Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: BErOmidalPnIBg4Fm+vwzoCZaFmT7Un9kQT1CWxsRNM=
Subject key identifier: F0:F4:24:57:0D:E2:3A:D0:80:8F:D5:1E:5E:D5:49:1F:C7:8D:39:CF
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 01A116AA87904A96862FBF99C74B90E8D0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1A93
Signing time: Wed 07 Oct 2026 14:00:36 +0000
Manifest this update: Wed 07 Oct 2026 14:00:36 +0000
Manifest next update: Thu 08 Oct 2026 14:00:36 +0000
Files and hashes: 1: Uo567tyscKKQ3DowdVwrO2rgRnk.roa (hash: 8NiKn7om8yJNgxOj/PU+Jf1HsBq9mHLW84RDCIVHBtY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: Q5tHjiZ3CJQ2EFwXUmPuGLy/2sNdalOzVSeXmegjlJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:aa:87:90:4a:96:86:2f:bf:99:c7:4b:90:e8:d0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Oct 7 14:00:36 2026 GMT
Not After : Oct 8 14:00:36 2026 GMT
Subject: CN=f0f424570de23ad0808fd51e5ed5491fc78d39cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:54:9f:ad:0e:c7:7a:e4:dd:7f:82:9f:b3:
5e:f0:e0:ce:d2:3c:46:fd:22:84:1a:8f:46:b7:71:
be:94:5a:36:de:13:ff:fe:d2:32:72:83:30:68:0a:
97:e1:74:84:59:60:13:e0:19:da:f2:83:50:0f:c5:
b5:04:e7:4c:7f:cd:42:e2:36:4f:9f:bd:e9:dc:a4:
3a:42:10:56:5d:e9:b8:bd:b1:81:7c:48:97:83:f8:
6f:62:ff:f1:4c:44:93:86:49:f9:f5:ac:52:33:9b:
8f:d8:96:8f:70:66:41:5f:33:31:a6:ac:75:e2:c9:
c6:91:ae:41:f6:28:22:99:b4:0d:6a:9d:d6:a6:26:
9c:cc:0c:41:1d:5b:e4:68:0e:01:91:1d:f5:f0:3d:
17:fc:de:5d:fa:91:9c:15:ef:0f:6b:0d:27:5b:a2:
8f:49:41:ef:c6:7b:40:0b:32:d7:62:fb:b9:69:70:
98:9b:5c:47:74:5e:3a:e3:fd:d7:33:39:86:73:8a:
19:b6:35:2b:65:ea:27:ee:c6:19:74:52:d9:bc:4a:
7c:64:5e:9b:ff:13:73:5d:e4:ec:ea:9a:57:36:a9:
4f:88:a9:03:ca:1a:b8:66:7b:ae:3c:05:f2:1c:83:
72:a2:bd:87:26:dc:47:09:e1:e3:75:67:6d:6c:c4:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F4:24:57:0D:E2:3A:D0:80:8F:D5:1E:5E:D5:49:1F:C7:8D:39:CF
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:df:c8:49:63:95:89:92:6f:65:62:c6:a5:e8:7d:8c:67:18:
0a:c5:91:a4:47:b3:55:77:35:ce:3d:c2:77:c0:b8:ae:11:1c:
42:e0:9e:4a:85:95:24:46:81:f9:25:a6:c1:45:ca:cd:38:60:
e5:9c:2d:67:e9:34:2e:5d:1b:6e:e1:84:6e:a8:31:af:10:15:
bb:2b:c5:7a:66:db:6c:bc:52:62:64:51:39:e4:bb:06:4d:7e:
49:a1:e1:8e:ce:d9:16:0e:39:22:6d:dc:d4:22:19:a2:ce:b5:
97:4a:0f:3a:40:b0:d1:6e:37:ed:7c:f9:59:36:0d:4e:b2:d7:
dd:18:f4:3f:64:47:76:a3:cd:66:8c:21:6b:2b:6e:d5:89:5f:
72:d9:ad:99:7d:19:a8:16:a0:4f:8f:10:be:64:53:ae:96:aa:
83:00:43:56:09:b4:8f:38:62:26:78:c2:b5:03:fd:bd:35:ec:
bf:74:00:ad:0d:d2:eb:a4:09:b4:cc:09:bd:d9:26:ba:92:67:
61:4e:8c:c0:86:c0:9e:f1:6f:c8:35:df:ab:27:d0:55:a1:cf:
8f:ac:1a:fd:ea:7a:05:ce:20:9f:2d:ab:12:5d:dc:cc:35:6d:
3e:4a:0a:93:31:9c:86:d8:04:e0:85:f1:cf:99:1b:4f:ec:db:
d3:77:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:23:59 2026 by rpki-client