Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: IrE+g1+D5gDjdiEu2ouMy2fyU9/Z0d49LAR7GH/z/V0=
Subject key identifier: 45:86:2B:91:F9:AB:22:B3:5C:36:4E:A9:6B:AC:C4:D7:AF:49:C8:DC
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 019D27A8834E9468C3EE75F5BA46484B4F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 0201
Signing time: Thu 26 Mar 2026 01:00:48 +0000
Manifest this update: Thu 26 Mar 2026 01:00:48 +0000
Manifest next update: Fri 27 Mar 2026 01:00:48 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: CfdxqyzoQ+5dZh0iBwwW62Bu4ucdZEF11VstCq/A0pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:83:4e:94:68:c3:ee:75:f5:ba:46:48:4b:4f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Mar 26 01:00:48 2026 GMT
Not After : Mar 27 01:00:48 2026 GMT
Subject: CN=45862b91f9ab22b35c364ea96bacc4d7af49c8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:da:47:c3:66:fb:08:c4:0e:e3:41:d9:e4:
84:11:45:9a:6f:aa:4b:a1:e8:be:14:f3:88:b7:c6:
00:ad:9c:55:78:46:f7:c6:41:3c:3d:d8:7c:a2:d6:
de:79:ac:19:5b:2d:34:04:d5:50:ec:41:a9:c4:78:
54:17:96:30:9a:bc:bd:0d:8a:58:5f:68:f8:10:c1:
cd:1f:3a:c9:b0:cd:2c:e5:20:18:e4:1b:30:a8:7d:
9d:cc:cf:f7:b6:dc:87:8a:73:a6:32:0e:e0:f9:cb:
40:8e:12:a2:f6:c8:66:71:a9:0b:21:7c:75:0b:80:
05:5c:e4:61:30:32:7c:ba:65:4c:a4:28:19:60:2c:
6a:28:77:7b:ae:9e:c1:96:64:0f:84:3a:ce:48:53:
89:f5:cc:54:ce:7a:79:59:d4:98:ab:48:82:35:1d:
2b:df:dd:e6:7d:db:73:da:45:04:ba:1b:33:96:b6:
4a:d0:2e:c8:ff:f0:fb:89:1f:24:f6:c0:74:86:8b:
ac:54:37:7c:a8:79:a4:e5:56:cb:39:55:42:11:69:
94:50:9e:f3:a9:1c:c9:aa:b9:f7:74:10:f0:80:10:
75:e9:82:cd:c6:e0:5f:bc:98:73:b8:a9:f5:c3:b8:
e6:dc:c6:b7:e9:b5:0c:46:76:b1:1a:ad:2c:0c:30:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:2B:91:F9:AB:22:B3:5C:36:4E:A9:6B:AC:C4:D7:AF:49:C8:DC
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:59:70:da:51:d2:1f:aa:98:ea:fa:11:8d:ef:ee:50:ef:12:
f7:35:00:99:17:f3:06:a0:4c:f9:92:0e:88:0c:32:13:f2:7b:
5f:a9:8f:0e:26:1c:76:2d:39:64:a9:72:dd:00:fd:8a:77:95:
37:29:a4:4f:3e:e2:c0:e6:1a:f9:4e:7b:ba:8c:66:fe:1d:90:
1f:e0:fd:1e:7f:28:af:a8:59:54:53:67:87:eb:8d:3b:40:ed:
6a:f7:5b:5c:41:0a:63:2e:9b:69:c6:ee:99:d6:0e:47:d7:cf:
3e:2e:62:14:7e:1f:54:e1:dd:fc:3b:35:61:e3:5f:8d:9e:5b:
e1:b8:58:46:80:ef:99:e5:ea:fc:97:94:0d:a6:12:61:68:6d:
f2:01:4e:b4:41:c0:1d:26:f3:72:9e:db:e1:79:3b:17:56:6d:
97:58:4c:34:e2:36:32:87:5e:36:23:19:53:7a:8f:f2:8b:54:
c0:45:27:bc:18:11:c7:a0:5d:c4:94:10:1e:3d:12:0a:1e:be:
4c:13:cc:f0:a0:ab:df:f1:3c:c9:fd:b2:3b:be:13:27:03:fa:
79:51:e1:24:36:88:49:58:89:55:94:c7:12:6f:47:1d:9e:8b:
4f:fd:85:39:2b:a8:6c:9d:9f:6b:6a:15:7c:90:44:85:61:f9:
cb:89:67:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:26 2026 by rpki-client