Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: VoclQnwZJVR0sBI7gb2/y9+McU4Tk3J+TDl4aTHkY4g=
Subject key identifier: B2:6E:AF:34:51:C2:2F:E4:88:31:EF:7F:60:A8:8B:20:C9:AF:BF:7D
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 019D37F785CF8A2B426F25927650E3355E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 05:01:01 +0000
Manifest this update: Sun 29 Mar 2026 05:01:01 +0000
Manifest next update: Mon 30 Mar 2026 05:01:01 +0000
Files and hashes: 1: Uo567tyscKKQ3DowdVwrO2rgRnk.roa (hash: 8NiKn7om8yJNgxOj/PU+Jf1HsBq9mHLW84RDCIVHBtY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: J0fSGawvyZ2ieLwffROn6KjuGggG1i+rRU10IlEtKq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:85:cf:8a:2b:42:6f:25:92:76:50:e3:35:5e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Mar 29 05:01:01 2026 GMT
Not After : Mar 30 05:01:01 2026 GMT
Subject: CN=b26eaf3451c22fe48831ef7f60a88b20c9afbf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:25:bd:f2:0c:f6:2e:97:e1:bf:a1:a3:94:
fd:ae:dc:87:88:07:2a:e3:26:32:f6:2b:27:7f:6f:
44:8e:00:e2:60:1a:49:2f:59:97:53:97:fb:bc:1d:
8e:25:67:1d:a9:61:77:56:a8:cf:73:3f:e7:7b:68:
e2:e4:67:4b:1f:e7:f3:da:43:97:47:ea:aa:9a:4d:
3e:4f:13:e4:16:9a:50:cf:a1:ec:c2:40:fe:84:e1:
13:2c:59:71:7d:40:1c:d0:19:bf:a7:d7:94:d1:c0:
29:8f:78:8d:82:47:9c:02:33:dc:ba:aa:5d:12:75:
c1:1b:7b:df:bb:ae:04:11:1d:7f:f9:04:74:81:e0:
ff:05:3b:38:fc:6c:7f:1b:0e:91:b4:9d:28:2b:68:
62:7a:07:2e:d9:6c:24:33:9a:11:5e:69:3d:a4:de:
e1:d3:9c:7a:3d:0b:8e:e8:be:05:30:fd:2e:36:a8:
d3:63:eb:c4:29:f3:0c:a3:16:02:59:d6:f0:6e:c7:
02:8b:63:19:b6:30:72:90:7f:c6:05:75:44:6b:d2:
7d:5e:96:fd:d3:ce:dc:48:41:fa:98:b2:0a:3f:a3:
fe:39:22:0f:17:f5:8a:e8:94:66:c9:54:86:8c:b7:
22:5d:53:af:f6:a9:0f:10:17:c2:dd:1f:f7:8d:aa:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6E:AF:34:51:C2:2F:E4:88:31:EF:7F:60:A8:8B:20:C9:AF:BF:7D
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:65:6a:76:5d:12:6f:ad:77:7a:4d:d9:63:1c:95:2d:11:a1:
b7:8c:ea:99:3d:bd:26:a9:24:ac:63:71:a3:9a:81:5a:66:66:
8a:77:d4:9d:17:3e:80:fe:03:3a:d5:02:b4:69:9b:a3:1e:b6:
79:71:3e:cc:d1:ac:bf:04:83:0a:10:67:7c:e4:40:02:96:36:
77:ed:2f:97:6c:f3:b9:8d:4e:cd:e2:79:7f:1f:30:99:3f:85:
e1:e2:32:1d:0f:0c:ea:40:35:86:16:e8:40:d8:1a:5a:ce:de:
9e:41:47:c6:9a:23:fa:9d:8c:59:1e:c1:50:ec:d0:9f:85:a1:
79:29:3f:ae:8d:88:98:0a:b8:08:10:43:11:d2:95:6b:42:0c:
1f:7a:18:0c:5a:b7:2a:9a:bd:74:c4:7d:ec:23:b3:e9:c0:2c:
3a:07:9d:e2:06:af:de:bf:3f:7d:6c:75:35:8a:da:25:dc:03:
4e:10:37:17:08:37:cb:49:ad:17:fb:f8:9a:80:40:e6:75:a7:
54:05:d8:a7:f9:0e:de:cb:e8:69:aa:2f:dc:8d:6b:b0:91:30:
d0:65:4c:82:2a:de:34:5c:f7:24:45:2a:93:a1:2e:c0:06:a5:
e9:9d:66:ab:e4:a2:27:21:d5:2c:43:7c:23:b9:c2:05:f1:8b:
44:ba:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:55 2026 by rpki-client