Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: nJcOstjKNqqJk6CbpoRULU1yhZ6K0qtWbEkGviZrh8Y=
Subject key identifier: E3:43:B8:4D:F7:C5:A8:18:E1:EB:DB:BF:4F:E4:64:C6:AA:FD:02:FC
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 019D9A3E60B77E238B87FC7B82D7D815E276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 0868
Signing time: Fri 17 Apr 2026 07:01:12 +0000
Manifest this update: Fri 17 Apr 2026 07:01:12 +0000
Manifest next update: Sat 18 Apr 2026 07:01:12 +0000
Files and hashes: 1: 1_eUFgYnTIIatrHYB64qjYPc9Ig.roa (hash: NMRBaQpcx1MsD9VzDXcQnY8lC2ajEbO2jPjwR8rHylI=)
2: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: 9eRURzYoWp6O6epVRap7LuOWEvvLQMsb67xMrrYnccM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:60:b7:7e:23:8b:87:fc:7b:82:d7:d8:15:e2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Apr 17 07:01:12 2026 GMT
Not After : Apr 18 07:01:12 2026 GMT
Subject: CN=e343b84df7c5a818e1ebdbbf4fe464c6aafd02fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:d9:a7:13:9f:60:ab:77:88:f2:bd:9e:26:
a1:95:b5:00:06:47:77:54:9e:e1:00:18:3e:f9:a3:
a6:f0:7b:18:e8:1b:b4:2a:c1:0c:aa:ec:d0:c3:16:
ef:69:33:fb:5b:5c:36:90:87:78:44:41:2e:07:2c:
18:81:58:7c:5c:bd:90:4b:05:93:f8:ce:b1:6f:7a:
37:52:0e:81:24:e6:33:e4:eb:04:5f:0c:70:83:4f:
90:9d:ed:77:53:dc:1a:83:89:15:e3:a8:65:b1:20:
1f:36:05:8a:b3:34:d0:b9:d0:d2:65:7f:05:55:86:
0f:ef:03:f8:12:b3:49:03:be:82:f4:e5:a0:18:9c:
c9:37:fa:c2:df:77:50:67:64:c0:83:23:ef:22:9d:
2c:cb:2e:f1:d0:3d:74:df:ae:32:80:62:15:25:88:
e1:bd:26:6e:21:2f:2f:50:20:65:ba:cd:2c:8a:13:
02:10:08:9a:69:22:f5:fc:b7:d5:81:1e:0e:08:4e:
04:59:a0:9f:cb:80:83:a7:27:46:04:2e:13:a8:e1:
c2:bf:95:d9:4d:97:92:c6:10:76:95:eb:2f:3b:c2:
3d:3a:81:b5:1a:67:ad:79:d3:cc:e4:15:87:6d:8a:
1d:f5:8a:18:fd:94:f0:e1:e1:7e:05:31:96:ef:e3:
b2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:43:B8:4D:F7:C5:A8:18:E1:EB:DB:BF:4F:E4:64:C6:AA:FD:02:FC
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:39:e2:65:21:3d:79:97:34:81:6f:b1:a5:cd:fc:c2:62:f2:
5f:91:d6:1e:f4:53:0f:43:d6:3c:7c:0e:76:40:ac:51:86:fd:
b3:27:e3:ff:eb:fd:de:27:05:2b:58:ad:a4:0c:db:65:81:9d:
fc:aa:53:2f:02:10:8b:c0:24:6c:3a:e8:51:1f:ae:e0:39:94:
2a:9a:cb:da:05:da:3a:c4:74:b7:97:38:ac:7d:ee:ae:b0:d5:
8a:3d:52:ec:9b:08:66:9c:45:b4:ba:48:3b:eb:64:35:c7:15:
88:99:84:d0:e7:11:4f:70:4f:8b:6d:b5:d1:62:a9:70:91:c5:
0d:e9:3a:e0:f7:a2:64:15:19:60:03:bb:f6:3c:40:8d:d6:08:
6e:c0:b9:93:6a:6d:37:3e:32:d4:92:89:28:31:d5:92:dc:ea:
e9:e0:28:6c:77:53:1a:f5:19:86:5d:f6:4c:f8:df:fe:f3:46:
cf:11:95:6f:53:1a:30:8c:d9:f8:99:fa:c9:10:fe:ca:6f:4a:
93:c3:2d:ed:20:6b:b3:a0:58:18:68:e1:9f:fd:23:23:c9:b7:
67:2e:5a:80:bd:d7:a6:94:e9:65:8d:0d:a7:c5:72:f7:1f:5f:
e1:c4:50:9d:3e:f6:71:10:e3:f4:3a:3b:aa:f6:7c:c8:71:8b:
e8:72:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:54 2026 by rpki-client