Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: u/AgdUlZpsZnCrv88Tl1FV2R4YZfGUSFLuZbcEyEvmo=
Subject key identifier: 84:96:40:53:8D:11:3E:A0:C0:89:E6:FB:F3:76:D5:52:AA:B1:E1:A5
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 01A0CA7DAC694357F7D148BD7F72657BD782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 03E3
Signing time: Tue 22 Sep 2026 19:00:28 +0000
Manifest this update: Tue 22 Sep 2026 19:00:28 +0000
Manifest next update: Wed 23 Sep 2026 19:00:28 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: bNJAxCSp5YjEw21xrAF25WxLGlSFd7BfuFxd9A7THZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:ac:69:43:57:f7:d1:48:bd:7f:72:65:7b:d7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Sep 22 19:00:28 2026 GMT
Not After : Sep 23 19:00:28 2026 GMT
Subject: CN=849640538d113ea0c089e6fbf376d552aab1e1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:5e:09:0e:d2:75:51:43:58:5f:3c:f9:9b:
ce:33:b0:03:ac:7c:30:e7:e7:21:bb:4b:4a:c3:8f:
d2:f1:63:e1:75:34:ef:ad:57:7f:50:e8:fb:1c:a0:
0b:a9:39:bb:75:ab:82:12:5f:46:d6:65:5c:0a:8f:
5e:30:d2:db:47:79:e7:04:fb:74:d7:83:1a:8c:74:
7f:93:68:a0:1a:65:00:2b:b2:bb:8f:42:21:7a:94:
aa:f5:8a:3f:33:b1:d8:0d:8a:4f:c0:0c:49:79:ac:
74:b8:2a:75:2d:44:e1:b0:23:90:aa:45:93:27:31:
bc:47:ab:25:fe:f9:51:30:01:3e:60:3f:0c:a2:c2:
e3:79:78:03:54:33:0a:80:58:b3:1c:6b:b3:75:a1:
53:d4:5e:09:a2:e3:56:aa:01:c6:e9:13:a7:53:c1:
c1:1b:2e:b1:7a:9e:3e:22:a5:8b:cf:89:1c:4a:53:
fb:f6:03:b4:84:42:d9:bd:14:f3:1d:75:36:a2:b8:
ab:8d:a7:d8:11:ed:b2:1c:7d:74:03:ef:67:47:d2:
27:38:94:d1:3e:25:c4:fc:1b:14:3e:61:f1:12:58:
3d:f3:28:86:02:d1:58:58:ff:5c:c0:5b:9c:25:80:
26:f9:c4:a5:95:cc:66:93:c4:ba:6a:02:fd:fb:ec:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:96:40:53:8D:11:3E:A0:C0:89:E6:FB:F3:76:D5:52:AA:B1:E1:A5
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:85:e9:44:db:3c:3f:25:ce:ea:b8:55:82:33:74:cc:c8:72:
d9:90:31:11:b2:dc:bf:47:e4:bf:bb:cc:0e:d6:4c:ab:7d:94:
77:b3:58:30:97:80:a1:72:b1:b2:13:fc:40:3b:2a:9e:05:d7:
c3:da:fe:80:4b:9a:1a:3e:05:41:48:4a:d9:03:c3:35:83:5b:
7c:32:34:10:cd:c0:e2:d2:33:59:26:c2:c5:b6:a0:e2:72:31:
c4:7f:e9:c9:22:48:2e:e6:6a:04:f9:1c:41:7d:dc:1f:ee:d4:
c2:96:f9:3d:af:21:1f:a2:15:93:65:02:0a:c6:56:87:0d:31:
1a:ec:23:c2:65:97:49:e9:bd:81:fe:99:47:dc:d9:d4:6a:92:
d4:24:81:ac:8f:e5:fa:87:42:0e:be:6a:13:ea:0a:86:2a:5e:
81:9a:67:f3:26:53:c6:69:5b:bd:e4:5a:76:73:23:3d:fc:66:
68:9b:14:5e:bb:0e:27:22:de:9a:6e:e8:e1:46:b6:1b:3c:c9:
bb:b4:dc:4d:7e:a2:9b:83:dd:1d:af:83:24:3b:de:4a:e1:02:
e4:fb:b0:5b:7f:5e:d8:3c:14:60:91:c2:a1:95:ac:26:bf:4b:
8e:6f:18:74:df:d4:ef:db:1a:2c:1c:ce:0b:c1:06:94:81:5f:
e3:85:a3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:32:19 2026 by rpki-client