
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: j2awupx78FVjrskmx6bS5K4LaTMJVKc6L0Oyakv5uwA=
Subject key identifier: B0:6B:5B:64:DA:DF:BF:1C:6B:08:F4:61:45:77:78:64:E5:5C:83:68
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 019EC111F57D582005E746B989EC618EB32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 02D5
Signing time: Sat 13 Jun 2026 13:00:39 +0000
Manifest this update: Sat 13 Jun 2026 13:00:39 +0000
Manifest next update: Sun 14 Jun 2026 13:00:39 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: 2Ipw+adYxa8IOa4IykHZs0EZtmH5bQzgmvW10eMkvyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:f5:7d:58:20:05:e7:46:b9:89:ec:61:8e:b3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Jun 13 13:00:39 2026 GMT
Not After : Jun 14 13:00:39 2026 GMT
Subject: CN=b06b5b64dadfbf1c6b08f46145777864e55c8368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:09:12:62:10:14:35:08:80:fa:fc:d4:2a:
97:94:09:df:45:e6:c4:07:cb:e5:b3:b2:ac:4d:99:
fc:28:fa:40:87:0c:51:b1:d1:f8:e2:5c:a2:e3:bc:
d9:14:e0:a4:a6:12:32:5f:55:3f:f8:5d:26:56:a6:
40:4f:a8:cb:e4:d6:af:12:42:bb:cc:d5:16:36:76:
92:25:d6:49:1a:5c:29:e4:11:4c:ca:9c:f1:2d:87:
52:74:e4:ef:dd:14:9b:6e:1f:7f:89:1e:3f:ec:34:
15:f4:e6:f5:8d:af:65:de:61:50:85:71:23:5e:f1:
92:2a:bf:8f:1e:c6:22:4b:b2:6f:6f:69:9b:49:49:
04:8c:91:d9:79:1e:33:b2:13:2a:cf:03:0e:f6:7a:
75:62:7e:d2:2e:f9:ee:b9:36:4c:72:f3:bc:8b:ff:
10:82:b4:94:70:fb:4f:70:ef:5e:79:c6:6b:c6:e9:
dd:22:1d:2c:2b:3a:2c:3f:08:8a:af:20:e6:c9:c5:
ac:7b:0e:94:56:f7:9f:39:2e:da:f7:57:a5:a8:47:
f1:07:6e:d6:a7:ca:8c:36:fd:ed:01:73:ea:10:ee:
88:44:44:77:bc:57:92:ea:64:28:e4:98:52:f1:ca:
74:08:f4:54:4d:30:84:10:94:55:0f:62:37:1f:b2:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6B:5B:64:DA:DF:BF:1C:6B:08:F4:61:45:77:78:64:E5:5C:83:68
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:db:6a:3b:05:3a:12:ff:6d:7b:63:65:4a:de:db:fa:61:66:
51:d0:24:32:9b:b1:41:bb:55:b8:02:b0:04:5e:3f:3a:4d:32:
f9:5b:01:b4:2d:d3:cd:5d:ac:63:8f:b9:24:12:2d:25:91:50:
2b:54:7d:80:aa:76:99:10:3c:6b:bd:dd:24:58:25:3f:50:17:
2d:64:48:9e:88:3a:23:66:07:f9:3a:51:99:e8:30:a1:8e:45:
92:26:ce:48:ae:8e:c8:8f:fb:76:17:a2:3f:65:4e:2c:56:4f:
36:af:9d:63:0f:a8:b2:57:fe:93:66:3b:16:53:d4:a9:5b:bd:
51:f1:15:42:55:69:86:b5:56:7c:ce:57:67:70:e0:04:35:8c:
49:da:45:2e:7c:4c:8a:e2:65:cc:ba:72:3e:53:74:bf:72:bb:
c2:3a:87:6c:20:f4:a1:bb:da:3a:64:ea:0a:d0:c3:9e:9f:a7:
75:93:a0:7f:88:71:7b:8f:06:d2:bf:32:59:21:0b:7b:14:e6:
47:cf:13:4e:a3:c7:e1:b7:fa:53:4a:c5:9c:9c:43:ce:34:be:
a7:04:e1:24:3f:69:bd:a3:10:cc:c5:44:12:78:46:95:57:d7:
af:10:ab:ab:22:ec:06:af:83:d6:fa:fc:e0:86:3d:70:4d:b2:
7b:af:aa:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:44:48 2026 by rpki-client