Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier: NdPOHFrMQu6eXzuqF6A7h24kVPexeoRAhCWllCsBJkM=
Subject key identifier: 41:0F:E4:83:6A:C9:36:F0:2E:44:A3:20:74:EB:04:AB:3C:BA:5D:EC
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial: 019E2023D8A62F9ED624AF754D91677AA40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number: 0716
Signing time: Wed 13 May 2026 07:01:20 +0000
Manifest this update: Wed 13 May 2026 07:01:20 +0000
Manifest next update: Thu 14 May 2026 07:01:20 +0000
Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: dYl+7ExxbXVRGs4xUXoMX9bwQt5u5A0UsEn/e2u4Wsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:d8:a6:2f:9e:d6:24:af:75:4d:91:67:7a:a4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Validity
Not Before: May 13 07:01:20 2026 GMT
Not After : May 14 07:01:20 2026 GMT
Subject: CN=410fe4836ac936f02e44a32074eb04ab3cba5dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:02:89:3b:d1:7a:68:06:ac:83:e7:b4:a9:
ac:99:38:a7:26:f6:cd:42:23:73:65:5c:d7:bf:38:
8c:df:40:34:eb:c6:8f:c7:78:cd:e8:34:6c:00:7b:
e8:d8:cb:2a:e8:74:18:a0:f9:4b:24:83:92:57:20:
cb:34:48:54:19:bd:5f:8a:99:6b:a8:57:56:c9:c2:
54:8a:b0:06:86:0c:1f:a9:a2:9c:cb:11:a6:10:af:
d5:37:64:e9:cf:30:1a:80:5a:5a:d2:44:18:a9:5a:
4a:66:b9:b2:a4:39:6f:89:40:e3:73:3f:58:3f:c6:
7c:6e:3d:0a:9f:df:99:52:05:59:fb:f6:ae:20:b6:
30:d6:33:27:1b:03:be:d7:3f:56:24:b6:4c:b3:c3:
4e:5c:22:b0:e3:14:35:67:8e:92:c5:e7:19:76:87:
ad:8e:b3:93:4f:cd:20:9c:86:0b:e9:bf:8e:6c:6c:
c5:29:f8:51:38:b6:76:1d:54:07:9c:6d:5d:cb:77:
52:d0:f9:96:35:0d:5b:8e:6c:a7:a7:df:f5:c2:c5:
b8:f8:8c:d6:3f:4c:23:3d:c5:64:7f:58:76:bb:6e:
dc:cd:27:03:ab:eb:1f:bd:42:dc:32:6d:00:3b:6b:
f7:a2:27:a8:b0:9a:9c:06:5d:2a:c6:98:cd:57:91:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0F:E4:83:6A:C9:36:F0:2E:44:A3:20:74:EB:04:AB:3C:BA:5D:EC
X509v3 Authority Key Identifier:
keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b9:f1:60:a4:96:74:11:91:6b:1e:f2:43:8d:c7:51:f4:67:
9e:6d:d7:a9:2d:ba:34:8d:69:8d:92:d9:3c:1f:b1:be:73:c9:
a2:0b:24:2a:4c:92:5c:96:bb:c6:18:7d:29:c3:3e:05:7f:88:
36:e8:86:9e:e5:0e:91:f8:29:32:80:4c:c5:07:ad:0a:47:ae:
c6:a6:1e:ef:d2:ec:67:68:6c:b2:56:13:0e:9c:90:0d:7b:f2:
19:74:7b:d6:96:46:25:cc:c5:4e:dc:7d:78:2e:de:b5:5e:c9:
ca:1e:63:70:d6:93:13:6b:7b:79:a5:41:4d:e8:5f:4c:ea:aa:
23:ec:dd:8a:d1:16:f8:27:77:6e:cc:54:5a:b5:4f:19:5a:0f:
db:18:0a:01:31:9a:18:10:00:2e:78:13:c8:86:1a:f0:29:15:
c6:26:1a:01:78:28:26:ea:35:98:7d:8e:fa:04:37:66:2e:69:
82:56:6d:a1:e2:91:52:e1:ea:89:24:65:66:c5:82:e1:b5:a1:
da:ab:13:bd:23:a3:d2:57:c5:41:3c:fb:2c:f9:6d:22:88:47:
79:37:e9:b7:f9:8f:da:2e:20:e5:6e:4d:6f:ea:5e:5d:db:55:
b9:5c:a9:82:67:8e:ec:24:a8:f2:fe:87:c8:99:08:48:45:3b:
52:3a:46:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:09:50 2026 by rpki-client