Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: UVOQxeAXmY6DZ6StISvOKPY3+7pp8/HycpnOtaMx6us=
Subject key identifier: 6D:E2:12:CC:C1:E3:F3:06:DE:EE:3C:E4:58:DF:56:0C:AD:3A:16:C8
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 019D9A750EA8DDDDAA4AAC9F0CD02CEBECA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 08:00:55 +0000
Manifest this update: Fri 17 Apr 2026 08:00:55 +0000
Manifest next update: Sat 18 Apr 2026 08:00:55 +0000
Files and hashes: 1: Uo567tyscKKQ3DowdVwrO2rgRnk.roa (hash: 8NiKn7om8yJNgxOj/PU+Jf1HsBq9mHLW84RDCIVHBtY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: RqJT5vHltPUxiLA2poBv5xOQA3b8SXJBebWU+1GktNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:0e:a8:dd:dd:aa:4a:ac:9f:0c:d0:2c:eb:ec:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Apr 17 08:00:55 2026 GMT
Not After : Apr 18 08:00:55 2026 GMT
Subject: CN=6de212ccc1e3f306deee3ce458df560cad3a16c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:16:50:4c:d7:ed:db:82:9a:b4:4e:33:71:89:
01:21:9b:f4:98:c6:97:64:c2:27:da:d5:79:1a:1c:
b3:c5:b4:a4:88:cb:ce:72:61:0d:ad:9a:71:84:a4:
24:6e:34:ae:a8:51:6c:56:a9:57:cd:2e:8b:90:62:
ec:64:4f:a1:61:1d:c1:18:ad:80:c8:70:58:56:86:
cc:1f:ab:a0:f7:1d:0b:bb:6e:cb:b2:f1:ad:78:93:
c1:13:75:8a:d9:19:fd:bd:16:ca:02:c8:21:2d:3d:
e1:a7:58:a0:87:1b:16:28:b0:74:28:50:3f:8a:58:
d7:bd:cf:b1:6d:49:e7:e6:e0:ab:88:f3:1c:46:c2:
8a:e3:48:ac:65:bd:21:a4:b7:a3:0a:29:44:a4:2c:
f1:c7:0b:f5:38:c7:e4:b0:f2:50:09:ff:f0:bd:b3:
a9:84:f7:ed:93:58:c8:a1:4a:29:7d:b8:3a:47:4d:
8e:c4:3d:c9:6c:20:ab:6a:4f:94:3e:ad:9e:3b:05:
b7:f1:50:8e:d8:10:98:4d:6c:bb:a8:21:40:c4:8c:
bf:42:f3:90:00:e3:67:f6:ef:af:9b:9e:19:a8:8a:
24:f1:39:df:4a:ad:73:66:41:7c:1a:57:ff:43:0b:
bf:b8:23:64:1c:ba:66:11:13:ca:a8:9f:cc:3c:2b:
a8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E2:12:CC:C1:E3:F3:06:DE:EE:3C:E4:58:DF:56:0C:AD:3A:16:C8
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:22:f8:6a:c3:18:15:70:da:a1:a7:42:be:f1:77:f0:75:60:
22:93:bc:89:63:3f:c4:1e:1f:c7:26:c2:91:10:e5:80:81:48:
98:76:0e:f1:c0:cb:dd:85:47:be:0b:8e:0e:62:1d:a5:25:1c:
50:29:06:46:ca:df:37:db:1c:22:26:4f:57:7b:26:ee:25:18:
4b:56:ed:ee:24:e4:51:26:59:4a:0c:ce:5e:3e:e9:60:da:0e:
62:1d:02:88:2a:09:13:4d:88:4a:5b:95:17:e0:2c:9b:78:64:
84:42:6a:65:cc:3f:fc:8d:35:37:c0:0c:7f:ee:4e:16:18:fc:
cd:de:e0:50:6b:b6:99:c2:ec:55:0b:c4:17:9c:4c:66:4a:06:
08:b7:3f:0d:95:ed:19:c2:18:15:ed:1f:48:59:67:a5:5f:bc:
97:f4:de:ab:ea:83:f6:f7:f6:b5:f9:7d:80:82:c6:44:39:c7:
17:1f:c8:2d:2a:8b:54:a6:dd:c6:22:66:33:91:fb:6e:6c:84:
28:d2:cf:22:3d:d8:7b:e0:27:03:da:3a:e2:c0:a8:96:a2:c9:
17:dc:92:fc:a1:3d:60:1f:eb:ab:eb:e0:03:38:92:47:f5:75:
fa:53:c5:77:c6:40:cd:34:be:86:fb:d5:81:f4:1f:57:df:9d:
58:d7:d7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:43 2026 by rpki-client