Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: 83swoziLRzzdLA6fAkKZgrYurhYHzxZVgwrijbz52oI=
Subject key identifier: AC:30:6B:2D:62:1E:BE:F0:EB:EA:41:99:C3:86:67:1B:0D:D6:20:40
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 019F71AAF5C46039FD77083D52B7E5097254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 19B9
Signing time: Fri 17 Jul 2026 20:00:57 +0000
Manifest this update: Fri 17 Jul 2026 20:00:57 +0000
Manifest next update: Sat 18 Jul 2026 20:00:57 +0000
Files and hashes: 1: Uo567tyscKKQ3DowdVwrO2rgRnk.roa (hash: 8NiKn7om8yJNgxOj/PU+Jf1HsBq9mHLW84RDCIVHBtY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: apEUiymORQ+K3nNcjsXmr1EkErgv+YxhAMluoYChpiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:aa:f5:c4:60:39:fd:77:08:3d:52:b7:e5:09:72:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Jul 17 20:00:57 2026 GMT
Not After : Jul 18 20:00:57 2026 GMT
Subject: CN=ac306b2d621ebef0ebea4199c386671b0dd62040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:b6:5c:16:1e:81:19:15:36:58:63:4a:83:
4c:cb:06:23:df:f3:fe:de:d9:1f:ef:77:1d:55:cd:
1e:7f:df:8b:f8:84:2c:27:fa:3b:6b:0f:13:3b:c2:
b7:fb:a6:ad:87:6c:99:12:4f:91:9c:b4:38:eb:c6:
b6:af:7f:90:c8:96:64:6b:68:61:55:37:62:d2:fd:
09:af:81:4b:69:2c:51:9a:d8:59:29:e6:6e:78:fd:
45:73:ea:8b:81:00:54:79:87:2c:5a:1d:50:5e:8a:
d4:97:d5:43:8f:ee:87:d4:4f:d1:fa:8f:ee:42:30:
9f:9a:7e:a8:9c:56:3a:fb:f1:a5:36:6b:83:5a:26:
32:21:cb:bb:2c:11:2b:57:8b:76:92:4d:2c:3d:fc:
3a:4d:ab:e7:0f:14:83:ec:b1:e9:ae:4a:5b:16:04:
f6:b2:a7:6a:01:97:d1:34:b0:fa:63:fd:b7:b6:88:
c2:9c:6e:84:0c:64:91:66:19:1d:49:0b:5c:31:72:
ee:41:9f:78:f2:20:3f:cd:31:73:cb:4b:72:9b:f9:
a9:49:c7:cf:11:65:df:db:ea:64:82:65:0e:e3:87:
63:d0:cf:6c:f2:f9:f6:48:91:da:1f:9f:fd:eb:7c:
43:b7:39:aa:83:39:76:10:0a:1f:19:91:ac:6a:b9:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:30:6B:2D:62:1E:BE:F0:EB:EA:41:99:C3:86:67:1B:0D:D6:20:40
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:eb:5c:ba:a4:55:9f:7c:23:99:1b:40:22:fa:b5:86:c0:e2:
74:7f:e6:8e:b1:80:31:00:7e:09:10:6a:b6:33:5f:44:22:b6:
1e:3e:5b:28:d5:26:19:8f:e2:82:22:86:cc:82:b2:2a:00:4d:
a0:9f:56:f8:60:cc:ec:97:26:b8:cc:2b:6f:4c:33:c7:9e:30:
47:b2:78:fc:89:89:86:b0:ea:9c:86:36:a0:17:05:fb:fb:ab:
cf:50:d5:07:99:e4:cd:09:42:9d:98:e6:1a:31:c7:c8:52:43:
ae:61:e0:ac:4f:f8:21:e2:61:4b:ad:e3:ee:ad:e9:99:1e:f6:
0e:e7:b9:9d:95:1d:a6:58:fe:33:af:e3:53:97:91:8c:00:6d:
a6:ce:e0:fe:ba:83:0b:5a:21:d2:ca:89:ca:8c:04:dd:72:f0:
7a:e1:d0:a9:bf:2f:1c:38:75:ad:56:ee:94:ae:ec:df:c5:2d:
e6:cb:b8:91:a0:bf:6c:0a:9e:f5:a1:e5:76:b4:8e:20:f5:77:
f9:3f:e4:65:83:e3:c3:2f:04:ec:ea:88:d1:83:a7:77:39:4e:
61:97:f1:b8:02:10:cb:4f:f9:01:72:d4:f8:03:26:2e:e0:9e:
0d:d1:a0:ff:65:44:1a:22:2b:e5:5b:fc:c4:9b:31:34:bf:d7:
08:84:0a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:45:07 2026 by rpki-client