Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: V4/QhvDB7ccpm+FhiLDVxFEzY/Mrsg4+p55HdQNuGuU=
Subject key identifier: 24:40:26:B9:06:88:5B:C5:6E:1B:7E:82:B1:D3:47:E6:2C:F0:B7:08
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 019CABD9A32F393CE139124C7990478375DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:32 +0000
Manifest this update: Mon 02 Mar 2026 00:01:32 +0000
Manifest next update: Tue 03 Mar 2026 00:01:32 +0000
Files and hashes: 1: PUAOGeZbC3q2hI4As6WIL56mug0.roa (hash: h0a5phhn/DN6rizIGXnIA2GO7M+qY/ayzPh0XbIIIlg=)
2: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: xzVGkwqZFRmDbbYD7HwD05j6vO1KrgK64LddeIxmYck=)
3: vrE3hwEnS1QTByXaca8_W_PJzRA.roa (hash: OeImgN/hpE2K0k56AQ1gCUZZMDfEiohfiJN6dfI77C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a3:2f:39:3c:e1:39:12:4c:79:90:47:83:75:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Mar 2 00:01:32 2026 GMT
Not After : Mar 3 00:01:32 2026 GMT
Subject: CN=244026b906885bc56e1b7e82b1d347e62cf0b708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:40:49:1d:b1:b0:30:c2:15:f4:9e:f6:e4:
36:f5:ec:5d:55:30:9a:2e:a2:a7:3f:17:4e:ac:39:
88:cb:f1:6a:31:5f:09:86:df:f9:86:00:99:3f:f4:
91:3f:20:fa:0b:6d:3f:07:86:49:4f:24:a4:0c:fb:
8a:ff:e6:f7:79:e6:1d:5f:7a:8b:f5:50:f7:48:79:
3f:38:2e:c6:39:65:17:31:bf:17:ec:3b:32:80:32:
01:30:c6:8b:34:59:b7:3c:7c:d9:4f:62:d7:43:3b:
2c:23:80:4c:da:fc:5d:20:c2:b0:8f:54:05:fb:98:
9d:75:2d:59:22:8b:2c:5b:fc:3c:c8:c3:6e:0c:9f:
84:67:7f:fd:7b:39:ab:4e:1c:00:f2:98:9f:e9:3a:
fd:50:a8:d1:47:f5:06:f3:14:8d:da:fe:e3:b0:1f:
70:37:a0:9c:c8:6e:e8:05:78:25:86:fb:b5:8a:bd:
0a:73:61:e6:3a:ca:2a:f7:2f:24:b3:c4:48:c5:37:
c6:c7:3a:6d:c2:b0:79:f1:9d:07:53:79:3b:8d:c7:
80:0b:e5:98:ae:dc:b4:43:b6:28:3a:21:c8:6f:99:
ba:93:76:3c:37:3f:55:11:e9:0a:e9:c8:6a:a9:8c:
ac:e9:22:74:c1:b3:c3:ef:1b:12:01:b4:98:b7:99:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:40:26:B9:06:88:5B:C5:6E:1B:7E:82:B1:D3:47:E6:2C:F0:B7:08
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:21:c8:b6:17:06:72:c5:c6:a3:e4:f8:7d:34:de:08:96:fd:
ab:e0:27:b6:9d:53:60:17:54:9d:0f:e1:3d:75:ee:e3:01:7a:
88:b8:99:7a:01:a6:e0:d5:ec:60:01:46:72:0f:42:0c:20:60:
b4:0d:38:13:c2:9a:80:74:a7:76:39:e2:58:b9:77:3f:c4:b4:
60:41:9a:b1:d9:da:b6:6e:51:4e:1c:63:70:1a:d1:0c:5d:8c:
23:49:ac:da:eb:ac:9d:bf:93:c2:09:86:0b:e6:d3:45:34:5e:
7e:a5:2e:8c:5d:64:ad:1b:32:16:09:1d:8a:dd:34:67:f9:ce:
70:10:e4:6a:87:ce:06:77:52:67:5e:8b:65:57:ce:a2:49:b3:
8b:64:c6:9f:0a:6e:aa:ff:05:86:48:8a:21:98:ad:fd:9c:ba:
1d:d4:d6:4e:92:18:a2:75:31:00:b5:c5:d6:98:55:92:35:09:
8c:2a:7b:4a:7d:04:a2:95:fb:a8:a8:df:c2:61:1e:9a:cb:88:
a8:50:2f:a6:08:65:d8:f0:02:df:39:9d:54:03:7f:17:5c:5f:
da:76:0b:8b:88:a1:21:51:4a:75:55:1e:ff:68:02:61:1b:de:
04:2e:ea:75:e8:6b:b2:54:7e:a3:5a:9a:eb:b5:c6:fb:d8:b1:
3b:85:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:57 2026 by rpki-client