Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: z4xzNQw3uANhiJixqPqf0oDLXwYbolVXrTzk7t5rUho=
Subject key identifier: 81:91:B0:06:2A:D1:0D:E8:5A:20:E3:63:8C:98:91:36:15:15:77:A7
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 019FA11713E970017B144310C7E954B0D9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 0349
Signing time: Mon 27 Jul 2026 01:01:11 +0000
Manifest this update: Mon 27 Jul 2026 01:01:11 +0000
Manifest next update: Tue 28 Jul 2026 01:01:11 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: 5h5haYB8yCqGtN7J4iFlORbWkyMAgGoX9teQj2QZEZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:17:13:e9:70:01:7b:14:43:10:c7:e9:54:b0:d9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Jul 27 01:01:11 2026 GMT
Not After : Jul 28 01:01:11 2026 GMT
Subject: CN=8191b0062ad10de85a20e3638c989136151577a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:0d:76:4f:c5:b7:15:6a:e8:2a:b0:83:1a:
14:bc:92:77:ca:f0:ad:1c:94:91:6c:de:96:d0:4e:
2d:4b:78:d2:0d:4b:f1:4d:b5:a3:db:f5:c9:33:20:
d5:a9:10:3f:d6:11:9c:3f:29:a1:07:1e:c3:1f:58:
42:77:fc:51:8d:0f:1b:a3:8a:2c:1d:58:46:96:30:
0d:05:61:19:e3:21:1c:73:91:ad:78:79:43:bc:6f:
4a:9f:90:52:be:06:ed:40:7d:e7:1a:fe:e8:52:0f:
b2:3e:34:44:33:7f:6f:d6:3f:d6:53:49:b4:7a:79:
c7:c6:ef:76:b7:52:c2:af:50:d6:8c:7b:d3:ca:b9:
ce:7d:e2:2a:35:17:b4:32:87:3c:aa:88:00:d9:28:
40:a9:c0:6b:ac:44:e1:6b:5c:2c:5a:86:7a:e2:49:
aa:cc:4f:0d:4e:36:9c:43:9a:e0:74:ae:af:dd:9b:
7b:0f:d0:35:64:25:e8:93:83:1f:74:10:d6:07:45:
53:cb:79:c1:69:7e:5a:36:28:36:4a:7c:eb:ca:4b:
67:44:35:02:6d:4e:56:01:86:a2:85:5d:27:cd:39:
d2:56:17:0f:e5:8e:f2:4d:ad:f1:42:cc:4d:db:c8:
d1:70:e6:a1:0a:00:be:a4:98:a1:93:4c:2f:75:33:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:91:B0:06:2A:D1:0D:E8:5A:20:E3:63:8C:98:91:36:15:15:77:A7
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:97:96:91:23:6c:40:49:19:ab:28:de:f9:10:8f:6c:91:26:
e6:d6:be:10:08:5c:6f:b6:c0:df:21:56:98:47:03:f8:61:94:
25:b5:68:e6:37:b6:a2:8a:8d:a7:91:75:b4:2a:24:b0:46:a4:
9c:b6:0e:64:63:55:be:fb:20:43:d9:79:38:f8:d7:e4:68:7d:
80:de:28:33:61:93:7b:b7:de:e6:4b:e5:d8:b8:b3:73:70:c1:
80:10:13:e8:24:eb:ab:6b:86:29:0e:fd:32:d1:f4:0d:83:34:
f0:b9:cc:f7:d0:2e:89:5d:64:10:02:dc:83:d5:b9:0a:1d:f8:
b6:d4:4d:9c:b2:68:f9:8f:e0:28:55:a2:d1:98:dc:af:cb:f8:
0d:7e:0c:e3:b1:26:b7:0d:50:17:8f:60:65:fc:7e:ac:de:e1:
c0:a2:71:4c:85:54:5e:90:9b:72:d7:b8:a4:21:ca:3d:44:13:
66:bb:94:a3:6e:c4:b9:cd:70:e3:6c:81:9b:ff:65:7d:f7:95:
6f:c4:ff:80:e0:f0:bf:95:3b:42:bc:5b:70:e5:5d:51:c2:f9:
b4:a1:bb:3d:5b:63:44:40:36:9b:02:9b:88:76:3b:65:46:b0:
8a:e1:9f:3c:c2:5c:1c:98:85:48:c5:cf:8d:f8:32:f0:30:77:
3a:b7:89:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hFxPpcAF7FEMQx+lUsNneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNGVhNDE4NzhlZTkxMzdlN2M5M2Q2ZGNkMzFkMDIwZWMz
ZmU0NjEwHhcNMjYwNzI3MDEwMTExWhcNMjYwNzI4MDEwMTExWjAzMTEwLwYDVQQD
Eyg4MTkxYjAwNjJhZDEwZGU4NWEyMGUzNjM4Yzk4OTEzNjE1MTU3N2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhoNdk/FtxVq6CqwgxoUvJJ3yvCt
HJSRbN6W0E4tS3jSDUvxTbWj2/XJMyDVqRA/1hGcPymhBx7DH1hCd/xRjQ8bo4os
HVhGljANBWEZ4yEcc5GteHlDvG9Kn5BSvgbtQH3nGv7oUg+yPjREM39v1j/WU0m0
ennHxu92t1LCr1DWjHvTyrnOfeIqNRe0Moc8qogA2ShAqcBrrETha1wsWoZ64kmq
zE8NTjacQ5rgdK6v3Zt7D9A1ZCXok4MfdBDWB0VTy3nBaX5aNig2SnzryktnRDUC
bU5WAYaihV0nzTnSVhcP5Y7yTa3xQsxN28jRcOahCgC+pJihk0wvdTMv0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGRsAYq0Q3oWiDjY4yYkTYVFXenMB8GA1UdIwQY
MBaAFHJOpBh47pE358k9bc0x0CDsP+RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAt
OGQzM2IyYTJmZGU4LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAtOGQzM2IyYTJmZGU4
LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZeWkSNs
QEkZqyje+RCPbJEm5ta+EAhcb7bA3yFWmEcD+GGUJbVo5je2ooqNp5F1tCoksEak
nLYOZGNVvvsgQ9l5OPjX5Gh9gN4oM2GTe7fe5kvl2Lizc3DBgBAT6CTrq2uGKQ79
MtH0DYM08LnM99AuiV1kEALcg9W5Ch34ttRNnLJo+Y/gKFWi0Zjcr8v4DX4M47Em
tw1QF49gZfx+rN7hwKJxTIVUXpCbcte4pCHKPUQTZruUo27Euc1w42yBm/9lffeV
b8T/gODwv5U7QrxbcOVdUcL5tKG7PVtjREA2mwKbiHY7ZUawiuGfPMJcHJiFSMXP
jfgy8DB3OreJVg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 06:48:31 2026 by rpki-client