Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: xooOsz3oFu+yheNeQ1ByTOKde3RlgXWy1q3XtwEYJJw=
Subject key identifier: B7:10:AB:4B:0A:2B:74:F9:BC:CD:4E:CE:E0:24:37:E9:1E:B3:5C:BD
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 019F946D72A8128CD372DAFAB5B14E33FC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 14:00:28 +0000
Manifest this update: Fri 24 Jul 2026 14:00:28 +0000
Manifest next update: Sat 25 Jul 2026 14:00:28 +0000
Files and hashes: 1: Uo567tyscKKQ3DowdVwrO2rgRnk.roa (hash: 8NiKn7om8yJNgxOj/PU+Jf1HsBq9mHLW84RDCIVHBtY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: BjLMOzJ+A2FbRzBikKrmiG43FyZncSY2tmnImM70rxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:72:a8:12:8c:d3:72:da:fa:b5:b1:4e:33:fc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Jul 24 14:00:28 2026 GMT
Not After : Jul 25 14:00:28 2026 GMT
Subject: CN=b710ab4b0a2b74f9bccd4ecee02437e91eb35cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:01:6d:ed:88:30:4b:3b:0c:e6:14:40:c5:
18:35:f1:da:85:70:96:c3:fb:f4:42:66:a9:e9:e6:
46:4d:29:37:af:f4:4d:b0:5b:1f:71:8d:9e:bd:a8:
bf:02:bb:10:74:cd:1c:4a:8b:15:91:e3:b2:d1:59:
12:7d:f6:cf:f7:95:16:d3:09:51:cd:01:0f:04:7f:
64:7c:fc:2e:d3:31:4f:07:d1:fa:94:30:01:9f:2a:
38:b2:d1:86:48:77:ef:0f:cc:e0:25:9b:da:96:3b:
c2:d0:8d:24:52:4b:cc:9a:98:1e:26:d2:cc:d1:2f:
0c:8e:34:62:0b:67:19:39:68:ff:9b:88:ed:c4:28:
e2:2e:35:70:d3:26:7b:e6:51:8e:ac:5c:2b:b2:ac:
70:84:32:66:21:fb:a7:7f:43:68:64:0c:35:16:aa:
2b:05:a1:0f:6e:87:f8:42:ae:4a:e0:55:2c:c2:87:
b5:7b:59:db:7d:8d:4a:d0:f0:ab:3a:4c:41:fa:51:
09:49:ee:27:bc:78:e2:89:e6:8d:a6:7b:8f:5f:ca:
3f:b8:a5:1d:5f:b3:c0:ac:e4:f1:83:3a:70:3b:8f:
68:93:bb:bd:11:70:91:9c:ce:84:65:7f:0c:56:f8:
06:ee:44:4d:0d:98:01:c7:55:a6:bb:dc:09:a0:5e:
ae:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:AB:4B:0A:2B:74:F9:BC:CD:4E:CE:E0:24:37:E9:1E:B3:5C:BD
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c1:b1:b5:97:9c:56:6f:94:d9:e5:0c:04:35:a9:52:6f:3d:
25:c9:fe:1a:e3:b4:e3:7f:45:5f:61:a9:74:fa:dc:a0:8b:68:
a7:41:a9:62:c0:f8:3b:46:7c:69:4d:e4:6a:54:a4:76:10:78:
f6:9a:f0:6b:64:1f:c7:03:cb:d8:84:23:56:09:71:14:71:51:
a7:e8:74:f1:40:d4:68:a8:3c:14:8e:5f:4c:62:6e:ff:26:37:
6a:c1:b0:33:7a:e6:d7:ed:8d:42:3c:0e:40:ee:d1:b4:94:d8:
e4:ca:f2:ef:2c:14:cb:f6:cc:97:09:48:bb:03:da:61:94:d1:
6f:11:aa:55:1e:84:9b:d5:06:11:fa:46:fb:33:05:46:72:43:
08:91:29:40:a9:80:37:bd:65:f3:67:93:9b:ca:a7:1f:df:7a:
cb:31:a0:8d:0d:37:dd:72:95:18:4c:f0:2d:73:15:20:94:95:
79:2b:fb:cd:9f:a8:d2:09:46:10:3d:2f:63:02:38:13:f9:ac:
95:b2:97:e2:1d:d1:cd:77:4e:e2:6d:1c:04:d8:ad:9f:bf:b8:
bc:10:e1:64:30:d7:29:45:52:13:df:98:16:dc:f3:c5:ca:97:
d8:13:37:94:a1:96:21:83:01:00:19:14:5f:7a:22:5d:ba:cc:
e8:94:da:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbXKoEozTctr6tbFOM/xrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDUxOGE1NzA2OWNhZmQ4M2UyMWI1YzYwZmIyNjJkOGVk
ZjM0MmIwHhcNMjYwNzI0MTQwMDI4WhcNMjYwNzI1MTQwMDI4WjAzMTEwLwYDVQQD
EyhiNzEwYWI0YjBhMmI3NGY5YmNjZDRlY2VlMDI0MzdlOTFlYjM1Y2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIUBbe2IMEs7DOYUQMUYNfHahXCW
w/v0Qmap6eZGTSk3r/RNsFsfcY2evai/ArsQdM0cSosVkeOy0VkSffbP95UW0wlR
zQEPBH9kfPwu0zFPB9H6lDABnyo4stGGSHfvD8zgJZvaljvC0I0kUkvMmpgeJtLM
0S8MjjRiC2cZOWj/m4jtxCjiLjVw0yZ75lGOrFwrsqxwhDJmIfunf0NoZAw1Fqor
BaEPbof4Qq5K4FUswoe1e1nbfY1K0PCrOkxB+lEJSe4nvHjiieaNpnuPX8o/uKUd
X7PArOTxgzpwO49ok7u9EXCRnM6EZX8MVvgG7kRNDZgBx1Wmu9wJoF6uQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcQq0sKK3T5vM1OzuAkN+kes1y9MB8GA1UdIwQY
MBaAFHJFGKVwacr9g+IbXGD7Ji2O3zQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMt
N2Y0YmQ5YjU0ZTYyLzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMtN2Y0YmQ5YjU0ZTYy
LzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwMGxtZec
Vm+U2eUMBDWpUm89Jcn+GuO0439FX2GpdPrcoItop0GpYsD4O0Z8aU3kalSkdhB4
9prwa2QfxwPL2IQjVglxFHFRp+h08UDUaKg8FI5fTGJu/yY3asGwM3rm1+2NQjwO
QO7RtJTY5Mry7ywUy/bMlwlIuwPaYZTRbxGqVR6Em9UGEfpG+zMFRnJDCJEpQKmA
N71l82eTm8qnH996yzGgjQ033XKVGEzwLXMVIJSVeSv7zZ+o0glGED0vYwI4E/ms
lbKX4h3RzXdO4m0cBNitn7+4vBDhZDDXKUVSE9+YFtzzxcqX2BM3lKGWIYMBABkU
X3oiXbrM6JTaEg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:09 2026 by rpki-client