Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: oYMcsSWxN22y6E7pAHKZV1Mw7tKZjUrJToQsZ0uzlUQ=
Subject key identifier: BD:6A:77:FE:37:63:4A:D9:A7:80:CD:72:0C:DC:68:04:F0:61:6B:45
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 01A0D8DF6619AC68EF9E70D2F1D4624157D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 14:01:54 +0000
Manifest this update: Fri 25 Sep 2026 14:01:54 +0000
Manifest next update: Sat 26 Sep 2026 14:01:54 +0000
Files and hashes: 1: Uo567tyscKKQ3DowdVwrO2rgRnk.roa (hash: 8NiKn7om8yJNgxOj/PU+Jf1HsBq9mHLW84RDCIVHBtY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: AfoTjceUOtNPNiR0Y2XUpOWelVwS5c8oPa0V52wwT4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:66:19:ac:68:ef:9e:70:d2:f1:d4:62:41:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Sep 25 14:01:54 2026 GMT
Not After : Sep 26 14:01:54 2026 GMT
Subject: CN=bd6a77fe37634ad9a780cd720cdc6804f0616b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:2d:07:08:63:02:30:4f:f8:e4:a4:c0:66:
04:ca:97:f1:38:a1:b4:9d:4a:77:95:9b:84:86:57:
30:d7:95:bf:e1:9c:e8:f4:5d:46:4c:b5:a3:df:3c:
d8:20:28:0d:b5:33:25:36:7d:51:a6:78:8c:f8:92:
76:8e:9d:27:c2:05:06:76:02:aa:5f:08:f4:cb:c9:
90:74:16:43:d4:13:8d:93:40:5a:ac:7b:a7:54:0c:
ab:ef:b9:2b:60:f0:75:30:e0:e5:d5:5e:5c:d9:b2:
90:da:67:f5:87:03:8c:5e:d2:23:fe:2c:b6:3c:d2:
74:fb:f5:79:53:c7:1a:9b:b3:99:b4:5d:d3:cd:3e:
5d:a3:24:c9:2f:01:e2:aa:ee:d2:f3:d2:22:f9:94:
38:60:3e:dc:61:2e:05:c0:6d:5a:bd:e3:42:90:23:
97:f8:7c:89:d6:30:94:d2:c5:3b:83:24:bc:05:37:
c2:0f:41:b2:bb:6c:f5:81:41:97:08:cc:f2:c5:49:
54:55:08:9c:63:07:3f:2d:27:e4:16:35:e1:ef:62:
94:7f:01:85:95:de:08:52:ba:57:93:6a:48:c5:37:
8a:20:15:16:46:a4:9c:a7:47:a6:38:84:56:06:48:
5c:e8:e8:da:e9:89:f7:fb:c5:e5:f1:74:c8:1f:9d:
97:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6A:77:FE:37:63:4A:D9:A7:80:CD:72:0C:DC:68:04:F0:61:6B:45
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8e:c1:85:ab:ae:da:ef:62:f1:72:fe:09:97:88:b4:26:ec:
d7:44:da:44:75:c2:c6:36:0c:aa:cf:2d:f7:49:db:90:dc:77:
d3:b4:68:97:09:e5:ff:d6:57:8c:38:ee:90:9b:d5:6a:fc:05:
e9:0b:3d:0f:74:fd:cf:ec:97:75:40:f7:55:97:44:63:81:3e:
9b:ad:73:2c:b9:e6:60:bf:9e:42:3f:e4:19:8d:ee:0a:2a:64:
88:b3:46:f4:07:48:7c:40:9e:15:ce:1a:46:fa:5e:71:3c:fa:
c5:3c:16:db:4a:58:6f:46:57:7f:6a:c3:4e:a1:36:aa:80:40:
ac:52:77:37:b4:51:b3:1f:46:4a:27:89:af:52:f7:c3:84:a2:
4b:b6:0c:e3:bd:31:19:15:9f:a5:11:42:2a:74:ef:4b:de:e2:
cd:98:87:e0:ce:5d:47:d3:1e:72:5e:fb:d7:a6:4a:03:22:f3:
44:7d:4f:62:bc:c8:76:61:82:4b:98:47:71:18:96:28:33:c4:
be:35:3b:14:d5:f7:8c:a3:df:79:b4:57:a8:54:6c:a0:69:7f:
b8:a7:4e:48:5e:2c:d8:53:15:13:8e:91:fb:2a:43:83:9c:1f:
d6:86:02:59:f6:02:a9:02:11:1e:f4:03:a7:84:11:e7:89:1c:
43:bd:c0:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY32YZrGjvnnDS8dRiQVfYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDUxOGE1NzA2OWNhZmQ4M2UyMWI1YzYwZmIyNjJkOGVk
ZjM0MmIwHhcNMjYwOTI1MTQwMTU0WhcNMjYwOTI2MTQwMTU0WjAzMTEwLwYDVQQD
EyhiZDZhNzdmZTM3NjM0YWQ5YTc4MGNkNzIwY2RjNjgwNGYwNjE2YjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWMtBwhjAjBP+OSkwGYEypfxOKG0
nUp3lZuEhlcw15W/4Zzo9F1GTLWj3zzYICgNtTMlNn1RpniM+JJ2jp0nwgUGdgKq
Xwj0y8mQdBZD1BONk0BarHunVAyr77krYPB1MODl1V5c2bKQ2mf1hwOMXtIj/iy2
PNJ0+/V5U8cam7OZtF3TzT5doyTJLwHiqu7S89Ii+ZQ4YD7cYS4FwG1aveNCkCOX
+HyJ1jCU0sU7gyS8BTfCD0Gyu2z1gUGXCMzyxUlUVQicYwc/LSfkFjXh72KUfwGF
ld4IUrpXk2pIxTeKIBUWRqScp0emOIRWBkhc6Oja6Yn3+8Xl8XTIH52XGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1qd/43Y0rZp4DNcgzcaATwYWtFMB8GA1UdIwQY
MBaAFHJFGKVwacr9g+IbXGD7Ji2O3zQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMt
N2Y0YmQ5YjU0ZTYyLzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMtN2Y0YmQ5YjU0ZTYy
LzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtY7Bhauu
2u9i8XL+CZeItCbs10TaRHXCxjYMqs8t90nbkNx307Rolwnl/9ZXjDjukJvVavwF
6Qs9D3T9z+yXdUD3VZdEY4E+m61zLLnmYL+eQj/kGY3uCipkiLNG9AdIfECeFc4a
RvpecTz6xTwW20pYb0ZXf2rDTqE2qoBArFJ3N7RRsx9GSieJr1L3w4SiS7YM470x
GRWfpRFCKnTvS97izZiH4M5dR9Mecl7716ZKAyLzRH1PYrzIdmGCS5hHcRiWKDPE
vjU7FNX3jKPfebRXqFRsoGl/uKdOSF4s2FMVE46R+ypDg5wf1oYCWfYCqQIRHvQD
p4QR54kcQ73AnA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:33:31 2026 by rpki-client