Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: HIGi5MNhku56jARZVS9BBauwFvjO3EyRc6vjYonSH78=
Subject key identifier: E3:39:B1:97:EC:4E:29:D7:8E:B4:8B:D5:F9:16:C8:11:F4:0B:71:9E
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 01A1765E29A72668662A0BC1913DF197FEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 043C
Signing time: Mon 26 Oct 2026 04:00:44 +0000
Manifest this update: Mon 26 Oct 2026 04:00:44 +0000
Manifest next update: Tue 27 Oct 2026 04:00:44 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: px6Ys30TUyiDAOfLaYL5S/94nBxoiZIOytS4ZjKjnlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5e:29:a7:26:68:66:2a:0b:c1:91:3d:f1:97:fe:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Oct 26 04:00:44 2026 GMT
Not After : Oct 27 04:00:44 2026 GMT
Subject: CN=e339b197ec4e29d78eb48bd5f916c811f40b719e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:15:f8:79:17:2c:bd:b2:91:8b:69:1e:47:
05:37:77:0a:30:f8:64:0c:e7:10:7f:f5:d0:db:7b:
cf:4b:8f:8d:5a:8c:07:b1:a2:2f:a4:57:ea:b6:1a:
1b:2a:23:20:cb:2a:91:b1:7d:dc:8e:f7:95:99:8c:
6b:93:7b:30:13:30:5c:e9:53:58:dc:f0:db:7e:be:
6b:9c:35:a6:0a:8f:ee:71:2e:90:61:fb:71:20:88:
7a:53:1e:1f:4d:a5:1e:32:a7:0d:42:56:9e:0f:bc:
b8:05:38:d2:ce:90:11:39:e5:84:6e:9b:48:3a:b9:
3c:2f:56:c7:9b:97:82:4d:d5:f3:92:26:8a:33:b0:
a5:0f:dc:15:ac:1b:3d:04:c3:f5:4f:0b:b2:a9:bb:
d8:9f:e6:61:15:db:a3:89:7c:3a:59:87:44:ea:55:
b1:1e:09:71:d1:c9:b5:cd:6b:d5:06:bc:3f:ad:19:
22:b3:cf:84:20:cd:f1:31:ec:86:d7:e5:7a:c3:95:
4b:26:23:89:7e:c6:7a:e7:d9:c6:43:80:59:73:4c:
c9:84:fc:47:fe:77:3f:9d:4d:2e:cc:1e:0c:60:32:
fd:45:33:e1:95:50:0b:ee:1e:e1:8c:ef:bb:7d:72:
80:b8:34:1c:e0:dd:60:39:31:53:09:1f:c8:54:e3:
91:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:39:B1:97:EC:4E:29:D7:8E:B4:8B:D5:F9:16:C8:11:F4:0B:71:9E
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6c:26:29:58:6b:3c:db:26:bf:92:33:ac:82:dd:60:75:9a:
e2:a5:6e:49:19:21:e3:7b:3c:d9:91:1e:95:25:f7:36:4d:9e:
c2:fe:d1:c7:db:7f:7a:4c:2c:48:a2:40:89:94:cc:1c:0d:8e:
a8:7a:cd:27:ff:2c:c8:24:b6:79:39:d1:fa:62:6d:ee:54:a5:
7c:d9:b5:1a:52:d6:7a:d4:37:71:38:4d:1e:43:69:03:28:dd:
ee:1d:a4:62:17:a2:b0:7d:53:a5:f9:6e:40:20:6f:f2:6f:ae:
76:e3:03:9d:3b:0e:52:b1:ea:86:d1:eb:33:34:e5:1b:f6:fa:
ba:5d:de:1a:b7:9c:7c:32:d8:6a:2b:8a:5d:70:ff:49:55:2c:
b7:84:ac:32:46:c2:29:01:22:5e:e4:a7:ac:3d:32:b7:6c:96:
a3:aa:36:f9:85:ab:7e:1d:aa:8d:60:ae:95:1d:d4:86:28:b9:
50:82:50:d8:55:74:21:1c:e8:cb:93:3f:e1:9a:92:52:8a:3e:
1b:38:a8:84:bb:04:1b:c9:ca:cd:07:18:3c:f5:2d:ed:ba:d6:
92:84:f7:e8:5e:07:e4:fb:63:9d:e8:be:cf:2d:f4:5a:f0:fd:
b3:4e:fa:b4:80:6c:cb:43:e2:d8:ad:24:1c:13:1e:1c:b4:df:
a4:35:54:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:32:09 2026 by rpki-client