Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: hOzXB74THx9krevSYPKxNlCyzDxjVPLvhhfM1aKxfvI=
Subject key identifier: E0:6C:46:F4:75:57:F0:C9:97:9B:9B:03:5F:9B:4B:EF:5B:43:99:1D
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 01A18F42BC761FB3F340C28D1CE2CCD8A627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 1AD0
Signing time: Sat 31 Oct 2026 00:01:17 +0000
Manifest this update: Sat 31 Oct 2026 00:01:17 +0000
Manifest next update: Sun 01 Nov 2026 00:01:17 +0000
Files and hashes: 1: PUAOGeZbC3q2hI4As6WIL56mug0.roa (hash: h0a5phhn/DN6rizIGXnIA2GO7M+qY/ayzPh0XbIIIlg=)
2: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: 7up7flNABU9E1yOE9TBBLxgiWgDxPOb0MzVYSZx3R3Q=)
3: vrE3hwEnS1QTByXaca8_W_PJzRA.roa (hash: OeImgN/hpE2K0k56AQ1gCUZZMDfEiohfiJN6dfI77C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:bc:76:1f:b3:f3:40:c2:8d:1c:e2:cc:d8:a6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Oct 31 00:01:17 2026 GMT
Not After : Nov 1 00:01:17 2026 GMT
Subject: CN=e06c46f47557f0c9979b9b035f9b4bef5b43991d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:65:29:a1:ab:af:e1:83:6b:9c:c7:aa:94:
01:5f:06:f7:a6:58:e7:f1:cc:5e:b8:71:81:6c:3e:
ac:11:2c:97:62:30:5e:4e:cd:be:a7:7d:46:9d:f4:
a0:3f:67:64:ef:d4:7e:23:88:bb:94:27:9d:c6:2b:
34:32:b9:45:78:33:c1:49:ce:0d:34:3e:5b:f6:bc:
0c:1f:93:ac:03:34:fd:99:79:f0:25:ff:01:6c:9d:
e8:93:c6:aa:0a:b0:39:9f:fb:40:b9:ff:26:20:b9:
d1:88:9f:37:64:7f:a1:67:f8:68:f2:db:24:df:8c:
6a:75:1b:84:df:6c:9f:57:62:63:b9:7b:8b:b9:24:
d8:a1:2a:86:1f:76:5f:2d:e6:1f:99:c4:68:aa:e0:
5b:dc:32:fb:88:53:c7:77:e1:78:7b:4d:7f:c8:cd:
7d:1d:00:3e:5b:1e:62:c7:9b:0b:f8:d6:e1:ff:6c:
e9:82:d5:7c:63:34:28:82:1e:ad:4b:e8:eb:7a:f0:
13:c9:72:fd:f8:8b:ed:43:b1:45:18:59:04:d2:4e:
65:41:b1:11:04:89:cb:a5:d4:19:e5:24:04:5e:c0:
f0:b0:41:11:28:db:2a:f6:ea:f8:fa:d2:4d:c5:4b:
f1:ae:7e:02:29:a2:59:51:8f:18:c8:90:39:ce:74:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6C:46:F4:75:57:F0:C9:97:9B:9B:03:5F:9B:4B:EF:5B:43:99:1D
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7a:42:0f:e6:d0:df:58:b5:01:05:bb:13:71:32:cb:bb:95:
0a:02:ed:a0:41:9d:ba:ba:11:8e:1f:11:be:0c:b1:d2:40:0d:
74:a7:dc:0f:32:92:7a:79:ac:8e:51:cb:53:72:c6:af:6e:ee:
ad:85:7f:f3:62:60:a6:60:6b:56:70:a8:83:6c:7e:85:1e:de:
73:94:6b:15:a4:87:f2:d4:7e:b4:e3:df:a2:d1:9d:ce:20:fa:
46:31:f5:50:93:c4:fe:11:ea:b8:af:b5:9c:d4:78:ec:ed:ec:
c3:14:29:05:ec:46:d4:48:f4:0f:8d:b2:de:43:83:76:1c:d8:
99:98:3c:6f:ee:7d:ea:91:5b:55:25:ad:c4:4f:b9:e0:a0:f1:
d5:d3:02:79:06:5e:24:55:54:d6:0a:f1:44:a0:e5:b4:d0:1b:
74:38:25:11:b0:91:6c:a8:94:04:b3:c2:39:af:d9:f3:a8:21:
c6:97:fb:6a:a3:17:4b:4c:a0:26:b1:5c:9b:1b:00:8f:76:34:
4a:ad:fd:2a:99:b9:50:66:32:28:91:38:1c:0a:ef:dd:60:09:
6e:8f:ed:95:03:3b:b8:ff:1b:73:fd:17:ec:1b:ee:44:eb:f2:
f2:db:b5:cf:27:d6:e3:a0:02:3c:55:ef:ad:a0:e4:d9:aa:e8:
ab:ae:cf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:17:11 2026 by rpki-client