Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: /9PXzup7po5paVhKRupUMej2OUVnbacs1eU2DUJtyJQ=
Subject key identifier: 47:E9:3D:FF:DD:7F:7E:79:DD:E6:97:10:F6:DE:61:AA:98:93:49:60
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 01A0E399CB49A3EF14CFF4D5B76B3F37182C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 075A
Signing time: Sun 27 Sep 2026 16:01:42 +0000
Manifest this update: Sun 27 Sep 2026 16:01:42 +0000
Manifest next update: Mon 28 Sep 2026 16:01:42 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: HpgO2fZ6Rfj8SYYnnZkECn6SY7t/ZtHdRDZMBge3jA4=)
2: LNCbK6oFpSX7VrazVm0NKmkZQwE.roa (hash: 8I25wabiQRp4293K2/OnqVhvqWH+P1esMFI9OKX+Mkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:cb:49:a3:ef:14:cf:f4:d5:b7:6b:3f:37:18:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Sep 27 16:01:42 2026 GMT
Not After : Sep 28 16:01:42 2026 GMT
Subject: CN=47e93dffdd7f7e79dde69710f6de61aa98934960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:a3:b3:49:a6:d1:bf:fc:da:81:12:3b:41:
e5:bb:1b:af:dc:7b:63:91:40:ee:92:12:4b:75:7a:
e9:74:ac:42:14:f5:27:3a:57:3a:cb:0a:4d:5f:24:
36:cd:fc:87:55:98:42:6b:05:ef:73:85:cf:03:f0:
d3:05:1f:55:c7:cb:db:fe:fb:a8:ce:58:e8:06:16:
12:2d:78:ed:e7:3c:b1:08:fb:b0:48:6f:47:fa:dd:
b6:bc:31:6d:86:df:54:7d:41:54:9b:06:83:33:a9:
17:83:bb:1b:db:50:6f:bf:c1:f4:71:75:63:96:f1:
3e:db:23:3b:fd:a4:52:3b:0d:8e:c8:32:8d:5f:05:
1e:07:de:27:fd:25:94:b3:61:1a:23:21:99:98:e3:
4a:84:79:ea:aa:de:64:68:d9:4e:1a:84:7c:69:42:
63:ab:a3:8a:66:92:4e:a8:cc:04:c0:0e:64:55:7d:
c1:17:74:80:ab:e3:b8:a1:a5:1d:44:5c:70:fb:af:
04:a7:2e:9c:3f:e2:d4:88:e3:12:b1:8f:13:0b:df:
d1:02:d6:4f:7c:d5:b6:92:33:5c:a3:f2:c1:00:8a:
e1:26:e2:ee:a1:cf:f3:73:c5:5b:e9:62:1e:97:84:
19:ac:c5:a8:82:ec:8d:5f:fb:a9:3e:d6:10:6e:9f:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E9:3D:FF:DD:7F:7E:79:DD:E6:97:10:F6:DE:61:AA:98:93:49:60
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cd:72:da:95:d2:3a:fe:0b:e4:4d:27:bc:34:29:3e:09:30:
63:31:fd:b0:38:3c:78:2a:f6:1c:d7:85:09:8f:c1:76:a2:ab:
8f:04:e6:10:b3:e6:5f:e4:18:31:9f:7d:e8:7e:ef:a1:07:19:
21:37:d8:34:6d:e1:26:41:f0:69:42:32:55:1e:75:9a:b8:17:
4e:ff:9e:f6:b7:57:16:35:a7:3a:ab:0d:2e:d1:f5:da:76:5e:
bd:f9:09:15:b0:13:d2:ec:df:c6:5b:77:9b:1d:09:bd:6b:d1:
ee:69:eb:b3:99:4c:6e:1a:82:46:a2:7d:2c:7c:43:08:f3:a7:
11:60:ff:27:48:73:32:c0:41:19:47:d5:37:1f:c2:41:25:e8:
d1:1b:2c:9c:6d:5a:88:23:3f:1d:f8:9c:43:73:c1:b9:d8:f2:
a1:0b:80:90:ec:52:68:65:e1:5e:de:77:ca:32:41:3f:f3:f8:
a2:20:47:77:4e:cb:5b:29:10:e5:c4:86:ad:4c:4f:b7:53:c0:
08:fb:ee:02:4f:cf:d8:c8:20:31:89:a8:96:24:79:37:0b:44:
17:1d:b9:10:66:cd:da:6c:8b:e6:b1:74:24:63:5f:52:c1:61:
9e:7e:cd:0f:ed:a2:40:35:4a:4b:7a:72:f2:ad:38:7a:b9:5f:
9d:82:45:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:11:40 2026 by rpki-client