Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: DJeYcquXgHDXIlTL+ZIwy2Zu9QGAKK2vIYXIilMAnHo=
Subject key identifier: 36:F5:3F:9A:26:80:0C:AA:27:63:AF:67:88:94:D1:A7:C9:F7:A3:D7
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 019F8FB5A5D89E2E8D2F57A43C1E0311E9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 06AA
Signing time: Thu 23 Jul 2026 16:01:13 +0000
Manifest this update: Thu 23 Jul 2026 16:01:13 +0000
Manifest next update: Fri 24 Jul 2026 16:01:13 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: oEUlcY/sB/LKWTxxM+lRKLpxjpXnBCnwDYEJDi3oIgQ=)
2: LNCbK6oFpSX7VrazVm0NKmkZQwE.roa (hash: 8I25wabiQRp4293K2/OnqVhvqWH+P1esMFI9OKX+Mkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:a5:d8:9e:2e:8d:2f:57:a4:3c:1e:03:11:e9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Jul 23 16:01:13 2026 GMT
Not After : Jul 24 16:01:13 2026 GMT
Subject: CN=36f53f9a26800caa2763af678894d1a7c9f7a3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:3f:4e:77:e1:15:3f:df:09:ce:26:1e:dd:
74:f1:5c:2e:ea:ee:69:b7:ee:65:fd:e5:6c:1d:24:
2c:a6:6e:48:dc:e7:7a:ff:e5:f9:c0:cf:23:71:ed:
15:3a:de:81:05:0e:2c:c1:04:a9:5a:d1:89:ad:cd:
94:fd:17:bf:59:6c:05:87:28:7c:44:8a:92:33:d4:
f0:70:a6:b6:26:83:5e:28:ac:4c:f0:68:6c:48:27:
f6:35:35:aa:cc:3a:c7:f1:0d:9d:c1:ae:b8:84:5f:
72:2b:c0:0f:ef:c2:68:07:2b:69:a4:e9:5f:8b:90:
1e:e9:e1:26:ba:c1:5f:8d:8f:c7:2c:af:27:b4:43:
d9:16:c6:37:33:91:cd:f8:79:cf:3f:33:6e:ca:2e:
31:42:1e:d0:2d:aa:c5:6c:47:bf:a3:00:50:3f:e1:
bf:41:b1:32:ff:b4:6d:b0:4e:66:aa:77:13:5f:b8:
23:de:80:7c:0f:b3:2c:39:d0:1e:93:1b:94:63:6d:
d6:70:39:c5:8e:11:04:38:6f:a7:f0:86:a4:90:61:
6a:5b:9e:09:ad:4e:fc:6c:3d:b1:95:42:ea:cb:50:
36:e2:95:cf:c1:02:54:ce:98:ab:d5:66:51:00:e9:
ed:f8:0b:0d:c3:25:9e:8e:cb:cf:d7:e8:28:18:82:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F5:3F:9A:26:80:0C:AA:27:63:AF:67:88:94:D1:A7:C9:F7:A3:D7
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f0:7f:92:08:65:bd:4b:01:c9:48:32:05:7c:54:16:be:8b:
62:14:e3:0f:49:f1:99:e2:3e:aa:a6:6e:de:c0:e2:93:3d:6f:
21:77:74:73:01:da:81:4c:a2:ae:bc:18:ff:5b:38:b1:59:a5:
01:13:2c:8f:48:f6:57:a0:67:33:eb:51:10:ac:be:81:07:6a:
51:21:3e:45:a7:32:f3:38:ed:4b:84:ed:b1:7a:ab:fb:7d:98:
9b:b8:a2:38:32:ca:25:9b:89:0f:c0:76:d9:eb:7a:f0:1a:65:
90:36:49:a7:52:e4:97:ea:dc:d0:e1:24:67:d6:00:8d:42:d5:
21:d5:94:e8:41:3b:18:46:04:7e:b5:34:c2:04:9e:da:5d:89:
eb:65:7e:04:50:88:16:55:27:5e:cb:76:71:b0:15:56:89:12:
a5:92:a3:98:a5:d7:fb:03:1f:d0:17:8f:9b:2c:d2:76:f6:46:
44:8f:fe:c5:8f:98:0b:9d:a3:16:63:84:df:db:3f:9a:2b:34:
19:a6:3c:ce:e1:e3:b9:f9:cb:ff:41:c6:c6:07:d4:66:e6:21:
cf:ba:e6:bd:ed:a5:60:2a:ee:63:78:35:04:16:41:b7:0a:6c:
14:ce:51:b1:a7:be:27:62:ee:59:b3:e7:77:6f:26:27:e6:71:
73:27:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:52:55 2026 by rpki-client