Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: uTz/L3u7JdcZitjdlrKDOJ4pQC4dMclD5m8esAu0J68=
Subject key identifier: 4E:6E:48:E1:29:D0:74:C2:88:4C:FE:08:E2:D4:18:C6:7B:EA:04:17
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 019D99623A65C29A422B26D5BC565F3D0617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:44 +0000
Manifest this update: Fri 17 Apr 2026 03:00:44 +0000
Manifest next update: Sat 18 Apr 2026 03:00:44 +0000
Files and hashes: 1: PUAOGeZbC3q2hI4As6WIL56mug0.roa (hash: h0a5phhn/DN6rizIGXnIA2GO7M+qY/ayzPh0XbIIIlg=)
2: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: 5bGQcT5htvzNt3uIg3f4Ux521wR5X1Pj3HDKpjnAvOg=)
3: vrE3hwEnS1QTByXaca8_W_PJzRA.roa (hash: OeImgN/hpE2K0k56AQ1gCUZZMDfEiohfiJN6dfI77C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:3a:65:c2:9a:42:2b:26:d5:bc:56:5f:3d:06:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Apr 17 03:00:44 2026 GMT
Not After : Apr 18 03:00:44 2026 GMT
Subject: CN=4e6e48e129d074c2884cfe08e2d418c67bea0417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bb:bb:b5:8d:d7:59:2d:54:08:7e:6b:30:fc:
05:cd:88:bb:9f:ca:d1:fc:5a:c5:d9:71:bd:b6:43:
11:d8:6d:89:56:44:88:40:5d:e1:68:56:5b:b1:5a:
c7:f6:74:33:85:5f:5a:d6:0a:b3:f7:29:7b:65:e1:
0a:77:72:36:49:68:28:e0:77:23:ff:4b:4f:0a:a7:
51:95:b6:2f:bf:74:44:3a:55:49:92:54:ad:71:37:
2f:d4:84:de:ed:9e:f1:bb:47:51:51:a7:e4:b9:c2:
1a:da:db:df:9f:c2:d2:f1:21:12:fe:10:3a:6e:e8:
5d:9d:04:87:86:8b:66:df:52:a4:a4:37:ac:59:a8:
52:4c:14:6c:1b:1b:ab:ca:07:c4:5a:d4:79:04:65:
a4:02:af:e7:7b:16:17:b8:b7:3e:ae:75:26:b3:f9:
9e:a0:6e:a2:6e:26:f4:51:89:0d:0a:c1:98:02:b7:
71:3e:67:63:6f:97:8d:22:62:88:e3:64:25:fd:b3:
1f:ab:cc:6e:f7:c2:9a:03:3e:8c:bf:7d:d4:25:c3:
c5:27:aa:ec:b3:cc:ce:88:98:b8:dc:09:4d:40:a8:
30:1f:b0:67:0a:f3:b5:da:3a:c6:c2:98:97:6b:3b:
4b:4d:07:fa:64:4f:1d:9b:f3:eb:ab:b0:1b:b2:5b:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6E:48:E1:29:D0:74:C2:88:4C:FE:08:E2:D4:18:C6:7B:EA:04:17
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:67:00:cd:39:99:05:dc:58:8a:c1:3a:b1:b8:3b:6b:fd:ea:
56:c0:cb:3c:4f:ab:69:9b:fe:b9:ae:b1:3f:5b:69:a9:53:69:
c8:3c:fd:b3:9f:71:65:ea:c2:57:6b:a0:07:86:b0:2c:64:04:
0a:73:db:ca:30:78:86:0b:b2:e4:2d:07:b3:0d:b5:7a:66:e3:
6c:38:c8:14:c2:6a:a1:f4:08:fc:96:f1:20:f9:82:c4:83:3c:
0b:80:d2:a3:42:4d:22:5f:50:ee:ca:38:61:5c:09:d4:57:6c:
4f:86:92:a2:e4:18:a9:63:d6:3c:69:f4:fd:3d:b0:16:44:10:
25:c1:f3:83:ef:37:09:95:86:4a:f4:df:28:59:8d:6c:4e:6a:
5a:83:0e:bf:7e:40:34:f1:2b:ad:26:3a:db:43:97:4c:c6:be:
99:4a:71:7f:8f:96:28:61:c2:3a:d9:93:25:0e:7b:d9:a1:54:
fa:21:95:e1:3a:9b:55:ef:6a:b4:50:a0:e7:36:39:df:90:e3:
28:b9:ae:1a:81:19:56:82:79:2f:11:40:65:e0:39:38:e6:4d:
cc:e3:a1:55:06:c2:af:c3:d3:e6:2f:ab:56:9f:85:d4:30:ee:
bc:04:62:19:08:8c:1f:30:65:33:df:fa:6a:23:44:8d:17:4a:
2c:21:bc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:16 2026 by rpki-client