Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: AoohwDbX6yIx4xvK2zF3efw7+kz7ZAcFKJ/C6zc/bec=
Subject key identifier: ED:56:39:85:76:BC:6B:05:98:40:0E:BB:23:0C:82:4D:7D:E4:9E:45
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 01A15A429566E947DD5DD0001819ED5B2F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1AB6
Signing time: Tue 20 Oct 2026 17:01:15 +0000
Manifest this update: Tue 20 Oct 2026 17:01:15 +0000
Manifest next update: Wed 21 Oct 2026 17:01:15 +0000
Files and hashes: 1: Uo567tyscKKQ3DowdVwrO2rgRnk.roa (hash: 8NiKn7om8yJNgxOj/PU+Jf1HsBq9mHLW84RDCIVHBtY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: PMpHLjAewK/9tmyEqWlLt6wGNtdZ4Sl63reQyRyRZlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:42:95:66:e9:47:dd:5d:d0:00:18:19:ed:5b:2f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Oct 20 17:01:15 2026 GMT
Not After : Oct 21 17:01:15 2026 GMT
Subject: CN=ed56398576bc6b0598400ebb230c824d7de49e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:17:90:41:bf:66:62:06:de:a6:17:5a:78:
8e:29:97:95:de:6f:69:66:d7:b7:8f:a3:f7:ac:ce:
fb:3c:f5:84:6b:ce:58:08:c9:b0:62:86:9e:c0:0b:
83:5d:31:8a:6e:b4:e6:e2:07:d9:05:f3:cf:5e:e9:
e0:a3:fc:61:74:4e:c4:b0:1c:e9:dc:dc:73:09:d8:
95:09:47:11:e1:89:bb:3c:7a:1a:fa:37:a9:3a:d7:
24:a7:89:0a:b3:92:f9:eb:ed:e7:e8:a2:ab:f5:2d:
8f:4b:eb:3e:74:36:45:93:01:d9:73:b1:fa:fb:a6:
08:14:52:d2:55:2a:a6:13:6d:f0:a2:41:37:b8:ae:
d5:f2:3b:33:15:82:9a:e0:61:9e:38:91:4a:01:2f:
85:68:25:85:7c:33:13:06:68:c5:42:00:32:63:ef:
6c:96:bf:41:47:09:a9:4c:ff:b6:24:d4:b9:b9:12:
21:bf:fa:14:bd:b3:b0:62:6f:a2:76:1f:72:6c:83:
e7:7b:42:3b:35:2d:f3:8d:19:5c:c4:01:6e:53:14:
9d:d2:f9:65:72:4a:2a:e3:fe:d8:86:44:ab:f6:cf:
de:9d:05:32:2f:db:e7:63:9e:1c:01:05:05:92:9a:
d9:43:9a:cf:0f:0d:f6:a7:cb:f5:79:17:63:36:b0:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:56:39:85:76:BC:6B:05:98:40:0E:BB:23:0C:82:4D:7D:E4:9E:45
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:92:9e:8d:e1:f5:73:db:68:e8:92:c5:b6:10:cd:b3:87:76:
68:d1:cf:3e:11:a0:0c:d9:c2:28:6a:86:71:4c:90:33:53:cb:
85:72:07:57:4b:0c:11:86:bc:5c:be:c5:50:33:17:c0:e2:f4:
26:f9:ff:86:63:8d:36:4c:48:62:02:45:ee:9d:b8:6c:20:13:
23:f1:c1:fd:44:93:00:71:bd:29:6c:bb:84:f4:68:a4:47:d5:
85:ca:36:1b:94:eb:30:d8:42:6d:a3:f7:51:60:71:16:61:96:
43:f2:41:99:a6:ba:a0:f5:03:b7:66:1b:cf:34:23:68:9d:91:
5a:87:ee:71:b6:a1:c6:02:c0:44:1c:ef:99:4c:fa:1a:66:8e:
91:8e:32:91:64:b4:09:87:d5:32:50:67:17:88:1e:49:4b:85:
d6:6f:39:b1:87:ce:a6:e4:1b:77:cb:7f:00:4f:e0:2b:26:93:
ce:bb:d1:48:53:f6:22:f7:80:d2:5e:70:f1:fe:6b:79:8b:c1:
f1:b0:36:bf:98:de:22:d6:45:bf:93:2e:9c:bf:0d:17:0a:4d:
68:57:e4:f5:3f:29:6f:89:6b:5e:0a:61:69:3e:a9:b3:3c:91:
76:53:e6:ae:d2:41:60:92:4c:43:87:c9:d8:10:a6:2c:de:37:
96:38:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:46:34 2026 by rpki-client