Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: zSwS8vxas95R4p/79zzg3nZY0VazHUWwIIIdrypEa7g=
Subject key identifier: 5B:AA:7B:C6:28:12:A7:BD:D8:2A:5D:E8:2F:03:9E:15:2A:EC:AA:F7
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 019D26CCD54CBA5C143434F2B551B84F712A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 082C
Signing time: Wed 25 Mar 2026 21:00:51 +0000
Manifest this update: Wed 25 Mar 2026 21:00:51 +0000
Manifest next update: Thu 26 Mar 2026 21:00:51 +0000
Files and hashes: 1: 1_eUFgYnTIIatrHYB64qjYPc9Ig.roa (hash: NMRBaQpcx1MsD9VzDXcQnY8lC2ajEbO2jPjwR8rHylI=)
2: KyNP6vrFF4mQbiJnNsNkIhVm41U.roa (hash: /VyDLYQxGbJ9Gukqe3FlEbzCjBJNPed1JowFzj8+6NQ=)
3: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: +ZCaXOmK+4j0vSRHTceLy8KupMDVGmSg1tlOFZ7bIv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d5:4c:ba:5c:14:34:34:f2:b5:51:b8:4f:71:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Mar 25 21:00:51 2026 GMT
Not After : Mar 26 21:00:51 2026 GMT
Subject: CN=5baa7bc62812a7bdd82a5de82f039e152aecaaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:20:07:74:d1:f4:f5:a5:1e:06:90:03:b6:
5a:4a:2e:bd:08:27:be:53:b9:83:5a:34:03:e0:bf:
1a:e2:57:8d:85:b1:53:e6:b2:bf:52:d4:3f:fd:67:
f7:e1:ff:48:d2:ec:73:d7:ac:66:32:05:39:3a:06:
fa:8c:14:83:22:cb:2d:46:a9:0f:21:64:c4:83:ed:
5a:c3:81:20:57:40:bb:bf:26:78:72:ce:d0:ec:46:
ea:66:8a:9c:50:e8:28:38:2e:11:50:7c:14:bc:95:
b3:1f:52:e7:58:eb:d0:7b:20:33:f6:7b:81:d5:a1:
cb:8b:07:df:29:54:26:09:c0:a5:af:60:33:74:7f:
e0:20:6e:b1:6f:40:58:a2:88:8f:85:fc:48:fc:eb:
1e:c7:9d:84:d6:49:1d:8a:b6:ff:bc:40:f3:86:32:
90:7e:51:df:14:05:b5:58:68:fe:5c:f3:39:80:6e:
7b:a0:38:e5:58:43:8e:3b:2a:3a:45:01:2e:40:e4:
be:0e:05:c2:48:4c:06:95:50:9b:1a:b0:27:de:1c:
e4:06:1c:13:36:9e:4c:db:78:d3:77:74:ad:e4:20:
44:b0:8b:d1:16:7f:a9:2f:01:09:6a:33:1f:dc:a3:
69:cc:aa:d0:5d:5a:f9:78:85:3a:b3:b5:02:9c:48:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AA:7B:C6:28:12:A7:BD:D8:2A:5D:E8:2F:03:9E:15:2A:EC:AA:F7
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7f:c8:3b:7d:69:94:e0:a4:33:7c:48:7d:d1:22:a2:b1:d9:
7e:97:2c:7e:2d:01:7c:9e:bd:0f:a4:ad:3e:0c:f4:e2:f5:4c:
fc:13:e8:56:88:f7:b6:14:76:6f:b6:79:17:6d:e8:15:46:3f:
e9:e6:12:21:ba:c6:f2:b1:45:80:a0:4b:8d:f9:f6:f9:21:e3:
2b:88:b5:64:fe:ab:4d:11:34:3e:bc:c0:c9:31:f3:a5:a7:77:
ee:35:de:76:0d:3b:b7:62:19:f6:4d:f0:3e:5c:f4:46:2c:a8:
8a:69:dd:83:18:a2:32:f3:fd:6f:ac:9c:b9:c2:d2:ab:26:e4:
29:4e:26:8a:d3:c2:b6:7e:a0:7f:f6:8c:38:e0:ef:a4:6e:d5:
c4:d3:4a:43:95:5b:c5:d8:d2:03:25:2c:89:51:55:84:84:0b:
f8:26:8a:5e:1c:59:2d:56:9c:d3:22:96:a8:a8:87:fd:f5:11:
e1:6b:db:d7:2c:03:a5:37:bb:b2:de:88:67:d4:4c:a7:8b:d9:
7e:1c:ed:3b:fd:27:7d:cd:1f:c0:cc:60:79:93:f8:3a:00:61:
7b:c2:29:98:88:b8:c6:d7:da:e2:fe:80:f4:91:ab:cf:c5:84:
20:e2:bf:16:2a:5e:17:10:96:b0:d5:99:17:8c:79:a5:71:dc:
cc:e2:9e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:39 2026 by rpki-client