Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: 1AI7jLZD5XnugC06CCyq1wGgLQEI9Bx42ALvnPXEJro=
Subject key identifier: 82:22:08:76:63:33:A6:0D:D8:7A:1E:60:85:FC:CC:07:A8:C3:E5:04
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 019DA52FA0BFC80F62B48A4102A4F5902E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 0242
Signing time: Sun 19 Apr 2026 10:00:55 +0000
Manifest this update: Sun 19 Apr 2026 10:00:55 +0000
Manifest next update: Mon 20 Apr 2026 10:00:55 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: +TFbkOd7tV9viCwwqojTD7RKSfeQCPHgmheFVad3Vn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:a0:bf:c8:0f:62:b4:8a:41:02:a4:f5:90:2e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Apr 19 10:00:55 2026 GMT
Not After : Apr 20 10:00:55 2026 GMT
Subject: CN=822208766333a60dd87a1e6085fccc07a8c3e504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b8:d6:de:c9:14:4e:f2:40:46:29:cd:f9:5e:
92:e5:c6:dc:a3:a2:d0:26:d0:58:29:35:22:42:db:
9e:30:ba:3e:4f:74:f8:6a:62:71:fa:c9:ca:a7:b1:
53:0e:4f:f4:4f:bf:8f:3f:b1:81:fb:7b:a9:0d:20:
d3:bf:9c:62:5c:71:ae:fe:06:4c:8d:2a:6f:a3:f8:
00:b9:1f:a5:4c:82:b5:a2:ff:8b:25:3c:2e:6c:08:
f9:4e:49:b9:7f:3a:c1:e9:fb:6f:43:d4:b3:92:51:
c7:f1:fc:88:27:2c:a0:07:8f:d6:ec:90:be:a1:b7:
5d:4b:b9:e7:c7:6e:07:a8:49:85:18:97:5a:18:e4:
d4:d7:7e:4a:b2:72:ef:5c:d0:38:b6:a1:e8:34:94:
54:26:d5:96:4a:f9:4d:0d:ff:cc:9b:3e:c3:c7:89:
1c:72:75:56:07:0c:33:08:ee:96:8a:52:0e:dd:87:
92:a9:0a:e4:ca:17:4e:90:01:42:d4:33:47:75:81:
6a:a3:87:17:c5:83:01:0d:05:ce:0b:13:be:97:95:
ed:e8:28:9c:52:f3:44:86:0f:56:a6:bc:45:f9:46:
d3:0f:23:50:56:47:42:58:6b:fd:7a:9b:35:2a:4c:
53:ee:52:cc:90:88:49:24:41:f8:f6:10:77:b6:9e:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:22:08:76:63:33:A6:0D:D8:7A:1E:60:85:FC:CC:07:A8:C3:E5:04
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:25:05:e8:d7:9d:ad:93:d4:3d:d2:70:77:cc:db:ad:df:23:
64:4f:d9:4d:2b:17:fd:0f:db:dd:63:65:58:52:89:1b:52:74:
1f:aa:f5:80:7d:d6:8b:f8:cb:9b:4f:bf:f1:5e:d9:82:b9:0e:
e1:da:8d:ba:03:1f:80:8c:4f:8a:26:f3:aa:b3:e6:b4:46:82:
b1:68:85:a3:e6:c4:3c:a6:28:95:5d:95:ea:bb:3a:e7:cd:de:
28:a5:a0:3b:86:3b:68:fa:7a:b1:2f:ef:cb:56:3d:fb:71:0c:
db:68:34:cb:5c:cf:0b:68:3b:cc:02:f6:2e:f6:66:5c:74:a9:
5a:9b:f9:0f:44:47:ff:75:ec:f5:d2:49:ce:aa:66:f8:e5:37:
4c:ef:3f:fe:74:57:00:c9:0e:7c:dd:fe:7b:1d:de:46:89:bf:
da:c4:80:01:d8:00:cb:84:09:43:d2:a8:77:27:b1:a6:9f:c2:
d9:44:5a:27:4e:9e:58:df:f1:df:ef:f8:b4:f2:d8:36:b5:e0:
d5:a7:9b:ad:6a:7d:8d:a8:30:c7:a2:f8:7a:c4:c1:c9:4e:45:
25:7d:76:00:4e:6c:45:9b:41:90:7d:07:c5:f1:89:c6:5d:fc:
d3:63:5b:69:cc:7a:52:35:fb:a9:a8:36:c6:35:fb:05:02:ec:
8c:c5:6f:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL6C/yA9itIpBAqT1kC4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNGVhNDE4NzhlZTkxMzdlN2M5M2Q2ZGNkMzFkMDIwZWMz
ZmU0NjEwHhcNMjYwNDE5MTAwMDU1WhcNMjYwNDIwMTAwMDU1WjAzMTEwLwYDVQQD
Eyg4MjIyMDg3NjYzMzNhNjBkZDg3YTFlNjA4NWZjY2MwN2E4YzNlNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7jW3skUTvJARinN+V6S5cbco6LQ
JtBYKTUiQtueMLo+T3T4amJx+snKp7FTDk/0T7+PP7GB+3upDSDTv5xiXHGu/gZM
jSpvo/gAuR+lTIK1ov+LJTwubAj5Tkm5fzrB6ftvQ9SzklHH8fyIJyygB4/W7JC+
obddS7nnx24HqEmFGJdaGOTU135KsnLvXNA4tqHoNJRUJtWWSvlNDf/Mmz7Dx4kc
cnVWBwwzCO6WilIO3YeSqQrkyhdOkAFC1DNHdYFqo4cXxYMBDQXOCxO+l5Xt6Cic
UvNEhg9WprxF+UbTDyNQVkdCWGv9eps1KkxT7lLMkIhJJEH49hB3tp4dNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIiCHZjM6YN2HoeYIX8zAeow+UEMB8GA1UdIwQY
MBaAFHJOpBh47pE358k9bc0x0CDsP+RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAt
OGQzM2IyYTJmZGU4LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAtOGQzM2IyYTJmZGU4
LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSUF6Ned
rZPUPdJwd8zbrd8jZE/ZTSsX/Q/b3WNlWFKJG1J0H6r1gH3Wi/jLm0+/8V7ZgrkO
4dqNugMfgIxPiibzqrPmtEaCsWiFo+bEPKYolV2V6rs6583eKKWgO4Y7aPp6sS/v
y1Y9+3EM22g0y1zPC2g7zAL2LvZmXHSpWpv5D0RH/3Xs9dJJzqpm+OU3TO8//nRX
AMkOfN3+ex3eRom/2sSAAdgAy4QJQ9Kodyexpp/C2URaJ06eWN/x3+/4tPLYNrXg
1aebrWp9jagwx6L4esTByU5FJX12AE5sRZtBkH0HxfGJxl3802Nbacx6UjX7qag2
xjX7BQLsjMVvQw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:04:42 2026 by rpki-client