Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: 9SwZ+Msyvv4ZDluEqN+gDgYFNTBhl39esJNZ/JN8FE0=
Subject key identifier: 51:F7:61:12:E4:5A:18:32:94:80:3C:FF:41:C2:E0:55:C7:A0:21:41
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 01A0C88F3247D4C63556EDFC13990DAD4B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 03E2
Signing time: Tue 22 Sep 2026 10:00:22 +0000
Manifest this update: Tue 22 Sep 2026 10:00:22 +0000
Manifest next update: Wed 23 Sep 2026 10:00:22 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: ON6xOeidH+vm8zMd4gRXlNvkllmODXInKcmyaDMbB1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:32:47:d4:c6:35:56:ed:fc:13:99:0d:ad:4b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Sep 22 10:00:22 2026 GMT
Not After : Sep 23 10:00:22 2026 GMT
Subject: CN=51f76112e45a183294803cff41c2e055c7a02141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:ee:0c:ea:a9:03:3c:32:5b:c7:1b:b9:b2:
98:22:9d:a4:bf:02:67:32:3e:40:b5:7a:62:e5:46:
6e:18:32:da:24:a5:c1:56:83:22:81:73:c7:a5:2d:
d0:14:b5:19:54:be:7f:09:ea:39:5a:f5:44:14:ff:
8f:2f:0f:06:00:bb:ba:2a:43:ac:53:08:8a:1c:d3:
e8:7e:a5:73:47:c5:91:ff:c9:ed:a5:b4:9d:81:9c:
33:b7:55:c1:ab:9d:9c:b4:a4:ab:f9:c6:46:9a:b9:
ef:cc:a7:9e:19:18:40:b2:30:77:48:e8:66:5d:aa:
3e:4b:5e:82:1a:38:c2:9a:0b:3c:e8:d0:a3:19:4a:
52:47:a8:54:d3:b2:dd:5f:7b:4b:35:bf:55:43:c8:
6c:27:81:18:e9:07:f6:c9:be:70:a3:8f:40:d9:15:
18:7d:2e:04:b2:b9:1d:d9:22:07:da:da:20:be:62:
1c:58:f4:96:b0:5b:88:c2:ee:e4:0b:9f:48:b3:74:
d1:a8:25:3b:cf:ae:d3:71:49:5e:9a:c2:34:c4:47:
f2:e9:21:74:88:b2:56:40:79:0e:56:32:51:04:8e:
77:c4:16:5c:fe:7b:a9:0b:ae:b8:1e:b4:35:3b:3c:
e4:c5:58:ff:dd:73:69:0a:a4:d7:21:a0:f5:5f:5a:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F7:61:12:E4:5A:18:32:94:80:3C:FF:41:C2:E0:55:C7:A0:21:41
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a5:d2:07:d4:59:b7:99:71:fd:12:65:34:b6:d9:ba:ab:97:
6f:65:f4:90:40:4b:da:03:a0:80:88:d8:9a:25:a0:a3:be:20:
d0:91:3b:25:5b:f8:13:4a:bd:7b:c6:a5:9e:95:8b:55:23:81:
90:d4:a5:8e:00:c9:4e:42:98:c1:f5:c1:81:27:9e:09:4f:90:
95:14:cd:66:09:09:8c:e2:0e:f1:84:45:0e:f2:5c:9a:f1:3d:
2b:2a:df:27:16:a1:6c:a4:02:50:b5:48:7b:cd:d7:50:f8:5d:
3c:d4:45:7d:2b:58:41:7d:1e:ab:bc:d2:e8:e2:a9:86:92:21:
b8:38:37:48:a0:49:51:aa:53:a6:35:fb:01:69:35:f0:c5:a1:
f0:3f:62:d3:de:36:40:45:2e:e0:47:cc:9b:e8:9d:1f:75:c7:
74:5a:bd:95:e6:0b:72:f3:21:c2:f5:3b:f6:69:47:91:01:bb:
5b:c2:44:b2:18:a9:ea:0f:c9:36:1e:b9:ee:85:92:90:61:23:
03:da:77:8b:74:45:71:07:63:bf:07:22:ac:ac:9a:5d:89:75:
a8:74:8a:ce:16:56:68:47:1b:32:7f:1b:64:16:43:63:5f:d3:
2a:b9:e4:3c:50:f6:9d:f3:e4:a2:e1:25:6a:cd:cc:42:33:86:
29:82:75:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIjzJH1MY1Vu38E5kNrUsMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNGVhNDE4NzhlZTkxMzdlN2M5M2Q2ZGNkMzFkMDIwZWMz
ZmU0NjEwHhcNMjYwOTIyMTAwMDIyWhcNMjYwOTIzMTAwMDIyWjAzMTEwLwYDVQQD
Eyg1MWY3NjExMmU0NWExODMyOTQ4MDNjZmY0MWMyZTA1NWM3YTAyMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPzuDOqpAzwyW8cbubKYIp2kvwJn
Mj5AtXpi5UZuGDLaJKXBVoMigXPHpS3QFLUZVL5/Ceo5WvVEFP+PLw8GALu6KkOs
UwiKHNPofqVzR8WR/8ntpbSdgZwzt1XBq52ctKSr+cZGmrnvzKeeGRhAsjB3SOhm
Xao+S16CGjjCmgs86NCjGUpSR6hU07LdX3tLNb9VQ8hsJ4EY6Qf2yb5wo49A2RUY
fS4Esrkd2SIH2togvmIcWPSWsFuIwu7kC59Is3TRqCU7z67TcUlemsI0xEfy6SF0
iLJWQHkOVjJRBI53xBZc/nupC664HrQ1OzzkxVj/3XNpCqTXIaD1X1pg7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFH3YRLkWhgylIA8/0HC4FXHoCFBMB8GA1UdIwQY
MBaAFHJOpBh47pE358k9bc0x0CDsP+RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAt
OGQzM2IyYTJmZGU4LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAtOGQzM2IyYTJmZGU4
LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKXSB9RZ
t5lx/RJlNLbZuquXb2X0kEBL2gOggIjYmiWgo74g0JE7JVv4E0q9e8alnpWLVSOB
kNSljgDJTkKYwfXBgSeeCU+QlRTNZgkJjOIO8YRFDvJcmvE9KyrfJxahbKQCULVI
e83XUPhdPNRFfStYQX0eq7zS6OKphpIhuDg3SKBJUapTpjX7AWk18MWh8D9i0942
QEUu4EfMm+idH3XHdFq9leYLcvMhwvU79mlHkQG7W8JEship6g/JNh657oWSkGEj
A9p3i3RFcQdjvwcirKyaXYl1qHSKzhZWaEcbMn8bZBZDY1/TKrnkPFD2nfPkouEl
as3MQjOGKYJ1lw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:28:02 2026 by rpki-client