Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
File: ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft (raw, json)
Hash identifier: EMgeHMp+35i0N8nQA99Pb+OrtIaFs8KyxH9fnolNtC4=
Subject key identifier: 42:1C:F9:E1:76:90:6A:C2:6F:44:17:2C:79:36:7A:41:AF:B3:9F:C1
Authority key identifier: 72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2
Certificate issuer: /CN=724f14189ab7105620375daf9baa814d6dd937a2
Certificate serial: 019D2AE01AF27F9B9AA13729B457E2398CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
Manifest number: 09F6
Signing time: Thu 26 Mar 2026 16:00:23 +0000
Manifest this update: Thu 26 Mar 2026 16:00:23 +0000
Manifest next update: Fri 27 Mar 2026 16:00:23 +0000
Files and hashes: 1: ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl (hash: 5wOUjGXqFlbP5Pn0LSyu+BCvg2u/XZNXFTriNrCbV/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:1a:f2:7f:9b:9a:a1:37:29:b4:57:e2:39:8c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724f14189ab7105620375daf9baa814d6dd937a2
Validity
Not Before: Mar 26 16:00:23 2026 GMT
Not After : Mar 27 16:00:23 2026 GMT
Subject: CN=421cf9e176906ac26f44172c79367a41afb39fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:0e:51:65:6d:1d:62:0c:b6:69:d1:df:56:
05:57:03:1c:1d:63:12:2a:ce:e3:60:ac:45:f7:04:
60:bc:22:4b:e7:b4:f4:14:01:63:13:45:f4:b4:42:
e6:03:75:25:6f:4e:c7:c1:1f:b9:2c:8c:09:f3:ef:
23:f4:20:dc:09:c2:d6:d7:3b:f8:32:06:9e:30:58:
55:97:7f:d5:45:42:86:58:c2:d8:82:92:3e:7b:ec:
07:a4:17:31:36:f1:87:cc:69:3d:fa:06:98:42:28:
85:91:5c:04:ae:fd:89:4f:66:aa:5d:15:b9:d3:e6:
00:e8:fd:74:f0:1a:a0:0b:75:25:fd:5d:66:9e:7c:
70:a7:0b:8f:19:b7:74:a0:ae:c4:58:5a:a4:6a:14:
03:6e:0a:c6:65:7d:6a:7e:98:b9:b0:ca:04:a2:51:
4a:99:0f:99:61:38:03:89:a6:5b:9b:07:7c:1e:b4:
05:00:35:56:21:ac:79:a8:73:1f:cc:72:ef:58:7c:
08:71:eb:95:9d:07:2d:b9:7a:17:3e:b2:23:09:28:
1b:58:42:8c:a5:e2:45:4b:cd:ed:d9:f8:4a:c6:e0:
29:cc:2e:eb:99:bb:dd:f7:f8:66:4a:60:62:79:0d:
f2:11:f0:bf:87:c3:75:ee:4d:85:78:e5:84:25:81:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1C:F9:E1:76:90:6A:C2:6F:44:17:2C:79:36:7A:41:AF:B3:9F:C1
X509v3 Authority Key Identifier:
keyid:72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:97:e9:a2:2b:d7:55:5b:16:0d:cc:2a:97:b5:a8:46:9a:da:
43:9a:72:c3:91:41:4a:7c:94:df:73:72:47:b7:cc:5d:91:f5:
1b:d0:54:f8:d3:ec:06:b3:5f:97:3b:9f:74:c2:80:e3:89:4e:
5f:4d:e0:ea:39:ea:59:5c:5a:22:c7:8b:7b:a2:ac:b6:0e:65:
78:e9:80:a9:c7:85:af:bb:af:45:47:56:44:df:58:88:9a:ee:
81:81:11:52:f3:4b:ca:72:82:37:14:04:3c:50:07:95:5f:ab:
69:9c:f3:e4:a3:8a:38:d4:a0:b6:87:e8:2d:53:44:e0:5f:31:
cd:ff:ab:28:89:9e:52:74:e7:b1:bc:22:7e:ac:85:eb:78:7b:
69:50:6c:15:d2:fa:e3:f4:98:a3:d1:7d:30:cc:b9:fc:c9:d9:
c8:74:a0:ee:4c:ac:b2:34:c0:b2:44:a6:7a:6b:4c:f0:cf:4c:
29:a8:35:56:8b:80:c9:4f:ad:40:7e:a2:12:17:54:a8:b6:73:
3c:5b:5b:c5:57:ca:ab:06:c0:cb:f3:3c:85:bc:3c:7a:20:9e:
cc:17:62:e4:d0:01:4f:8e:67:09:c8:35:20:b0:9e:7e:d7:47:
c9:61:61:83:72:e3:bf:45:66:f6:87:6e:00:b1:e3:e4:75:0d:
2b:2b:a5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:10:02 2026 by rpki-client