Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: u0peOscqbseFj2Ia7G+1ZNEHS71pdrq8nVLYS1vBFt0=
Subject key identifier: CF:AD:E2:6D:B3:81:4B:09:F5:56:B5:06:FE:81:A0:C9:DF:86:D0:49
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 019CAAFD3ED022D3F3E22D02B24153E8ECFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 20:00:49 +0000
Manifest this update: Sun 01 Mar 2026 20:00:49 +0000
Manifest next update: Mon 02 Mar 2026 20:00:49 +0000
Files and hashes: 1: Uo567tyscKKQ3DowdVwrO2rgRnk.roa (hash: 8NiKn7om8yJNgxOj/PU+Jf1HsBq9mHLW84RDCIVHBtY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: /TpjmpUhmVruIecUJBVf8zSKYsEhN4xaOROS0nFpLvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3e:d0:22:d3:f3:e2:2d:02:b2:41:53:e8:ec:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Mar 1 20:00:49 2026 GMT
Not After : Mar 2 20:00:49 2026 GMT
Subject: CN=cfade26db3814b09f556b506fe81a0c9df86d049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:4c:75:c9:51:fd:36:4b:46:63:e8:d6:4f:
37:ff:f8:aa:46:74:d2:4c:8a:b2:5a:2c:8b:bd:17:
b3:0e:20:c1:8d:4a:ed:6a:90:8c:4c:60:97:dc:f6:
c4:22:5e:d5:b4:64:32:84:55:d5:45:53:47:df:9c:
14:b2:d1:19:c4:7f:6e:d8:5a:0e:2a:2d:bf:ca:4c:
f5:80:35:3d:73:75:b1:8c:7a:f2:a7:37:4f:f8:66:
cf:5f:ee:ec:b1:87:0e:36:d0:dd:1d:cd:21:19:b2:
6f:0b:25:fc:c6:b7:51:6d:d9:00:e8:69:a0:40:59:
9b:bd:80:a8:33:8d:44:f2:af:c2:7f:3f:39:e9:ce:
f2:35:b0:10:aa:85:1a:4e:16:21:0d:ed:55:7e:03:
7c:7d:5f:c8:8d:1d:5b:a6:c8:f0:bf:ee:80:77:19:
dd:bd:22:1d:2d:bd:be:4f:9d:b0:cd:14:3e:d3:ab:
b8:3f:14:03:70:04:2a:cd:3c:ee:d1:56:d0:7c:07:
34:99:28:b5:de:02:7f:ec:76:ad:23:b2:8a:15:cb:
0a:f1:54:a7:b4:a6:31:8e:22:85:31:61:2b:8f:b2:
31:ef:c9:37:71:0d:31:87:81:de:68:83:03:c9:9f:
c9:2e:fd:b2:54:a1:e8:3f:6b:a3:b6:79:7a:e9:af:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AD:E2:6D:B3:81:4B:09:F5:56:B5:06:FE:81:A0:C9:DF:86:D0:49
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:34:c5:8c:ac:6b:47:39:62:d5:fa:dd:01:90:53:2c:d6:6d:
01:bd:2d:03:4f:10:f7:c6:8d:be:d0:54:1a:5c:ad:f7:e9:6b:
71:79:b2:5e:d7:06:cf:8f:07:39:56:dd:14:46:ed:67:40:0b:
32:23:2f:21:fe:6a:6e:79:44:f2:bf:16:18:79:7d:3a:fb:42:
69:44:38:0b:c9:55:58:06:f3:ac:5c:a7:b3:cc:81:30:11:54:
2c:36:60:fa:02:0c:0e:3f:00:22:c1:6d:75:b5:a6:05:a6:bd:
46:02:9e:06:9b:1f:7c:a9:05:a5:ae:f7:e8:47:d3:6c:2f:e4:
56:8d:d1:f0:56:e4:2b:85:9c:59:1d:c3:7b:ee:eb:e7:f0:a0:
f6:25:1c:ea:0e:db:19:1e:b4:ea:85:e7:5f:8e:cc:98:d0:34:
4c:ee:70:21:a9:97:88:b8:d6:2d:5f:9e:83:5b:49:27:15:9b:
8b:83:a9:86:b9:9d:b0:32:1e:db:b5:29:64:2e:0b:e1:45:33:
7f:c0:54:1d:d6:ff:3b:64:df:1b:5d:4b:7a:aa:dc:5e:d7:cf:
82:b0:9e:ae:60:48:e8:ae:58:90:d9:ca:e1:b2:f1:e7:b0:e7:
ec:6f:0b:cb:47:29:5a:f5:19:38:fd:88:d6:03:a5:50:60:54:
ed:d5:54:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:18 2026 by rpki-client