Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: pJ++AlxwDjCTELq8n6aTBQBBNQIv7yXRC00v0kh8jE8=
Subject key identifier: 31:38:8B:E0:CC:77:FD:CE:3A:AE:81:B1:8E:8C:F8:F7:25:93:D1:56
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 019F9391F23E805808BFB58BC708E9A661E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 0342
Signing time: Fri 24 Jul 2026 10:00:43 +0000
Manifest this update: Fri 24 Jul 2026 10:00:43 +0000
Manifest next update: Sat 25 Jul 2026 10:00:43 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: Cpc3/j4TJlSb0d5ZEVRXXZwM3PODlHMv0Fyd69AGpqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:f2:3e:80:58:08:bf:b5:8b:c7:08:e9:a6:61:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Jul 24 10:00:43 2026 GMT
Not After : Jul 25 10:00:43 2026 GMT
Subject: CN=31388be0cc77fdce3aae81b18e8cf8f72593d156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:87:8a:02:8a:1e:30:56:e0:6b:c9:21:ee:
e4:2d:b9:89:c9:70:a6:c5:1e:c1:e9:39:79:5c:e1:
16:ae:ef:da:e2:d0:a6:45:af:f2:ef:72:38:28:55:
e2:6a:62:4c:6a:47:29:cb:d4:62:78:e5:49:4d:91:
17:ab:4f:3e:58:51:76:0d:67:f7:9f:eb:0d:70:5b:
7f:39:42:83:37:e2:4e:b8:72:59:65:83:13:fe:60:
68:db:e3:22:b8:3a:7c:6c:fd:56:a9:12:3d:30:d5:
a8:d9:43:60:4b:b5:33:1f:87:57:c0:5b:57:aa:42:
08:ad:ce:3e:df:04:2e:fe:39:e0:f3:dc:db:30:f0:
42:1d:bd:98:d9:50:35:e8:c0:d9:d6:40:ce:11:3d:
be:90:e8:a1:12:7b:87:9d:ea:3c:f4:86:01:75:94:
2c:2e:45:d0:17:0c:09:82:52:6d:0f:52:6e:6b:cf:
b6:13:56:0f:45:65:50:82:65:97:14:24:e8:58:49:
91:b1:f8:0f:dc:e8:d2:16:57:54:f5:2b:23:66:09:
af:52:9b:00:a0:2b:92:0e:12:42:6e:31:0b:08:cc:
b2:47:f0:fe:80:2b:dd:8c:42:96:14:c8:22:d7:b3:
cf:a6:3e:9b:2c:80:d9:ef:00:d0:31:f2:20:f1:cd:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:38:8B:E0:CC:77:FD:CE:3A:AE:81:B1:8E:8C:F8:F7:25:93:D1:56
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f9:e2:af:66:3a:b4:25:80:62:87:ac:0a:ce:4b:52:f9:c8:
13:66:23:bb:8b:a8:80:ff:08:a7:23:85:45:11:50:50:b8:d2:
4a:18:8e:ea:1f:6b:a5:69:dc:df:39:01:8a:5f:9b:8a:a7:fe:
9b:5e:37:56:42:dd:5b:1e:5d:a5:63:6e:51:22:d2:d1:ff:0d:
f1:27:72:bf:c3:93:c4:94:3d:f3:ea:0d:a0:bd:e2:94:8a:46:
95:f7:d6:af:87:ea:cc:a5:53:62:34:ad:3d:d1:d7:d2:ce:3c:
da:ef:0e:d1:be:5d:9d:1f:6b:ce:b8:3e:30:9e:03:73:a2:dd:
52:15:6c:14:08:a9:97:24:f3:c6:1a:dd:5f:00:df:47:d2:36:
1e:7a:11:ef:f7:b2:5f:a6:47:83:87:ba:c2:77:1e:8d:39:72:
6b:e9:a8:03:eb:84:1f:11:52:ab:55:d3:11:d0:d0:6e:48:27:
6d:b2:ec:1e:36:69:25:a1:a0:43:bb:2a:21:92:14:c3:15:70:
ae:53:00:4f:76:67:bc:f3:6b:08:66:84:50:7e:c5:ec:03:37:
11:8a:4b:08:4b:49:66:6d:07:a8:b8:66:25:4c:0d:f6:32:cb:
89:d4:fc:3e:7d:ab:c7:6a:71:21:7b:3e:a1:30:99:83:65:92:
87:7e:fc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:48 2026 by rpki-client