Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: lmOSD9ZDw1RCBUArTxRa+ABZR9BZqgfngUmPkiAAYxE=
Subject key identifier: 57:D5:0A:F1:24:50:04:11:7A:01:1F:99:7D:2A:09:A5:E2:9B:4A:C9
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 019D38D3C99803C874AD3AB510EC5B8CEF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: PUAOGeZbC3q2hI4As6WIL56mug0.roa (hash: h0a5phhn/DN6rizIGXnIA2GO7M+qY/ayzPh0XbIIIlg=)
2: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: liXXFUK8FdonfFBWcrHHLo1Bi/mrooeiYGQ4liuygh0=)
3: vrE3hwEnS1QTByXaca8_W_PJzRA.roa (hash: OeImgN/hpE2K0k56AQ1gCUZZMDfEiohfiJN6dfI77C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c9:98:03:c8:74:ad:3a:b5:10:ec:5b:8c:ef:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=57d50af1245004117a011f997d2a09a5e29b4ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:55:42:9f:37:47:86:bf:98:f7:06:17:e1:
ed:d1:f1:8d:be:43:81:3a:98:e8:d3:c8:52:f7:fe:
38:d6:32:64:d7:57:58:bd:b3:d8:db:11:7a:e1:f8:
31:b5:b4:1b:b5:80:b5:00:13:39:28:39:50:32:2b:
93:e2:88:32:e9:a2:34:d1:b5:fd:35:cb:02:4b:e7:
07:b1:22:07:9a:e6:b4:e7:c8:a8:c6:17:e8:dc:de:
b3:5f:a4:5b:c9:18:d0:39:ec:97:93:6f:90:12:e0:
05:2a:80:11:e4:f0:73:54:da:d4:7f:b5:a2:63:42:
f6:4c:69:48:17:cf:4e:8d:cb:3e:7a:cc:4f:c8:ea:
63:56:fd:8c:04:11:c9:40:ca:d1:b5:1f:c7:de:1b:
13:c6:ec:4d:39:53:a8:94:55:c2:6b:a3:ed:40:2e:
56:ff:d3:04:41:17:fe:c0:a5:8c:70:cb:af:3d:a5:
28:5f:10:a0:53:28:40:5b:06:50:1d:f8:5e:68:0c:
b2:cf:b1:9a:db:51:4c:94:7f:eb:a3:56:f1:82:77:
74:20:1f:7c:45:9c:b2:ee:de:54:48:be:92:41:eb:
28:30:ca:a7:85:8f:a6:f6:5b:29:b6:b2:28:92:59:
29:b0:52:22:73:18:aa:ab:c2:38:e2:b9:6b:ad:8c:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:0A:F1:24:50:04:11:7A:01:1F:99:7D:2A:09:A5:E2:9B:4A:C9
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:28:db:9b:8e:cd:5d:1a:9d:92:bd:16:c1:dd:5d:fc:7d:6c:
4d:5f:6c:35:5e:4f:fe:86:73:e3:ef:55:b6:88:54:e9:a5:3f:
67:a1:95:99:97:eb:c9:cd:cb:14:d9:ff:6d:b7:1c:16:27:d2:
76:0d:2d:6d:c4:6d:20:fc:f2:b2:d4:08:07:c6:90:b4:49:a8:
59:f5:6a:fd:a0:61:33:f8:85:f2:cd:1f:c0:91:58:75:2c:58:
39:40:10:05:ce:57:ba:c4:9c:91:0d:14:c4:56:38:0c:15:8c:
81:05:1d:cc:e8:8f:3e:2e:af:d7:d9:19:db:ea:8f:a0:1f:1d:
a0:c9:87:b7:d0:4d:9f:f3:1e:6b:f3:88:73:61:e6:f9:a7:f7:
3e:8f:f1:48:4b:85:70:38:36:2f:06:b8:f1:a5:ff:7e:d6:e7:
68:9c:9c:50:0c:76:c0:1b:fe:0a:d4:e8:f0:d7:d4:91:a3:b1:
e0:5d:17:4d:bc:a2:63:9a:cf:a4:f1:52:8b:09:11:36:5b:b1:
67:85:40:d4:54:2f:3a:c0:dd:7b:ac:fe:c4:ea:83:a9:68:0c:
4f:df:a6:6e:f4:b7:48:63:fd:52:57:e8:1a:f4:1b:51:8c:51:
2f:5d:3e:9a:b6:88:f7:02:c7:03:85:75:91:65:b7:2b:0a:5f:
07:ae:5a:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0408mYA8h0rTq1EOxbjO+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTEwZmE5ZWNhOGVjOGRkZDVlMTI1NDI2NDM4ZThkZjhj
ODdhYmMwHhcNMjYwMzI5MDkwMTM2WhcNMjYwMzMwMDkwMTM2WjAzMTEwLwYDVQQD
Eyg1N2Q1MGFmMTI0NTAwNDExN2EwMTFmOTk3ZDJhMDlhNWUyOWI0YWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtppVQp83R4a/mPcGF+Ht0fGNvkOB
Opjo08hS9/441jJk11dYvbPY2xF64fgxtbQbtYC1ABM5KDlQMiuT4ogy6aI00bX9
NcsCS+cHsSIHmua058ioxhfo3N6zX6RbyRjQOeyXk2+QEuAFKoAR5PBzVNrUf7Wi
Y0L2TGlIF89Ojcs+esxPyOpjVv2MBBHJQMrRtR/H3hsTxuxNOVOolFXCa6PtQC5W
/9MEQRf+wKWMcMuvPaUoXxCgUyhAWwZQHfheaAyyz7Ga21FMlH/ro1bxgnd0IB98
RZyy7t5USL6SQesoMMqnhY+m9lsptrIoklkpsFIicxiqq8I44rlrrYwKmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfVCvEkUAQRegEfmX0qCaXim0rJMB8GA1UdIwQY
MBaAFJOhD6nsqOyN3V4SVCZDjo34yHq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84NWUwMGUtZDlhZS00MDc0LTk2NjIt
NDg3OTBmNjAwYzY0LzEvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84NWUwMGUtZDlhZS00MDc0LTk2NjItNDg3OTBmNjAwYzY0
LzEvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCjbm47N
XRqdkr0Wwd1d/H1sTV9sNV5P/oZz4+9VtohU6aU/Z6GVmZfryc3LFNn/bbccFifS
dg0tbcRtIPzystQIB8aQtEmoWfVq/aBhM/iF8s0fwJFYdSxYOUAQBc5XusSckQ0U
xFY4DBWMgQUdzOiPPi6v19kZ2+qPoB8doMmHt9BNn/Mea/OIc2Hm+af3Po/xSEuF
cDg2Lwa48aX/ftbnaJycUAx2wBv+CtTo8NfUkaOx4F0XTbyiY5rPpPFSiwkRNlux
Z4VA1FQvOsDde6z+xOqDqWgMT9+mbvS3SGP9UlfoGvQbUYxRL10+mraI9wLHA4V1
kWW3KwpfB65aAg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:54:39 2026 by rpki-client