Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: tcypuq2uw1aZ9lbPnHyHa/HTREYFhpIfZEvIC3BbbUQ=
Subject key identifier: 2F:98:B0:BB:9C:83:86:B3:FB:EC:89:FE:C2:6C:3D:51:39:CA:28:7B
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 01A0C6A0AE06215B846A7244B0381FCE6071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 03E1
Signing time: Tue 22 Sep 2026 01:00:14 +0000
Manifest this update: Tue 22 Sep 2026 01:00:14 +0000
Manifest next update: Wed 23 Sep 2026 01:00:14 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: IDH9znWH8n//OfcoANL/WnAIAi4v7FQMlDUHLen7GjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:ae:06:21:5b:84:6a:72:44:b0:38:1f:ce:60:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Sep 22 01:00:14 2026 GMT
Not After : Sep 23 01:00:14 2026 GMT
Subject: CN=2f98b0bb9c8386b3fbec89fec26c3d5139ca287b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b7:d4:7e:93:f0:19:c6:f0:75:72:e0:f7:45:
f3:73:b6:32:d2:3f:d2:de:8a:c1:9c:fa:37:6e:a6:
41:3c:6d:db:80:99:8a:6e:92:b6:10:1b:0f:b3:85:
7e:78:97:5e:24:24:1d:48:6f:67:ea:16:85:42:bc:
ed:e1:f8:54:ad:04:f9:6c:8d:cd:77:c8:da:93:88:
95:24:ac:f4:52:6c:67:0b:40:c4:c2:56:16:89:fa:
01:9f:3e:ef:78:73:c9:ed:46:5f:bc:d0:a2:6e:fe:
93:ef:05:14:f4:37:3d:2d:ef:3f:62:72:46:d1:9c:
77:94:66:b6:bf:48:f4:37:49:28:8a:3e:7d:4b:d9:
fb:47:b0:d8:e2:8d:c6:2e:35:18:1e:62:62:87:e6:
a7:45:fa:a0:c0:61:54:18:de:90:03:6d:ca:20:cc:
a1:55:65:6b:9d:eb:53:4c:5d:86:54:d1:b7:f3:c2:
d4:44:25:ea:bd:67:2d:31:d8:05:4b:44:cf:d5:bf:
a7:b8:2c:cb:36:e9:82:46:7d:98:56:b8:93:da:87:
e6:d7:dc:f5:b1:83:b6:42:72:14:8e:e7:ca:c9:72:
17:c9:1c:d7:da:9b:ba:bd:0d:32:62:71:a0:c2:73:
9b:f8:40:3c:ac:53:a1:6d:fd:17:3f:21:18:27:43:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:98:B0:BB:9C:83:86:B3:FB:EC:89:FE:C2:6C:3D:51:39:CA:28:7B
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:aa:d2:17:11:6b:87:f0:e3:1b:7d:f4:89:c5:22:db:5b:2a:
ea:2c:e3:c2:9e:14:4d:81:b8:68:42:ee:4e:f7:dc:8f:35:67:
6a:0a:3e:07:da:0b:be:40:4a:b8:d0:16:30:08:a3:b6:aa:98:
74:03:0b:15:aa:12:37:de:cc:ed:6e:8f:47:fe:15:5a:70:73:
a8:b7:69:77:4e:f7:07:9c:27:cc:51:77:a6:ad:49:a3:24:9f:
23:39:d7:18:8f:51:f8:cf:4b:aa:f8:f3:c2:a4:46:8d:03:26:
c2:c4:70:06:f5:40:c4:24:fa:67:05:48:3c:f0:05:47:e1:08:
0a:ce:92:ca:0c:f3:a1:1a:57:13:a5:e7:59:29:7e:05:bf:66:
e9:c3:ec:cb:4e:9d:d7:e3:93:de:b2:2c:06:ba:f9:3f:df:5e:
ca:30:4c:3a:cd:0b:f0:cb:fb:65:2c:c9:1a:6c:49:7d:e0:43:
86:a5:d7:fd:80:07:27:90:ee:ad:c8:63:c5:69:4e:85:e9:a7:
47:8b:4a:6d:5a:86:ea:b3:08:2d:66:44:bc:bc:be:91:08:2c:
34:61:14:d1:70:66:47:3a:90:cf:6f:b3:57:23:a3:ea:05:b1:
64:29:fc:12:f6:3d:d5:50:14:79:30:a4:ea:63:63:77:c3:09:
79:08:83:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:46:28 2026 by rpki-client