Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/015d5c-f121-4121-ac7a-96cba617c414/1/Ckrz23RoMDzvuParnPCpaOvjC9U.mft
File: Ckrz23RoMDzvuParnPCpaOvjC9U.mft (raw, json)
Hash identifier: o2ejAJYK15EKHiUQs+WXBgm+DKBCKplRnZjF9y+ny6A=
Subject key identifier: CF:58:DB:66:49:2B:86:E1:EB:3D:7F:E3:7C:36:EA:6B:78:11:46:A3
Authority key identifier: 0A:4A:F3:DB:74:68:30:3C:EF:B8:F6:AB:9C:F0:A9:68:EB:E3:0B:D5
Certificate issuer: /CN=0a4af3db7468303cefb8f6ab9cf0a968ebe30bd5
Certificate serial: 01A0D6827165F48D1F9E1BEE1F97D2A0F3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ckrz23RoMDzvuParnPCpaOvjC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/015d5c-f121-4121-ac7a-96cba617c414/1/Ckrz23RoMDzvuParnPCpaOvjC9U.mft
Manifest number: 48
Signing time: Fri 25 Sep 2026 03:01:07 +0000
Manifest this update: Fri 25 Sep 2026 03:01:07 +0000
Manifest next update: Sat 26 Sep 2026 03:01:07 +0000
Files and hashes: 1: Ckrz23RoMDzvuParnPCpaOvjC9U.crl (hash: +HmFoKN/lC/hvIhMzuzlUYwAsv9IiHGQ7+SjsZ8NWpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/015d5c-f121-4121-ac7a-96cba617c414/1/Ckrz23RoMDzvuParnPCpaOvjC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/015d5c-f121-4121-ac7a-96cba617c414/1/Ckrz23RoMDzvuParnPCpaOvjC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ckrz23RoMDzvuParnPCpaOvjC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:71:65:f4:8d:1f:9e:1b:ee:1f:97:d2:a0:f3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4af3db7468303cefb8f6ab9cf0a968ebe30bd5
Validity
Not Before: Sep 25 03:01:07 2026 GMT
Not After : Sep 26 03:01:07 2026 GMT
Subject: CN=cf58db66492b86e1eb3d7fe37c36ea6b781146a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:71:97:1c:f7:d3:58:ae:f9:e7:cb:24:44:
10:ad:cc:24:d6:3f:83:9a:6b:d2:c5:ef:6f:d3:00:
5a:6b:9c:56:ce:54:11:a7:3e:ed:70:a5:b4:af:dd:
78:f4:8a:5e:21:93:b4:ef:fe:f9:d3:ce:bf:8b:41:
3f:d1:71:e1:5a:66:d6:02:10:c9:28:07:14:c8:0a:
7e:18:17:cc:1c:15:11:d1:1c:fd:dc:c3:5e:3c:07:
e6:cb:1b:b0:1f:97:48:69:0e:41:3e:17:74:ad:94:
3d:aa:ee:1b:01:8d:53:f1:8f:20:1f:38:4c:10:6f:
9f:6a:73:d3:f7:b5:2d:b8:b4:2c:67:9f:37:14:55:
92:2a:8d:50:e7:f0:01:26:3b:24:d6:66:8b:47:39:
5c:7c:93:ee:4b:ea:e1:7a:d4:4a:8b:ac:d8:29:9f:
d8:e5:23:41:ce:f5:fa:3b:88:90:b0:6b:ad:45:64:
46:af:dd:2b:d8:ac:f5:fd:e5:a2:c3:0b:2f:74:be:
5d:30:97:04:a2:d8:8c:30:1e:06:21:7f:a5:b7:c7:
72:80:85:30:2f:0d:bd:ee:11:ac:b3:51:cc:62:51:
24:95:7a:f7:6d:a0:f9:10:27:36:dc:05:61:f9:dc:
64:39:75:fb:27:23:80:9c:4e:0d:b6:fd:08:f9:fc:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:58:DB:66:49:2B:86:E1:EB:3D:7F:E3:7C:36:EA:6B:78:11:46:A3
X509v3 Authority Key Identifier:
keyid:0A:4A:F3:DB:74:68:30:3C:EF:B8:F6:AB:9C:F0:A9:68:EB:E3:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ckrz23RoMDzvuParnPCpaOvjC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/015d5c-f121-4121-ac7a-96cba617c414/1/Ckrz23RoMDzvuParnPCpaOvjC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/015d5c-f121-4121-ac7a-96cba617c414/1/Ckrz23RoMDzvuParnPCpaOvjC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9b:2a:1b:a7:1e:38:50:84:1e:47:b3:4a:ae:fe:29:2e:0e:
1f:62:1c:81:13:cc:4f:e2:dc:b8:cb:43:0d:01:2d:7f:96:90:
2e:d2:f9:c6:cf:af:de:77:58:5d:d7:3f:bb:2b:3c:dc:24:2a:
f0:26:e2:1a:d3:32:b7:f2:a3:30:5a:cb:82:fb:5d:09:cc:fc:
cc:e5:64:1f:04:ae:90:43:14:14:08:3f:a4:66:7a:d9:99:cc:
c9:28:e4:1d:f5:e7:97:c0:5a:9e:ae:38:56:ae:d5:d5:57:47:
46:c2:43:33:25:5c:db:f2:6a:fd:4d:b7:90:7e:f9:91:b1:95:
63:19:e4:92:ef:38:a9:f0:a4:98:52:60:71:7f:3e:a8:79:9c:
b6:0e:be:ba:99:12:3b:b7:9a:85:b0:45:e8:ad:77:38:77:94:
0b:34:32:38:92:0c:53:f5:44:0b:72:7b:51:77:bb:cc:d3:f0:
ee:dc:b5:2e:18:8d:d6:7f:75:5e:f8:cc:cc:a9:1c:05:9d:87:
10:10:2f:7c:af:10:7b:c7:fa:54:d5:e5:27:d7:a6:c5:94:74:
a3:20:66:c5:b7:e5:64:e5:45:34:56:36:80:c6:7e:24:83:4e:
10:f2:59:bf:25:49:90:5a:04:de:25:04:4d:46:89:d1:08:12:
3b:f1:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:55:45 2026 by rpki-client