Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: dFmkNZoLgiJJi68smWU4pQQmIGG5+16Jd3n8Bsnecrg=
Subject key identifier: A6:F9:17:2D:DD:A0:71:F2:D2:14:3A:69:BD:F0:33:E9:98:02:50:33
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 01A1913113D359F2861CAE54BA48E52ED715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 1AD1
Signing time: Sat 31 Oct 2026 09:01:14 +0000
Manifest this update: Sat 31 Oct 2026 09:01:14 +0000
Manifest next update: Sun 01 Nov 2026 09:01:14 +0000
Files and hashes: 1: PUAOGeZbC3q2hI4As6WIL56mug0.roa (hash: h0a5phhn/DN6rizIGXnIA2GO7M+qY/ayzPh0XbIIIlg=)
2: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: hwYzpIAytoGP3/UWzsRSKHHT78OniWIKTo4frY44JTo=)
3: vrE3hwEnS1QTByXaca8_W_PJzRA.roa (hash: OeImgN/hpE2K0k56AQ1gCUZZMDfEiohfiJN6dfI77C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:31:13:d3:59:f2:86:1c:ae:54:ba:48:e5:2e:d7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Oct 31 09:01:14 2026 GMT
Not After : Nov 1 09:01:14 2026 GMT
Subject: CN=a6f9172ddda071f2d2143a69bdf033e998025033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:d5:1b:7f:9f:fd:8d:0a:32:d9:b0:c4:9f:
35:7a:97:2f:30:b9:5a:46:e8:2e:fe:c0:0b:66:4b:
e5:e8:1b:04:71:b0:8f:12:2f:21:83:cb:53:b5:3b:
1f:a7:f5:b8:34:21:ab:81:9a:43:04:45:b4:39:5b:
c0:e6:cb:81:34:ff:86:07:c1:1a:d4:30:09:38:9a:
9f:05:de:bc:77:3e:58:5c:f9:59:1e:c1:77:5a:6b:
11:e3:e7:b6:bf:4b:22:86:d3:9c:bf:27:c0:ab:10:
43:ce:12:60:5c:e8:0c:91:b8:6d:60:b7:d9:99:b2:
4a:dd:2d:63:cc:d7:f1:ce:cd:9d:b1:06:75:ce:75:
5a:ff:0f:6e:b9:0e:5f:80:3f:64:54:af:4d:b5:8c:
8d:19:a9:cd:fc:98:4f:64:ff:e0:7a:a1:94:e7:b0:
09:ce:da:04:70:ee:67:1c:91:a3:00:2d:8e:14:be:
b5:8e:c1:28:a5:5c:a9:21:27:fe:4f:8f:b1:63:53:
37:1b:04:a9:d0:0b:9a:6c:07:f2:35:7d:43:1d:5c:
1b:52:db:46:db:04:75:70:5f:6b:b6:de:fc:5e:31:
a5:e7:e5:3e:83:2a:ce:1e:6a:85:f4:89:be:d5:05:
7c:6a:c4:39:52:ad:1e:d2:3f:6a:d7:be:62:21:08:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F9:17:2D:DD:A0:71:F2:D2:14:3A:69:BD:F0:33:E9:98:02:50:33
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:86:5a:2e:56:e1:91:fb:c1:21:c5:f7:f0:c8:90:20:17:66:
32:4e:69:0c:df:75:56:2d:c2:d2:74:58:da:77:6e:35:8d:74:
8d:87:33:af:fd:e4:8d:4b:f9:f2:6d:fe:48:7c:94:c6:35:cc:
b8:66:3f:dc:70:5d:0f:4b:69:4a:ce:a3:4a:e4:65:e9:79:de:
ad:c0:16:1e:e7:06:ba:11:81:dd:be:4e:57:f3:1e:6c:e4:a8:
49:55:ed:05:38:c5:ce:22:d0:56:52:97:f2:13:45:e3:17:c3:
5d:e8:17:33:7c:d4:ee:8c:05:4a:32:42:78:2f:05:bb:73:7d:
06:89:c3:c5:05:11:99:31:d1:0c:6f:5c:70:ab:97:30:82:ab:
96:50:8f:26:f8:67:f4:9c:9f:ab:39:20:c3:e9:f7:4c:4c:6b:
97:b7:92:5e:45:63:b4:6e:38:86:1d:47:ec:8a:8c:c0:bf:1d:
a8:b1:d4:fb:0e:03:41:64:f7:b2:66:11:eb:9f:36:5a:67:00:
d5:78:af:6e:e0:f3:47:39:8a:4f:89:1b:d5:c1:a2:ae:a5:fb:
4c:a1:09:47:2e:e1:1a:63:88:62:14:b0:a1:dd:64:2c:f0:87:
ee:ec:09:fa:77:da:36:f5:df:e1:71:c4:ca:33:e2:02:be:fa:
6c:e5:fc:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGRMRPTWfKGHK5UukjlLtcVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTEwZmE5ZWNhOGVjOGRkZDVlMTI1NDI2NDM4ZThkZjhj
ODdhYmMwHhcNMjYxMDMxMDkwMTE0WhcNMjYxMTAxMDkwMTE0WjAzMTEwLwYDVQQD
EyhhNmY5MTcyZGRkYTA3MWYyZDIxNDNhNjliZGYwMzNlOTk4MDI1MDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SzVG3+f/Y0KMtmwxJ81epcvMLla
Rugu/sALZkvl6BsEcbCPEi8hg8tTtTsfp/W4NCGrgZpDBEW0OVvA5suBNP+GB8Ea
1DAJOJqfBd68dz5YXPlZHsF3WmsR4+e2v0sihtOcvyfAqxBDzhJgXOgMkbhtYLfZ
mbJK3S1jzNfxzs2dsQZ1znVa/w9uuQ5fgD9kVK9NtYyNGanN/JhPZP/geqGU57AJ
ztoEcO5nHJGjAC2OFL61jsEopVypISf+T4+xY1M3GwSp0AuabAfyNX1DHVwbUttG
2wR1cF9rtt78XjGl5+U+gyrOHmqF9Im+1QV8asQ5Uq0e0j9q175iIQhZ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb5Fy3doHHy0hQ6ab3wM+mYAlAzMB8GA1UdIwQY
MBaAFJOhD6nsqOyN3V4SVCZDjo34yHq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84NWUwMGUtZDlhZS00MDc0LTk2NjIt
NDg3OTBmNjAwYzY0LzEvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84NWUwMGUtZDlhZS00MDc0LTk2NjItNDg3OTBmNjAwYzY0
LzEvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYZaLlbh
kfvBIcX38MiQIBdmMk5pDN91Vi3C0nRY2nduNY10jYczr/3kjUv58m3+SHyUxjXM
uGY/3HBdD0tpSs6jSuRl6XnercAWHucGuhGB3b5OV/MebOSoSVXtBTjFziLQVlKX
8hNF4xfDXegXM3zU7owFSjJCeC8Fu3N9BonDxQURmTHRDG9ccKuXMIKrllCPJvhn
9Jyfqzkgw+n3TExrl7eSXkVjtG44hh1H7IqMwL8dqLHU+w4DQWT3smYR6582WmcA
1XivbuDzRzmKT4kb1cGirqX7TKEJRy7hGmOIYhSwod1kLPCH7uwJ+nfaNvXf4XHE
yjPiAr76bOX8wg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:07:16 2026 by rpki-client