Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: 19mLAxpsSXqsWhlQ6/IAc2Ca0XWfMGUcZpGa+Po+FgQ=
Subject key identifier: 78:8F:EB:84:F8:B1:E3:6B:49:3D:53:5F:EF:6A:2F:48:58:BA:F9:E8
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 01A0F11E5064AB43D8C0C2770633A3D6D131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 03F7
Signing time: Wed 30 Sep 2026 07:01:30 +0000
Manifest this update: Wed 30 Sep 2026 07:01:30 +0000
Manifest next update: Thu 01 Oct 2026 07:01:30 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: EfGnO2M720Cw0l2PXGMFHMSxxSCYVTbQL8+OoYAxyVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:50:64:ab:43:d8:c0:c2:77:06:33:a3:d6:d1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Sep 30 07:01:30 2026 GMT
Not After : Oct 1 07:01:30 2026 GMT
Subject: CN=788feb84f8b1e36b493d535fef6a2f4858baf9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3d:5e:12:2d:79:41:89:bf:52:cf:99:78:ec:
a1:8d:83:8b:0e:bd:d5:f0:c4:6e:3e:66:a6:b4:4f:
c8:e2:6f:00:e3:19:ac:a4:77:19:2e:03:ed:2d:33:
81:49:a3:06:1d:21:9e:95:87:e8:f3:70:65:b4:7a:
2d:a1:c9:52:9d:42:ee:2d:76:1c:9f:01:be:13:a2:
19:e9:5c:e6:a9:bb:2d:43:ac:11:82:18:8f:4c:3c:
ad:4c:b9:c7:60:56:92:83:c4:5b:f3:7d:d1:5d:29:
37:a5:c1:5a:d1:ba:fb:88:7f:c4:18:44:cf:be:21:
10:a9:22:25:b6:68:f2:95:2c:0e:71:6b:b4:e7:16:
7c:8b:0d:f9:0b:3e:f9:95:b8:30:39:fb:05:53:1f:
08:b5:03:bd:eb:50:5a:f1:a3:7a:9f:e4:a7:86:a1:
dd:1e:bf:06:d9:93:74:93:93:65:ae:a5:bb:44:79:
a4:23:2a:ff:59:cd:81:68:12:e8:e9:c3:45:13:c2:
f4:98:2b:64:18:33:63:e7:71:82:ac:c7:5f:59:78:
eb:fa:a3:22:3b:9c:75:f1:76:62:6e:04:34:d0:38:
71:85:8d:8f:5b:eb:cd:bc:fc:4a:7a:11:fe:e7:54:
a6:6d:30:e7:34:db:d0:8d:b7:c4:d3:8f:92:75:bf:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8F:EB:84:F8:B1:E3:6B:49:3D:53:5F:EF:6A:2F:48:58:BA:F9:E8
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a1:db:7f:d9:f2:c2:6d:f5:ca:90:bf:37:40:8a:ad:18:cc:
eb:e7:b4:60:ce:df:ca:3c:4a:10:94:0b:ef:51:ae:1d:71:65:
db:5b:6a:d6:e3:cc:e5:a0:66:17:cf:cd:48:2a:e1:72:d7:dc:
6d:77:ba:d9:eb:46:24:60:dd:b7:da:30:6d:9c:81:43:d9:88:
2c:90:66:27:c6:85:0c:dd:09:81:ae:ed:05:95:5e:20:4b:15:
5d:dc:65:53:d7:3d:8b:4d:1f:7c:7f:3b:67:1f:d1:ee:fb:69:
de:ca:bb:ff:c0:ff:aa:01:6b:41:bb:d9:39:21:fc:7d:a5:44:
ce:db:42:54:ac:70:0c:58:98:1c:9b:68:36:02:74:c7:49:9e:
ae:70:ba:e4:60:9a:d4:fe:f1:7f:33:3a:75:16:62:5d:d4:3d:
31:39:b7:fa:09:a6:fe:f1:c3:46:d3:0b:44:84:2e:c1:6c:75:
90:0a:1f:d6:26:a1:d1:4d:1f:37:d3:33:cf:45:8d:9f:44:83:
bd:64:77:30:18:d1:20:9d:74:0d:ee:58:ff:18:0c:4b:08:61:
5a:be:34:2d:ea:5f:76:74:0c:02:66:ae:43:72:f8:07:42:d2:
46:7c:74:9b:cf:2f:4a:25:f4:fb:9d:b6:3c:fc:88:cd:0c:39:
74:cd:c5:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxHlBkq0PYwMJ3BjOj1tExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNGVhNDE4NzhlZTkxMzdlN2M5M2Q2ZGNkMzFkMDIwZWMz
ZmU0NjEwHhcNMjYwOTMwMDcwMTMwWhcNMjYxMDAxMDcwMTMwWjAzMTEwLwYDVQQD
Eyg3ODhmZWI4NGY4YjFlMzZiNDkzZDUzNWZlZjZhMmY0ODU4YmFmOWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z1eEi15QYm/Us+ZeOyhjYOLDr3V
8MRuPmamtE/I4m8A4xmspHcZLgPtLTOBSaMGHSGelYfo83BltHotoclSnULuLXYc
nwG+E6IZ6VzmqbstQ6wRghiPTDytTLnHYFaSg8Rb833RXSk3pcFa0br7iH/EGETP
viEQqSIltmjylSwOcWu05xZ8iw35Cz75lbgwOfsFUx8ItQO961Ba8aN6n+SnhqHd
Hr8G2ZN0k5NlrqW7RHmkIyr/Wc2BaBLo6cNFE8L0mCtkGDNj53GCrMdfWXjr+qMi
O5x18XZibgQ00DhxhY2PW+vNvPxKehH+51SmbTDnNNvQjbfE04+Sdb/8MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiP64T4seNrST1TX+9qL0hYuvnoMB8GA1UdIwQY
MBaAFHJOpBh47pE358k9bc0x0CDsP+RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAt
OGQzM2IyYTJmZGU4LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAtOGQzM2IyYTJmZGU4
LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaHbf9ny
wm31ypC/N0CKrRjM6+e0YM7fyjxKEJQL71GuHXFl21tq1uPM5aBmF8/NSCrhctfc
bXe62etGJGDdt9owbZyBQ9mILJBmJ8aFDN0Jga7tBZVeIEsVXdxlU9c9i00ffH87
Zx/R7vtp3sq7/8D/qgFrQbvZOSH8faVEzttCVKxwDFiYHJtoNgJ0x0mernC65GCa
1P7xfzM6dRZiXdQ9MTm3+gmm/vHDRtMLRIQuwWx1kAof1iah0U0fN9Mzz0WNn0SD
vWR3MBjRIJ10De5Y/xgMSwhhWr40LepfdnQMAmauQ3L4B0LSRnx0m88vSiX0+522
PPyIzQw5dM3F7Q==
-----END CERTIFICATE-----
Generated at Wed Sep 30 11:58:31 2026 by rpki-client