Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: etkCqeSpncYcqiaSYp3lNNHIthEpzT5V5NitJOW5lJM=
Subject key identifier: 8A:BF:1E:69:81:10:CB:59:73:E8:75:1A:16:7E:54:E3:3B:2E:EC:3D
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 01A118988C06BFAF0D9BC0E2A2A561C63881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1A94
Signing time: Wed 07 Oct 2026 23:00:12 +0000
Manifest this update: Wed 07 Oct 2026 23:00:12 +0000
Manifest next update: Thu 08 Oct 2026 23:00:12 +0000
Files and hashes: 1: Uo567tyscKKQ3DowdVwrO2rgRnk.roa (hash: 8NiKn7om8yJNgxOj/PU+Jf1HsBq9mHLW84RDCIVHBtY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: 4RbELvEZMygwAHIVfuaPNU5beMOpO6jCOnW4SnZ9EdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:98:8c:06:bf:af:0d:9b:c0:e2:a2:a5:61:c6:38:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Oct 7 23:00:12 2026 GMT
Not After : Oct 8 23:00:12 2026 GMT
Subject: CN=8abf1e698110cb5973e8751a167e54e33b2eec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:38:48:7e:6d:a2:7c:0a:e3:ea:43:7e:1e:
45:f1:69:fb:dd:38:b3:e9:8e:bf:c6:23:dd:48:61:
b1:69:7f:45:3f:10:79:1e:72:ff:a5:3a:e3:0e:cb:
ee:1b:13:1b:e4:a2:6c:d6:88:a7:58:c1:db:01:14:
d2:e8:b8:a6:6b:9f:31:45:19:eb:8c:ec:72:fb:51:
9c:b3:90:25:7b:12:74:8b:e4:07:1b:1b:4e:d4:8f:
d4:d9:b2:72:6a:3f:f0:fe:de:8e:ab:96:64:fa:1b:
ee:8d:19:69:47:00:f6:be:fc:94:e3:14:e3:d1:47:
f0:10:8e:4f:88:cb:b6:af:b6:b6:4c:3a:7d:9c:8d:
85:76:99:26:7c:be:6c:63:af:11:f9:0c:76:29:1b:
25:e7:e8:5b:7d:bc:f8:b4:09:7d:19:15:a4:d2:4d:
cd:66:b0:bf:dc:ee:6b:f3:6a:01:88:00:04:9a:07:
43:03:a9:3a:9f:8b:9f:93:40:49:07:bc:dc:04:d0:
73:73:32:34:44:12:01:ed:fe:ca:fd:65:8e:aa:9d:
72:ad:8d:19:70:6c:93:ca:b9:d7:02:42:19:ed:93:
5a:db:4e:58:81:31:a6:15:75:a6:e6:49:a0:10:ae:
89:6c:a4:1e:5f:db:b0:19:b2:12:ed:bf:a7:a5:8b:
08:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BF:1E:69:81:10:CB:59:73:E8:75:1A:16:7E:54:E3:3B:2E:EC:3D
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b9:79:d4:16:60:c7:ef:6c:34:23:be:97:04:49:14:47:39:
f1:6d:b2:73:57:e8:86:14:6a:d4:05:2a:63:2d:55:e6:eb:c0:
ba:54:65:03:03:22:f6:a6:65:9d:2b:a0:8e:4f:b1:d6:46:a6:
42:e3:cd:a6:96:4c:a3:94:fc:4f:88:b0:33:2a:e5:c9:94:a8:
1a:48:11:14:f2:78:f6:6f:90:37:8c:96:b5:e0:c0:c8:e8:f1:
40:d9:31:1e:a0:63:a5:10:51:fb:eb:d3:74:c1:86:d2:6f:6b:
6c:f7:15:88:bb:dc:d0:67:14:5b:ed:6b:4e:29:ff:1d:8d:5e:
68:4e:fb:f5:f5:f5:12:b6:a3:dc:6a:90:69:c8:20:02:69:23:
4d:7c:3a:6f:d0:b4:1c:86:b1:e1:42:5f:f2:f9:1c:e4:ec:1a:
a4:2c:51:0c:c2:f5:c1:fc:77:16:47:e7:ce:0a:a7:8e:e1:a1:
db:0d:64:3b:4e:ea:8c:03:6b:a5:20:91:98:54:dd:68:69:2f:
a0:a2:d0:ad:96:53:60:3b:17:2f:6d:af:09:08:34:58:af:35:
aa:45:cb:45:56:86:72:84:04:6a:b3:3e:e1:1d:8a:ca:0e:5e:
32:18:fd:a1:7e:b8:88:49:5c:07:b4:1e:19:85:84:5d:55:ce:
43:35:76:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:27:30 2026 by rpki-client