c7:0f:b2:43:af:ce:83:04:4e:fc:
7f:c7:49:b2:8e:ff:f1:69:d4:1e:8c:a5:50:d4:ff:
38:06:89:14:4d:61:0f:63:84:32:34:28:be:18:4c:
76:cc:67:f2:35:06:6d:ab:78:a9:a5:2f:4d:8d:26:
d8:f9:b9:6c:47:55:c5:8e:b6:0e:17:f0:f7:58:55:
57:64:06:13:fe:87:d8:b7:e6:73:f2:9b:2e:b5:db:
59:7c:c4:00:37:68:7f:ac:9d:55:00:59:67:0b:31:
e2:f5:5f:75:3f:12:4d:ca:ea:06:74:53:c0:05:d2:
33:73:02:8d:45:b0:75:99:81:10:c4:90:8b:51:47:
c4:50:fc:87:a9:6c:53:fc:a8:1c:e0:0e:ee:36:cd:
d9:34:45:f3:ee:1a:b4:4d:73:be:52:1b:78:27:78:
d9:82:d8:1d:e6:4b:dc:ee:3f:f4:03:50:52:2f:88:
95:a3:72:eb:75:05:93:10:ea:c6:aa:8c:86:5c:a9:
a6:c6:d3:d7:80:57:c9:a9:c4:47:e2:c7:62:c8:74:
9c:bf:70:c2:22:da:c1:43:22:1c:6e:e5:9a:61:22:
3f:e2:f3:11:62:7c:1f:04:9d:fc:81:db:93:5b:a7:
e4:7f:a6:b0:d7:1c:27:a0:b0:e3:be:80:f8:51:19:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1E:64:37:5B:42:39:F6:5D:46:86:0E:4F:91:AA:72:B3:81:15:18
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2f:98:70:d4:4a:92:b8:b2:0c:04:ee:66:f6:10:5d:7f:c9:
da:a6:1f:1e:0a:79:6b:77:55:ba:25:ff:26:dd:5e:0f:72:2a:
2b:ff:6a:c8:9a:14:9b:c0:4f:46:46:de:16:2f:c4:bb:03:f7:
cc:51:83:25:87:8b:2a:b6:ba:f8:7c:e3:90:47:72:73:62:72:
72:45:7e:2a:e0:4f:28:cf:81:40:b1:8d:b8:81:2d:59:bd:ce:
82:3b:39:d0:d6:57:30:f9:2c:56:f4:fd:fb:c8:8c:2d:bf:f2:
c2:ef:a6:58:5b:ca:83:aa:d8:66:f1:7a:e3:00:10:3a:67:99:
62:b7:d8:8c:11:62:16:9b:fd:7a:a1:25:f5:bd:4d:67:ba:5c:
a0:d7:b2:3b:4e:00:76:5c:e9:0e:92:85:d8:43:8e:53:ae:be:
be:50:b6:a5:26:51:77:51:00:0b:d6:e3:f4:54:78:ac:ca:86:
44:e2:b4:ac:0b:0e:8b:c2:d2:8b:ad:8f:7d:b8:e6:9b:f5:ad:
9a:fd:fc:cb:25:68:7c:2b:3b:6e:73:c4:43:28:f3:44:5a:ed:
8b:24:e8:88:fd:f7:1a:9b:9a:e8:1a:96:1a:28:75:52:ac:92:
45:a6:ac:55:25:2a:fd:cc:85:e7:0a:6a:d4:5a:64:f0:42:20:
84:95:fc:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX4RGHfP6Valagv1qYSJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGJkMWQzMGY3MjM1Y2Q3MTczOWMwNDIzMTBkYzI2MDgw
NzM4ZjYwHhcNMjYwMzI1MTkwMTI3WhcNMjYwMzI2MTkwMTI3WjAzMTEwLwYDVQQD
Eyg2MjFlNjQzNzViNDIzOWY2NWQ0Njg2MGU0ZjkxYWE3MmIzODExNTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/HXvsccPskOvzoMETvx/x0myjv/x
adQejKVQ1P84BokUTWEPY4QyNCi+GEx2zGfyNQZtq3ippS9NjSbY+blsR1XFjrYO
F/D3WFVXZAYT/ofYt+Zz8psutdtZfMQAN2h/rJ1VAFlnCzHi9V91PxJNyuoGdFPA
BdIzcwKNRbB1mYEQxJCLUUfEUPyHqWxT/Kgc4A7uNs3ZNEXz7hq0TXO+Uht4J3jZ
gtgd5kvc7j/0A1BSL4iVo3LrdQWTEOrGqoyGXKmmxtPXgFfJqcRH4sdiyHScv3DC
ItrBQyIcbuWaYSI/4vMRYnwfBJ38gduTW6fkf6aw1xwnoLDjvoD4URmVkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIeZDdbQjn2XUaGDk+RqnKzgRUYMB8GA1UdIwQY
MBaAFApL0dMPcjXNcXOcBCMQ3CYIBzj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEt
Mzg4NDQzZDVmMDBmLzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEtMzg4NDQzZDVmMDBm
LzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXy+YcNRK
kriyDATuZvYQXX/J2qYfHgp5a3dVuiX/Jt1eD3IqK/9qyJoUm8BPRkbeFi/EuwP3
zFGDJYeLKra6+HzjkEdyc2JyckV+KuBPKM+BQLGNuIEtWb3Ogjs50NZXMPksVvT9
+8iMLb/ywu+mWFvKg6rYZvF64wAQOmeZYrfYjBFiFpv9eqEl9b1NZ7pcoNeyO04A
dlzpDpKF2EOOU66+vlC2pSZRd1EAC9bj9FR4rMqGROK0rAsOi8LSi62Pfbjmm/Wt
mv38yyVofCs7bnPEQyjzRFrtiyToiP33Gpua6BqWGih1UqySRaasVSUq/cyF5wpq
1Fpk8EIghJX8DA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:26 2026 by rpki-client