Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: 4/ULH+cccqOWRq8aPUpSNnOfACSN42MUo7/REYXK7PM=
Subject key identifier: 43:54:00:78:A7:38:FF:9C:25:53:30:D6:0C:95:B6:C6:14:D4:B9:BF
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 019E89ECE67745932F5B2BBD47913016FA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1941
Signing time: Tue 02 Jun 2026 20:01:04 +0000
Manifest this update: Tue 02 Jun 2026 20:01:04 +0000
Manifest next update: Wed 03 Jun 2026 20:01:04 +0000
Files and hashes: 1: Uo567tyscKKQ3DowdVwrO2rgRnk.roa (hash: 8NiKn7om8yJNgxOj/PU+Jf1HsBq9mHLW84RDCIVHBtY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: SHqAUapq6OIUYZ3cOZ1r0oUVXhkxnbT5MblLEEQns60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:ec:e6:77:45:93:2f:5b:2b:bd:47:91:30:16:fa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Jun 2 20:01:04 2026 GMT
Not After : Jun 3 20:01:04 2026 GMT
Subject: CN=43540078a738ff9c255330d60c95b6c614d4b9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:80:7a:dd:6a:00:6c:bd:be:fd:14:33:7e:
ee:18:fd:89:e5:28:e4:f0:58:8c:e5:4a:ac:53:25:
10:2a:5e:94:84:38:23:59:49:b9:64:25:5f:1c:e2:
b9:d2:02:85:74:26:6d:93:a5:66:4b:5b:e9:70:a1:
f3:3f:4a:31:e1:e4:ce:f9:e3:fb:00:e4:26:ba:39:
44:6f:26:9c:8f:17:4d:64:90:3c:d7:de:14:fa:1f:
0d:97:0c:5e:3e:51:72:fb:a0:84:d5:76:62:b6:f8:
37:98:21:b8:4d:8b:1a:66:4b:cb:bd:27:e0:21:f7:
a6:df:ab:1f:ab:31:3e:4d:31:41:7e:68:66:13:ad:
c2:48:01:32:74:9f:12:12:d6:f4:96:85:27:f4:50:
ec:07:82:9d:aa:c3:01:b6:4f:75:c7:97:d0:c9:7e:
e9:aa:f8:3f:6b:b3:32:21:ae:68:2d:13:df:40:36:
6b:ff:d5:f2:c9:9e:28:23:97:01:90:c1:63:6b:ca:
66:27:f5:4c:e9:74:67:a3:41:d5:7a:5c:cc:df:7e:
d0:c1:34:6e:b4:0a:d8:fe:2a:b4:a3:3c:df:e8:27:
4d:a6:8e:bb:89:6d:79:da:e3:47:c4:ad:6c:c8:fa:
df:cf:2c:08:d2:a1:b4:20:1f:82:b8:ba:c2:4e:0b:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:54:00:78:A7:38:FF:9C:25:53:30:D6:0C:95:B6:C6:14:D4:B9:BF
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:62:7f:44:ab:e4:6e:83:1c:86:ef:10:ef:62:82:7d:16:08:
cd:36:e8:cf:a2:a6:b3:39:cb:93:7e:45:7f:b5:fa:ff:66:91:
f2:77:50:0d:36:fc:f6:56:e4:cc:0f:39:64:b2:45:fd:7d:9a:
25:48:28:0a:01:8e:a6:33:fb:a3:e9:08:10:13:bf:00:b8:d0:
35:79:94:2d:67:3f:bd:0d:56:63:ee:e5:cb:91:9f:ef:f9:a8:
5b:18:6b:b3:61:ab:06:0e:be:5e:12:57:42:e3:f9:54:22:11:
61:22:1b:32:2e:73:79:f2:13:53:16:0a:35:94:b0:f5:3f:28:
53:c1:6d:97:f2:bb:a1:a3:cf:23:6f:a2:48:ad:98:ec:99:03:
0d:2c:77:f4:a8:c9:85:04:72:8b:59:4f:39:ec:e7:5c:68:2a:
8f:9f:87:a7:18:9d:9a:d0:e3:9a:81:b8:5e:33:a1:ca:55:93:
87:fa:04:a4:41:a5:a7:39:3a:c8:9f:c3:fa:1b:57:92:a4:7e:
02:c6:fe:59:e3:4c:e0:58:b1:90:73:36:5c:1b:28:00:82:ef:
52:c3:bf:5f:d3:e1:df:a3:f1:5d:30:45:30:d7:ca:74:29:5a:
05:1e:67:8c:6d:43:01:dd:ce:09:e5:8e:73:89:37:9c:f4:24:
47:d0:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:43:49 2026 by rpki-client