Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: z5281I9s/cOC18TcWKI0gLc7sw3ordsaD05Dd3brlB0=
Subject key identifier: B6:64:77:5A:8C:52:19:F8:B1:90:CC:17:F6:2E:5E:36:C0:22:58:26
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 01A08C7B2EE76CFDF2F41FFAFB842EE4356E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 18:01:18 +0000
Manifest this update: Thu 10 Sep 2026 18:01:18 +0000
Manifest next update: Fri 11 Sep 2026 18:01:18 +0000
Files and hashes: 1: PUAOGeZbC3q2hI4As6WIL56mug0.roa (hash: h0a5phhn/DN6rizIGXnIA2GO7M+qY/ayzPh0XbIIIlg=)
2: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: ItnmXLZnrwNFBM24Mg0xU8nfMdELDedZ75EXW8R6je0=)
3: vrE3hwEnS1QTByXaca8_W_PJzRA.roa (hash: OeImgN/hpE2K0k56AQ1gCUZZMDfEiohfiJN6dfI77C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:2e:e7:6c:fd:f2:f4:1f:fa:fb:84:2e:e4:35:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Sep 10 18:01:18 2026 GMT
Not After : Sep 11 18:01:18 2026 GMT
Subject: CN=b664775a8c5219f8b190cc17f62e5e36c0225826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:e7:85:1f:68:d2:0e:5e:8a:f4:5d:61:da:
49:64:49:06:6a:f9:f4:d5:75:68:ad:17:6b:ea:c0:
07:d3:53:b6:f0:2f:e1:5b:0f:cd:02:47:98:08:86:
7f:6d:9d:cb:4e:f2:01:54:47:3c:b7:c4:05:ab:59:
92:9b:09:06:45:84:2e:6e:68:23:e8:ed:3d:b1:2b:
47:c1:4f:00:ec:38:01:fd:2c:b0:5a:35:d3:b2:da:
ec:ee:db:34:70:01:b3:de:12:00:17:2d:40:f8:0a:
5d:0e:49:6e:a2:1b:c6:2a:36:3a:28:64:ae:9a:d7:
cd:83:92:0d:3b:57:96:00:21:7f:47:94:ee:78:16:
2c:67:43:0f:b5:83:33:cf:19:64:e6:03:a7:4c:9e:
42:6e:d1:50:0a:76:f8:b1:47:2c:b5:35:5b:46:94:
e4:8f:f8:e3:26:23:63:76:49:2c:47:97:f9:43:bb:
dd:36:73:d1:9c:46:e0:43:18:dd:8c:6e:b7:5a:da:
59:2a:72:a8:04:99:fa:f8:86:77:db:f0:e9:c0:4c:
0b:21:0a:2e:b1:cb:f5:7a:1f:93:c3:9f:e1:e8:63:
6f:d4:fd:8b:a2:74:b9:46:1d:9e:b5:7c:45:3b:ca:
d1:3d:a5:9f:65:2e:ab:a4:23:f6:6e:e0:46:52:45:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:64:77:5A:8C:52:19:F8:B1:90:CC:17:F6:2E:5E:36:C0:22:58:26
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ae:a0:8d:d7:f6:26:51:c1:71:1a:fc:11:59:2d:ce:40:26:
2e:38:b5:3c:d0:3f:0e:bf:d1:a9:a4:50:7a:c3:24:cc:31:9e:
0a:67:e4:02:03:31:ef:ab:30:d4:93:59:c2:3f:42:72:ae:23:
37:5d:80:e4:b6:bd:f1:4c:af:ea:e6:99:24:59:9b:65:9c:74:
1c:9b:ea:f1:0c:3d:3f:65:87:25:cb:ee:6b:9f:cb:f9:41:76:
36:18:a9:95:84:ed:c6:ef:c3:ae:33:9a:b2:a1:b4:54:23:0f:
2f:71:f2:1b:b1:a9:d1:19:63:19:45:03:09:c3:8b:5e:26:88:
0b:f4:1d:63:5b:ac:9f:de:1b:a7:65:a2:8e:32:6c:73:90:51:
7c:7d:59:51:60:9b:df:8c:fb:21:f2:7a:7a:60:dd:e3:69:d0:
15:e2:fa:a0:08:48:c6:4c:a9:12:14:c4:4a:23:e2:77:a4:4a:
69:66:94:30:bf:4f:6d:b8:ff:58:1d:d6:68:ba:19:c3:6e:06:
14:d3:db:3e:cc:3c:bc:75:12:08:d4:a2:22:48:b8:a9:5c:46:
ba:b2:49:d4:c7:43:66:5a:f8:1b:de:97:d1:f5:cd:c7:6e:46:
7c:01:d1:1a:f7:e7:39:d6:47:b0:77:1a:24:7e:cd:4e:1b:65:
5f:b9:fa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:33 2026 by rpki-client