Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: RklInleskWMgmHzRmEUQb5IUxrWYliKYMdgvA6r6yO8=
Subject key identifier: CE:6D:47:2A:40:C1:1F:C4:5C:D1:53:DB:61:FE:10:45:F6:1D:1E:F0
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 019CAFED213C0612BE0741CAF096586FBADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 01C3
Signing time: Mon 02 Mar 2026 19:01:19 +0000
Manifest this update: Mon 02 Mar 2026 19:01:19 +0000
Manifest next update: Tue 03 Mar 2026 19:01:19 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: TmW4SeF+NJzajUINalQ61DmEXX/XbrnojC893vyTe2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ed:21:3c:06:12:be:07:41:ca:f0:96:58:6f:ba:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Mar 2 19:01:19 2026 GMT
Not After : Mar 3 19:01:19 2026 GMT
Subject: CN=ce6d472a40c11fc45cd153db61fe1045f61d1ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ea:02:f9:51:8f:87:66:dd:60:33:22:9a:f5:
5e:24:f6:83:76:03:3c:8b:9e:1f:c2:2b:5b:01:c4:
49:b0:09:28:7c:c9:ff:d9:43:cf:a6:f3:1d:4e:a0:
bc:13:e1:30:bf:52:c1:9b:46:61:96:ff:5c:39:1e:
a3:2d:5d:27:63:3d:a0:c4:0b:b1:8d:a0:fd:b2:fc:
cc:a3:1e:2e:40:31:36:1c:ca:93:58:a0:62:35:98:
ce:ae:84:ca:12:3b:d1:a4:67:99:33:99:27:ee:4a:
8c:2c:59:60:7b:21:3a:b0:90:a5:f6:22:58:e2:97:
81:8e:4c:29:20:76:e1:d5:59:12:14:9d:19:9a:0a:
4b:a5:4b:ba:f1:1c:99:a9:bf:a1:88:86:54:ba:2a:
03:0d:bb:66:47:30:6a:1e:25:1c:db:f1:8d:7c:33:
e1:87:80:1e:51:01:0a:ec:91:1a:33:48:5c:f3:a8:
a6:a9:b4:0e:53:45:3c:2e:19:38:6d:f5:59:c1:07:
27:b5:e3:ba:82:17:28:b9:d8:d9:76:c6:95:7d:79:
03:ce:23:5c:d9:d7:f7:05:c4:ce:21:4b:75:ce:46:
ab:d0:c2:42:b1:5c:b2:45:57:2f:75:cc:4c:78:5d:
f3:14:c2:51:f5:50:df:4e:44:e1:56:e6:d7:89:97:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6D:47:2A:40:C1:1F:C4:5C:D1:53:DB:61:FE:10:45:F6:1D:1E:F0
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6d:2d:ca:62:45:0e:35:c4:59:b9:c4:ff:70:45:a7:c2:6b:
41:75:0d:fb:b3:f2:1c:fa:c4:eb:04:d9:80:06:3c:d1:eb:9c:
ea:6a:a8:7e:5f:fd:c4:5c:c1:6b:9d:48:1d:f4:fd:94:84:ce:
00:75:e1:14:09:ec:03:7f:d5:15:e0:f8:19:b4:32:a2:f1:2f:
a3:fd:40:e0:94:95:16:b3:31:eb:a2:81:42:d9:27:24:ff:83:
7d:c4:16:39:4a:3b:59:ca:78:bf:59:f0:41:c1:57:3b:10:ba:
0f:73:03:f1:74:af:26:d7:fc:55:aa:4b:c6:a3:df:47:4c:44:
61:68:c4:9f:e2:a2:70:02:81:ef:3d:e1:d8:51:52:56:c2:2c:
10:87:76:05:c0:68:f2:bd:65:24:09:24:bd:8e:cd:a7:a7:72:
e0:ab:78:36:1d:ef:b5:7f:6b:63:eb:c7:ab:ff:b4:63:d0:e5:
8e:6c:62:2c:4e:f0:93:ba:62:d6:ea:4c:c1:5c:21:eb:b5:b7:
29:6f:bc:41:06:27:99:f7:d7:ce:35:cd:8a:be:87:7f:0c:e0:
b2:48:7d:62:ae:bf:a3:38:93:4f:fc:88:32:a7:e6:1e:10:94:
50:64:9a:26:fe:03:cc:17:7c:a7:cd:07:32:97:74:16:1f:fe:
41:5f:83:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyv7SE8BhK+B0HK8JZYb7rfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNGVhNDE4NzhlZTkxMzdlN2M5M2Q2ZGNkMzFkMDIwZWMz
ZmU0NjEwHhcNMjYwMzAyMTkwMTE5WhcNMjYwMzAzMTkwMTE5WjAzMTEwLwYDVQQD
EyhjZTZkNDcyYTQwYzExZmM0NWNkMTUzZGI2MWZlMTA0NWY2MWQxZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+oC+VGPh2bdYDMimvVeJPaDdgM8
i54fwitbAcRJsAkofMn/2UPPpvMdTqC8E+Ewv1LBm0Zhlv9cOR6jLV0nYz2gxAux
jaD9svzMox4uQDE2HMqTWKBiNZjOroTKEjvRpGeZM5kn7kqMLFlgeyE6sJCl9iJY
4peBjkwpIHbh1VkSFJ0ZmgpLpUu68RyZqb+hiIZUuioDDbtmRzBqHiUc2/GNfDPh
h4AeUQEK7JEaM0hc86imqbQOU0U8Lhk4bfVZwQcnteO6ghcoudjZdsaVfXkDziNc
2df3BcTOIUt1zkar0MJCsVyyRVcvdcxMeF3zFMJR9VDfTkThVubXiZcoewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5tRypAwR/EXNFT22H+EEX2HR7wMB8GA1UdIwQY
MBaAFHJOpBh47pE358k9bc0x0CDsP+RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAt
OGQzM2IyYTJmZGU4LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAtOGQzM2IyYTJmZGU4
LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOm0tymJF
DjXEWbnE/3BFp8JrQXUN+7PyHPrE6wTZgAY80euc6mqofl/9xFzBa51IHfT9lITO
AHXhFAnsA3/VFeD4GbQyovEvo/1A4JSVFrMx66KBQtknJP+DfcQWOUo7Wcp4v1nw
QcFXOxC6D3MD8XSvJtf8VapLxqPfR0xEYWjEn+KicAKB7z3h2FFSVsIsEId2BcBo
8r1lJAkkvY7Np6dy4Kt4Nh3vtX9rY+vHq/+0Y9DljmxiLE7wk7pi1upMwVwh67W3
KW+8QQYnmffXzjXNir6Hfwzgskh9Yq6/oziTT/yIMqfmHhCUUGSaJv4DzBd8p80H
Mpd0Fh/+QV+DQQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:16 2026 by rpki-client