Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: I4DMwe7ORH/BaTupIaSMi9b7vke/k7bxMO5ERqWxbKQ=
Subject key identifier: 42:1F:7C:A7:19:D1:31:B1:D4:D1:E6:FC:77:51:6E:AB:11:D8:79:39
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 019D382DF0A5657DD1C7EB7C047A60B01BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 0835
Signing time: Sun 29 Mar 2026 06:00:27 +0000
Manifest this update: Sun 29 Mar 2026 06:00:27 +0000
Manifest next update: Mon 30 Mar 2026 06:00:27 +0000
Files and hashes: 1: 1_eUFgYnTIIatrHYB64qjYPc9Ig.roa (hash: NMRBaQpcx1MsD9VzDXcQnY8lC2ajEbO2jPjwR8rHylI=)
2: KyNP6vrFF4mQbiJnNsNkIhVm41U.roa (hash: /VyDLYQxGbJ9Gukqe3FlEbzCjBJNPed1JowFzj8+6NQ=)
3: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: vMFuMIvLRk5rpEbObx5G+HVZV0/d9AG/xM8xZFUSr0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f0:a5:65:7d:d1:c7:eb:7c:04:7a:60:b0:1b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Mar 29 06:00:27 2026 GMT
Not After : Mar 30 06:00:27 2026 GMT
Subject: CN=421f7ca719d131b1d4d1e6fc77516eab11d87939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:35:a6:2f:33:c7:6b:9f:83:24:c4:35:bc:
2e:8d:d0:87:ed:a6:93:32:ff:97:66:3e:b3:86:40:
35:d6:48:6d:7e:a5:c6:45:34:1e:76:1b:df:2c:23:
cd:0e:4c:94:f9:37:fc:ec:d2:1e:c3:93:42:a0:ec:
78:89:b9:a2:c5:59:4f:72:26:c3:03:5f:14:04:89:
a7:00:0d:ab:15:80:41:f7:30:c1:f3:d9:06:0b:34:
f7:a7:b0:e8:d6:3e:76:d9:09:03:70:f3:b9:c3:50:
7a:5e:4d:87:ea:8b:b5:8c:6e:90:28:33:47:b1:cf:
20:89:bd:c4:12:e7:f4:f9:56:d6:f8:54:98:f3:3a:
fb:b7:a4:79:3b:f3:6e:cd:72:15:63:e4:a9:72:53:
07:5a:2f:09:37:0d:91:7d:bf:96:85:94:f6:f4:d0:
89:db:62:67:e9:da:b5:d2:87:96:ba:ac:86:7a:36:
b8:97:fb:57:15:43:f2:1f:7a:6a:36:fe:cf:b2:52:
56:1b:5a:b4:0b:ab:ad:2e:9e:81:92:77:db:23:41:
4f:6a:33:85:bc:75:bb:a9:99:90:1e:9a:83:d9:2e:
cd:71:a2:cd:20:7f:00:8f:0a:df:97:70:7c:ef:9b:
7d:55:96:2d:66:bf:dc:17:7b:fb:db:73:30:d5:f7:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:7C:A7:19:D1:31:B1:D4:D1:E6:FC:77:51:6E:AB:11:D8:79:39
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a0:67:fc:0a:a4:5d:98:04:ce:d6:4e:a2:22:58:4d:1c:b7:
09:c8:89:69:2e:0e:d9:c2:fe:94:90:a4:5d:dc:72:db:12:fa:
23:e1:36:ef:f3:8f:16:e0:bd:a5:51:f7:7f:ac:7c:3d:7f:cf:
04:46:b9:a6:ca:0b:9b:e7:b7:0f:00:ba:81:02:b4:4b:d7:a0:
8f:36:b5:27:4e:56:c0:7c:85:7d:7f:9e:f4:93:d6:51:b3:81:
e7:d0:4d:a2:d4:24:16:3d:26:91:3f:4d:26:a9:86:86:c2:ba:
e2:be:0b:c8:db:27:9d:d2:a5:f9:65:99:b9:4a:21:51:df:01:
93:e9:10:f3:ef:1e:80:d4:b0:e9:4f:54:bc:4f:0e:0d:8f:0a:
0f:fc:2f:ba:6c:37:5a:6b:27:f1:aa:c9:6a:99:79:6c:f0:05:
46:c0:45:91:5b:9c:e2:24:3a:89:be:60:a7:85:eb:1f:c2:41:
db:00:60:3e:2b:d7:3c:a5:93:7d:71:34:cd:c0:cf:b4:02:2c:
e0:09:81:ea:b6:2f:95:ba:95:c2:c7:f7:a0:9f:8d:53:c0:5a:
08:d5:66:21:5b:92:c5:8a:d0:a5:f8:88:50:4f:26:9d:3c:98:
30:52:71:0c:b9:f1:05:75:81:e7:16:3b:91:4a:3b:5b:0d:8b:
58:46:0d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:40 2026 by rpki-client