Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: /h3ODtmnqhsfAMjhozAFkEgF3u6AAXMkRJugh/j9WHo=
Subject key identifier: EB:F6:F7:B2:34:CB:A9:5C:82:33:44:BD:ED:F0:11:C3:88:C0:1B:C7
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 01A088D526AB88A7FD8F07C9BC17AAB0E4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 03C1
Signing time: Thu 10 Sep 2026 01:01:05 +0000
Manifest this update: Thu 10 Sep 2026 01:01:05 +0000
Manifest next update: Fri 11 Sep 2026 01:01:05 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: c6cLmq11oJz5+58ar3/OzFzGGpmNy7WcId4FU4ujVNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d5:26:ab:88:a7:fd:8f:07:c9:bc:17:aa:b0:e4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Sep 10 01:01:05 2026 GMT
Not After : Sep 11 01:01:05 2026 GMT
Subject: CN=ebf6f7b234cba95c823344bdedf011c388c01bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:cd:c2:0f:a1:cf:0f:4f:61:78:92:01:ad:
56:1c:41:22:14:ee:4e:11:75:73:1d:f5:fa:83:fd:
4e:6a:3c:c0:00:ab:7c:5d:d3:dd:8b:7f:86:9f:5a:
e9:ff:3b:1d:b2:39:af:9d:e5:e2:47:9d:e3:24:c2:
48:fa:6a:dc:51:92:13:76:f4:3b:2c:89:78:14:7e:
49:2e:46:40:17:18:3e:3a:f8:63:28:8c:d1:46:e9:
be:90:a3:37:80:20:3c:4f:fd:b6:1b:67:85:ff:8f:
fd:98:87:50:92:a6:c7:f8:77:ab:12:00:3c:99:c7:
89:cd:1d:22:de:06:23:84:03:93:34:19:9e:0d:7c:
e1:4c:7b:2a:c6:b3:7e:5f:df:32:7b:57:4a:48:3e:
97:cd:9a:62:6a:ad:b3:85:ed:02:c6:c9:84:09:85:
5c:f3:5a:94:d6:84:b6:55:85:8a:df:0b:f9:2d:91:
96:bb:c8:76:8d:7c:9c:6c:cb:6b:8c:57:74:cf:6d:
5e:6d:58:b9:71:b5:53:42:3d:cb:21:7f:53:52:aa:
c7:f4:21:b5:9a:7a:fa:6b:96:50:12:9f:45:0a:28:
55:80:e8:82:81:ff:95:0d:49:4f:bb:82:12:46:82:
26:e1:27:89:41:24:51:ff:2a:8a:df:32:53:09:6d:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F6:F7:B2:34:CB:A9:5C:82:33:44:BD:ED:F0:11:C3:88:C0:1B:C7
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:51:ee:d0:f8:05:b4:64:50:c3:e6:89:86:77:28:f2:85:b5:
ab:ed:85:4a:cd:67:3e:a9:19:f3:68:a3:e2:4d:2e:6a:ca:6c:
be:92:70:6e:b3:f9:ca:5d:3e:08:26:8a:96:db:cc:fb:6f:6b:
ac:63:99:d1:8e:2b:44:c3:08:43:dd:de:98:c3:9e:6b:81:67:
a1:39:ea:46:9d:5a:07:e9:0e:97:3e:1b:b2:b5:61:a9:e7:49:
ec:2e:e0:20:92:04:b4:36:07:f0:32:11:cd:81:e7:26:d6:a2:
65:2e:1f:87:1b:a2:fd:01:e2:fa:cf:88:1d:fb:49:2e:fe:3a:
42:9d:16:2d:8c:e5:e0:d7:f9:cb:fc:bf:a8:db:ee:39:b4:98:
87:34:0d:ca:7e:5e:c3:37:2d:f4:0a:bc:8a:53:a7:58:79:4c:
60:5e:53:b9:79:f1:f0:17:0e:5d:63:9c:15:46:d5:cc:ad:e8:
e0:64:5c:9f:12:c6:54:69:13:73:6f:87:dc:54:cc:7e:a7:6e:
7a:9f:8f:e3:38:77:7c:9c:5e:0e:ed:43:23:dd:99:27:3f:6a:
c6:9f:cc:5f:c7:4b:1b:5e:91:62:ea:87:39:1b:88:3d:66:53:
37:60:e4:4a:99:75:6c:cc:fd:c8:39:aa:79:7a:fa:75:3d:2c:
b6:f2:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:28:39 2026 by rpki-client