Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier: vgdcjyaxZImhUmL2vF4BS/w1XUjMasDpbeNu1y+OAdI=
Subject key identifier: 4E:CB:6B:F1:18:68:7C:45:D6:5F:12:DD:9B:E8:5C:8E:EB:DB:C1:9B
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial: 019F8F1017318C89036A0C32A986AA6A358C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number: 07D4
Signing time: Thu 23 Jul 2026 13:00:24 +0000
Manifest this update: Thu 23 Jul 2026 13:00:24 +0000
Manifest next update: Fri 24 Jul 2026 13:00:24 +0000
Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: pb3oBcJUog9VS2a2tNjqjxAPQ+lHotirprlFZYfk358=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:17:31:8c:89:03:6a:0c:32:a9:86:aa:6a:35:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Validity
Not Before: Jul 23 13:00:24 2026 GMT
Not After : Jul 24 13:00:24 2026 GMT
Subject: CN=4ecb6bf118687c45d65f12dd9be85c8eebdbc19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:5d:3d:1f:c9:fd:2c:b0:30:d5:d2:e4:63:
38:d3:79:94:89:77:d1:7e:01:0c:4b:e5:5f:98:b7:
67:fb:1b:d0:49:71:e3:1c:9a:1d:ce:37:10:b3:f1:
9b:57:65:2c:49:ba:45:81:01:42:33:c4:07:dd:b0:
f5:50:e1:53:2d:de:8d:ec:f3:c0:78:c2:6d:96:8c:
6b:91:b8:c8:63:4f:41:e1:f0:3c:c6:7d:43:1b:d3:
88:04:70:52:15:0c:c1:48:e9:b5:a4:a7:ef:74:08:
fe:a6:d5:51:9e:1d:02:b2:d9:9b:9d:4c:40:37:df:
c3:3a:44:81:84:bf:e8:88:e4:77:62:eb:5f:93:9a:
59:0b:f1:a3:5d:d8:19:3f:c6:05:e7:da:39:c8:71:
2e:69:06:ad:ee:63:43:d7:4a:52:98:bb:e1:5c:6d:
ff:3d:b5:6b:36:c9:62:71:51:46:72:6c:ec:f9:75:
e3:a9:49:52:7f:be:16:40:34:b3:7c:8d:a6:54:da:
df:4a:76:d0:d0:d6:aa:d7:37:64:c9:b0:e6:02:59:
7f:38:7e:d5:80:6d:a9:3f:09:61:98:45:e0:9a:e3:
be:65:eb:b3:1e:0c:13:ab:45:45:cb:1b:08:b0:7a:
b9:cd:0b:a7:d0:0b:98:16:7a:37:fe:59:95:ac:c2:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CB:6B:F1:18:68:7C:45:D6:5F:12:DD:9B:E8:5C:8E:EB:DB:C1:9B
X509v3 Authority Key Identifier:
keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:60:ad:0f:a6:5d:52:c4:26:64:9d:81:28:66:6f:d5:07:4b:
b7:ae:90:7a:1c:d8:09:17:1a:ef:f5:1e:23:ef:c4:e2:f2:41:
80:99:1e:98:03:c3:a3:69:b5:00:db:01:cf:d6:5d:5b:a3:47:
29:79:54:23:16:cb:9d:1b:cd:83:23:a5:33:9b:5f:2b:ce:6c:
7f:4c:3d:10:b9:d5:59:87:3a:82:30:7f:3b:f2:79:a4:3b:6a:
57:44:6b:0c:ef:90:32:ac:f1:b6:5b:25:a2:97:ed:68:9a:86:
27:22:ba:1d:17:57:df:77:50:a6:bd:94:ae:ca:3d:d6:fd:8e:
ec:6a:20:20:3d:d6:58:7c:68:25:ab:55:dc:68:bf:1d:ff:cb:
6e:18:60:4d:4f:d2:7c:56:1f:76:90:b5:11:56:62:55:6a:a6:
6c:f7:d1:de:34:92:15:b7:8f:3f:b9:f5:aa:a9:2e:3b:65:9c:
47:4f:da:39:08:01:8a:f2:63:43:9a:44:ab:e1:9d:ee:fb:0c:
a0:92:b6:52:bd:9b:94:41:19:1d:ff:56:e5:46:60:8e:b4:d8:
0e:fe:71:69:65:62:f2:37:ec:49:69:56:01:b8:a9:79:41:cc:
9a:07:ab:1e:36:03:ce:e1:03:4f:4a:20:ee:97:7c:f7:ad:02:
4f:dc:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:59:32 2026 by rpki-client