Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier: UqhsExx7yNmno6PENP9g3ukxQ8Crh4yPEH2+0dVjnj0=
Subject key identifier: 9E:92:F5:FD:DA:E6:56:BD:33:48:63:2A:C6:67:F3:1F:0F:44:9C:38
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial: 01A120C1217589B73222AC89AA76488B9223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number: 08A4
Signing time: Fri 09 Oct 2026 13:01:30 +0000
Manifest this update: Fri 09 Oct 2026 13:01:30 +0000
Manifest next update: Sat 10 Oct 2026 13:01:30 +0000
Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: nvyoMjemxlgmKkDwGScdOrObkfl+Fj+bD8GkmhptTN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c1:21:75:89:b7:32:22:ac:89:aa:76:48:8b:92:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Validity
Not Before: Oct 9 13:01:30 2026 GMT
Not After : Oct 10 13:01:30 2026 GMT
Subject: CN=9e92f5fddae656bd3348632ac667f31f0f449c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:4c:ab:ca:07:71:07:40:76:df:1c:9b:2e:
50:1b:22:f2:4a:e0:fd:29:e6:df:4c:5a:9c:16:98:
4b:39:5f:95:fb:1c:e7:5f:a5:35:61:8c:1a:1d:9b:
b5:cc:5e:dc:52:71:6b:68:bb:c2:0e:68:13:b1:c7:
5b:e4:4a:09:0b:1d:eb:eb:36:f1:88:62:75:32:ea:
44:25:cb:44:04:33:28:3a:d5:f1:b0:f0:a7:d5:1c:
02:ce:a9:10:f0:d5:06:09:69:bc:0a:18:7e:fa:48:
88:b0:60:5d:d5:8b:de:1f:ef:77:18:7a:39:af:92:
e6:bb:87:19:a2:3b:eb:fb:25:91:98:35:e7:d8:8e:
9a:29:2a:6f:55:f2:61:a3:c8:53:6b:e8:10:7e:73:
07:60:b6:2f:1c:e8:0f:38:18:95:93:7a:b9:22:59:
1a:e7:c7:84:4c:0e:1a:92:1e:1a:3c:91:b6:54:3d:
17:01:6e:37:a4:ea:bb:3c:85:5c:49:c0:15:cd:89:
89:7c:55:27:e5:c8:7f:62:06:4d:3f:a0:7a:b4:e7:
f1:3b:eb:cd:27:79:c5:bf:73:ca:cd:dc:83:85:26:
a7:ed:8c:7b:1c:af:42:93:0b:61:93:7e:f9:92:c1:
2c:ce:5b:59:96:cb:db:c7:0d:f9:14:11:2b:33:ae:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:92:F5:FD:DA:E6:56:BD:33:48:63:2A:C6:67:F3:1F:0F:44:9C:38
X509v3 Authority Key Identifier:
keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:12:f8:a6:c2:7a:22:d9:6f:f3:03:47:c0:4f:1e:70:95:7a:
f3:35:85:07:41:2a:13:6f:5c:40:c0:60:f0:36:02:71:4d:e1:
2c:1a:d4:20:8f:5a:fc:e9:00:3f:fd:ab:e8:41:56:08:6d:c0:
0f:70:55:d8:45:40:8c:38:36:e8:62:d1:02:47:f2:90:49:9c:
35:13:40:1c:8b:c8:b6:e7:61:34:c4:46:51:e3:cd:ed:65:b3:
8a:8f:ea:02:4f:c3:94:ef:6a:ee:b9:6f:53:91:f1:94:5c:21:
c2:0d:5d:e4:c2:05:1a:ce:b4:35:32:b4:db:de:d3:30:0c:22:
92:9e:a5:7d:c3:00:9b:66:46:fb:64:28:ad:b7:30:3d:46:81:
c9:41:c0:b1:ac:73:64:30:bf:ba:9a:f2:ab:ab:cb:a9:6a:bd:
96:57:e1:d4:18:5a:63:dd:d1:4b:23:3c:7f:bc:ab:c9:19:2c:
d9:e9:a8:6f:81:ed:6d:13:05:98:0c:57:d8:b9:5c:ca:30:64:
30:fd:eb:39:67:d8:56:4a:9f:e4:cd:5e:6d:eb:f6:ac:94:5a:
26:67:6f:da:a0:cf:c1:2f:f4:f0:ff:80:75:a2:52:cd:b7:c6:
e5:59:38:9a:ce:5c:bd:8b:a8:45:7b:2f:d5:fd:eb:3a:50:51:
cb:19:48:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEgwSF1ibcyIqyJqnZIi5IjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YThiOGZlMGM4ODVhNDVmMjQ4NTUyMzM0MmU5YmE4ZGM4
OWU2OGYwHhcNMjYxMDA5MTMwMTMwWhcNMjYxMDEwMTMwMTMwWjAzMTEwLwYDVQQD
Eyg5ZTkyZjVmZGRhZTY1NmJkMzM0ODYzMmFjNjY3ZjMxZjBmNDQ5YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxpMq8oHcQdAdt8cmy5QGyLySuD9
KebfTFqcFphLOV+V+xznX6U1YYwaHZu1zF7cUnFraLvCDmgTscdb5EoJCx3r6zbx
iGJ1MupEJctEBDMoOtXxsPCn1RwCzqkQ8NUGCWm8Chh++kiIsGBd1YveH+93GHo5
r5Lmu4cZojvr+yWRmDXn2I6aKSpvVfJho8hTa+gQfnMHYLYvHOgPOBiVk3q5Ilka
58eETA4akh4aPJG2VD0XAW43pOq7PIVcScAVzYmJfFUn5ch/YgZNP6B6tOfxO+vN
J3nFv3PKzdyDhSan7Yx7HK9Ckwthk375ksEszltZlsvbxw35FBErM67dEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6S9f3a5la9M0hjKsZn8x8PRJw4MB8GA1UdIwQY
MBaAFAiouP4MiFpF8khVIzQum6jcieaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tpNF9neUlXa1h5U0ZVak5DNmJxTnlKNW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mOGU1OTktYjU3YS00NGEyLTljMzUt
OWVlNTM0NDJjM2U5LzEvQ0tpNF9neUlXa1h5U0ZVak5DNmJxTnlKNW84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mOGU1OTktYjU3YS00NGEyLTljMzUtOWVlNTM0NDJjM2U5
LzEvQ0tpNF9neUlXa1h5U0ZVak5DNmJxTnlKNW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBL4psJ6
Itlv8wNHwE8ecJV68zWFB0EqE29cQMBg8DYCcU3hLBrUII9a/OkAP/2r6EFWCG3A
D3BV2EVAjDg26GLRAkfykEmcNRNAHIvItudhNMRGUePN7WWzio/qAk/DlO9q7rlv
U5HxlFwhwg1d5MIFGs60NTK0297TMAwikp6lfcMAm2ZG+2QorbcwPUaByUHAsaxz
ZDC/upryq6vLqWq9llfh1BhaY93RSyM8f7yryRks2emob4HtbRMFmAxX2LlcyjBk
MP3rOWfYVkqf5M1ebev2rJRaJmdv2qDPwS/08P+AdaJSzbfG5Vk4ms5cvYuoRXsv
1f3rOlBRyxlIKw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 23:08:06 2026 by rpki-client