Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: a2c4RsOccS+IlJZa7b00jKSAISuqh54EbqmprHW4EyY=
Subject key identifier: 00:AF:95:F0:DA:F8:8A:8B:12:F7:16:A3:0F:49:2D:D3:29:A2:EB:43
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 019D26960971FE101B5A99B74754996F6209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:01:00 +0000
Manifest this update: Wed 25 Mar 2026 20:01:00 +0000
Manifest next update: Thu 26 Mar 2026 20:01:00 +0000
Files and hashes: 1: Uo567tyscKKQ3DowdVwrO2rgRnk.roa (hash: 8NiKn7om8yJNgxOj/PU+Jf1HsBq9mHLW84RDCIVHBtY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: xeLHNjYxJ/gm6XrYWXrtupPIpOQV1oOUASdSTIQPYUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:09:71:fe:10:1b:5a:99:b7:47:54:99:6f:62:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Mar 25 20:01:00 2026 GMT
Not After : Mar 26 20:01:00 2026 GMT
Subject: CN=00af95f0daf88a8b12f716a30f492dd329a2eb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:3f:10:0f:d5:ab:86:cb:82:58:62:20:19:
4b:2f:6d:c6:37:0e:ad:f4:7d:8f:a8:72:69:a4:a7:
74:b3:96:34:ca:0a:ca:da:73:d4:26:e1:02:be:4f:
63:18:7f:33:e5:00:68:2c:47:7a:d4:fc:da:83:5b:
b2:68:aa:72:e7:ac:e1:c1:48:7b:87:a7:80:56:e9:
da:d6:49:cf:61:d1:c7:cd:5f:15:41:3d:6a:90:b8:
e7:07:ab:06:c7:eb:5e:cc:21:ca:2a:9c:ca:9b:af:
e3:0c:c0:32:86:f7:a6:b2:88:d3:42:0a:3d:77:a5:
c9:5a:63:05:0e:fc:17:c8:4c:91:c6:5e:72:f4:b3:
7d:6d:4b:04:35:a2:79:65:b7:c9:3b:d5:47:ae:24:
5f:6f:c3:71:46:35:94:4c:29:c1:49:8f:1d:fd:b1:
30:95:19:73:92:4e:95:56:c8:56:d4:11:77:47:f4:
4b:e4:0b:d2:e7:40:b7:33:8e:72:fa:06:85:2a:5f:
c5:5b:44:48:0f:dc:5b:1f:b2:88:6e:dd:95:69:96:
c4:8b:e8:ec:39:3f:50:cc:39:8a:cf:82:ce:71:26:
4a:f4:67:8d:46:c7:b4:35:9b:75:d5:b1:a6:df:55:
bc:a9:4e:34:f0:b7:46:2a:b5:4e:db:d4:e7:5e:84:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AF:95:F0:DA:F8:8A:8B:12:F7:16:A3:0F:49:2D:D3:29:A2:EB:43
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c9:bf:73:04:26:f5:c0:a7:ad:b2:03:c0:ce:09:cb:6c:df:
95:71:73:c5:4f:91:fe:7a:98:5e:a3:4e:56:ea:b4:a8:65:1f:
85:63:28:84:d9:9f:07:05:a5:54:ae:55:28:4c:6a:43:d1:6f:
ee:f8:c6:a7:98:5d:02:3e:b2:ca:8b:b0:e4:6d:2f:16:a0:7e:
2e:46:96:4e:91:34:82:e2:36:dc:75:ee:46:32:25:eb:dd:c6:
34:a0:83:ff:05:66:f8:21:b3:12:4a:8f:23:70:58:e5:02:0a:
c9:45:cc:a1:49:c6:ee:fe:10:da:19:31:55:d7:25:5b:42:fa:
69:84:33:a4:ff:44:e9:ed:52:4e:06:f1:ae:36:a3:59:69:fc:
b0:3e:70:69:b0:79:5d:a9:3e:c8:35:91:c7:f4:31:c2:7f:58:
32:d8:03:1d:67:76:0e:62:ae:0c:68:f1:e8:fb:85:2a:d4:42:
ec:64:1c:c4:9b:ff:f2:5a:31:e9:8c:78:8b:f9:fc:39:b9:61:
cd:14:f1:19:09:7a:28:b7:a9:ec:5d:9d:26:35:99:e0:e8:67:
8a:0b:2c:9a:1e:6c:49:9b:09:4e:43:32:0d:8b:62:77:b6:4c:
00:6a:20:29:00:c5:75:a2:37:32:36:c1:28:76:b2:4a:6d:63:
ba:a9:d7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:34 2026 by rpki-client