Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: HYLRh3Suf+k5efEM3ziCoX1ncoicDCeqgIMUwjsacMQ=
Subject key identifier: 8E:8B:36:A8:D6:14:04:90:A4:D4:1C:3C:C1:3D:A9:6A:4D:A2:70:60
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 019D371BC80641B57240BCBBEAAD3A9E0F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 0209
Signing time: Sun 29 Mar 2026 01:01:00 +0000
Manifest this update: Sun 29 Mar 2026 01:01:00 +0000
Manifest next update: Mon 30 Mar 2026 01:01:00 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: v8iiIZqFHDr0E9bwNfZb/IEk6NbkKAuK3SpUfBwPCZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:c8:06:41:b5:72:40:bc:bb:ea:ad:3a:9e:0f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Mar 29 01:01:00 2026 GMT
Not After : Mar 30 01:01:00 2026 GMT
Subject: CN=8e8b36a8d6140490a4d41c3cc13da96a4da27060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:5b:b4:8d:f1:47:a4:03:82:2b:e8:de:35:
ed:93:4a:9e:fc:64:51:cd:bb:9a:51:84:b4:b1:88:
b9:0a:9b:53:52:08:fd:f7:6b:99:7e:44:e3:11:44:
54:aa:56:31:3a:f3:0c:aa:b4:15:cb:bc:b6:d1:59:
e1:23:43:08:6c:8b:f8:81:41:36:c2:06:2c:16:6d:
68:2e:34:3d:15:a8:8b:ab:c5:2b:e1:e4:35:85:1f:
32:ae:10:41:b2:74:fc:50:23:79:b3:61:c5:9b:00:
6c:b8:d7:e6:f8:ba:d0:ce:42:54:74:de:36:b0:55:
7f:1f:64:b1:f3:3e:90:7b:0e:30:76:fe:ea:a8:a0:
46:47:6d:13:ce:4d:b7:1c:9a:df:df:b9:13:f6:09:
2a:c5:54:6e:ed:d5:84:9b:f7:fa:aa:4b:a0:32:58:
c1:48:25:68:b4:a1:a1:15:42:82:7a:08:2f:fc:12:
a3:e2:80:d1:42:35:25:7a:fc:d7:6f:0f:9f:e4:31:
90:f1:59:93:4f:93:9f:af:47:52:a2:c9:29:da:92:
ba:77:b7:1a:e9:e6:00:01:49:21:7b:16:1f:d6:e4:
94:4d:66:9b:2d:0b:48:8b:5c:ce:5d:8e:37:5b:6d:
39:cf:52:1c:7a:c3:97:48:fe:bb:f0:e3:50:7b:27:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8B:36:A8:D6:14:04:90:A4:D4:1C:3C:C1:3D:A9:6A:4D:A2:70:60
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:36:69:51:7a:ae:93:85:fe:73:08:53:01:cb:5f:7d:5a:15:
f2:75:ce:16:93:38:f8:3e:8f:e8:60:26:f9:2b:6f:07:66:e9:
82:26:a8:73:2b:04:fc:5d:e3:b0:b9:54:51:f0:5c:10:e3:c1:
5a:75:36:97:1e:1c:00:78:db:1c:36:ff:d4:97:6d:d9:c1:66:
13:ed:1e:63:3d:fc:a6:d4:24:b2:94:49:3e:09:4e:45:4d:47:
6b:31:3d:03:24:f9:0c:f2:47:ba:27:45:c7:42:86:0f:0c:b0:
10:26:46:07:d0:ff:2a:02:2c:2a:33:2c:7c:d2:8b:0a:43:fd:
0d:75:0c:a3:f2:56:c6:da:a4:0e:ef:47:27:0e:6a:2a:ff:dd:
3b:8e:ae:9c:66:46:3e:ff:f0:9b:93:84:7e:3f:68:4e:77:3f:
d2:7b:e5:81:da:27:f0:b6:c8:2f:8e:42:ab:8a:a2:f5:ce:19:
c6:2b:07:ff:f5:42:52:db:f2:d3:64:c1:18:d8:aa:45:9d:d0:
83:c9:77:18:30:b2:eb:36:53:67:c8:d6:a2:fc:02:56:8f:8f:
53:5f:4a:d1:cf:e2:ef:20:10:cc:81:35:76:2a:02:ca:5c:a9:
09:ce:6b:70:bc:6b:2b:2c:17:cb:7d:ab:ab:b2:71:b8:7d:5e:
41:0e:bc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:20 2026 by rpki-client