
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: 4al4KC6Z41iTBrTnYL+sohhiXSjXPVUxcwUwa+vrvL0=
Subject key identifier: E4:C2:4B:5A:0A:A9:0F:05:A7:AE:9C:9B:73:DB:C6:33:24:37:9E:29
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 019EB76A5943407E66E986692F9A74E1B8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 02D0
Signing time: Thu 11 Jun 2026 16:01:00 +0000
Manifest this update: Thu 11 Jun 2026 16:01:00 +0000
Manifest next update: Fri 12 Jun 2026 16:01:00 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: QzsOWcdENSc1FEbYxOFDbncCotbSNgc5Aa5tbyUapl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:59:43:40:7e:66:e9:86:69:2f:9a:74:e1:b8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Jun 11 16:01:00 2026 GMT
Not After : Jun 12 16:01:00 2026 GMT
Subject: CN=e4c24b5a0aa90f05a7ae9c9b73dbc63324379e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7a:67:3b:b1:d8:1e:34:d4:97:86:b9:d1:0c:
2e:10:c3:b2:cb:18:e2:82:09:04:dc:01:e7:2f:16:
c6:16:a8:47:79:7d:62:e1:e2:71:44:e0:24:13:16:
eb:15:bf:53:25:d6:22:1b:fa:64:ba:ec:86:ac:fe:
98:84:9b:40:98:13:ce:c7:d1:ae:4f:d4:52:13:4c:
c9:ac:2a:f3:a7:74:84:7c:80:75:56:f9:22:77:7f:
72:bb:bd:da:1c:d1:e5:9f:e9:df:c9:a9:69:0e:a6:
8e:1c:ae:92:69:4b:17:f1:62:a4:de:4d:87:9c:0b:
c8:8b:53:d9:2e:f9:ba:36:75:2d:6a:ea:53:9b:56:
57:7c:f9:2a:95:59:72:42:ba:e1:05:71:bf:e6:9d:
31:d3:ed:1b:16:56:32:b4:e1:25:05:81:9b:ec:a6:
02:a2:eb:9b:11:da:e1:5b:7c:e7:a7:77:18:4d:bf:
b9:54:c5:d3:4d:8d:3a:96:6c:a9:19:cd:dc:87:f6:
10:a2:b4:23:aa:ea:2a:48:95:4e:44:32:23:38:52:
36:7d:51:93:bc:7f:b1:0c:97:69:6e:16:a7:02:f4:
6b:98:1e:56:21:88:bd:f7:b8:fe:c3:83:c4:49:5c:
a9:75:84:a3:82:3f:7d:39:1e:83:b7:a8:8f:69:8b:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C2:4B:5A:0A:A9:0F:05:A7:AE:9C:9B:73:DB:C6:33:24:37:9E:29
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0e:f4:46:95:54:bf:2c:10:6a:5b:c1:7e:12:bf:9a:9e:2d:
b6:33:d7:80:77:1d:1e:61:01:b7:00:72:77:6a:c7:81:d6:19:
92:df:d0:1c:83:45:e9:07:57:1a:46:ce:fe:6a:eb:ca:42:63:
ea:d3:93:e4:b5:90:01:3e:36:42:30:51:03:5d:f3:17:d7:e7:
86:27:0f:3d:b8:0b:db:58:15:71:29:21:95:d9:3a:4c:c5:93:
bb:91:10:3d:51:e6:2d:58:00:d4:28:e8:a5:33:df:a5:99:cb:
5c:8c:58:52:00:ba:cc:13:34:fe:5a:c4:c4:f3:d8:11:a2:bc:
66:a0:9b:76:1a:e7:a4:d1:eb:c4:12:8d:47:75:82:21:f6:c7:
07:06:1b:75:af:b4:02:cb:62:8e:b9:a9:19:87:94:7c:db:9b:
a1:04:60:aa:21:ad:82:d0:b3:4e:fa:6b:03:c5:25:01:27:24:
a7:cc:41:4a:98:c4:e9:84:e2:96:91:42:ae:b4:a0:05:fc:1a:
20:9e:eb:ba:a2:8c:e0:bf:18:67:b0:70:06:50:17:9c:21:be:
e8:64:55:15:57:16:08:1a:02:44:f8:e1:48:e7:ab:09:18:0f:
49:b9:e1:94:0f:5b:dc:74:85:f6:23:3b:04:ae:d4:a4:77:83:
a6:91:df:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:57:44 2026 by rpki-client