Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: aT8yP48ufVWwa0b0jqPlvU1AxhZyVZWXdFuXZhqtgvY=
Subject key identifier: 25:3E:D6:95:BA:5E:64:05:45:5B:77:DA:CE:1E:30:19:16:8F:98:27
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 019E1CEBE678219E0A3F437792D79C8D35F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 0280
Signing time: Tue 12 May 2026 16:01:22 +0000
Manifest this update: Tue 12 May 2026 16:01:22 +0000
Manifest next update: Wed 13 May 2026 16:01:22 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: yKgu1JSuR697wKy4jCO8iVN0SjZPKHMoIMJH5h1Tgao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:e6:78:21:9e:0a:3f:43:77:92:d7:9c:8d:35:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: May 12 16:01:22 2026 GMT
Not After : May 13 16:01:22 2026 GMT
Subject: CN=253ed695ba5e6405455b77dace1e3019168f9827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:0e:eb:96:af:85:2e:08:df:6b:30:c4:6a:
c4:cc:52:ae:31:ba:ab:ec:b6:8f:e9:85:fc:ab:b7:
45:80:3a:b5:00:3f:61:7a:a2:ed:4a:44:1c:b2:74:
33:6d:c4:3d:00:b3:f6:ac:73:ce:c3:8b:50:7d:9b:
e2:12:cd:4a:b7:dc:4e:9a:00:77:e4:23:53:1e:a7:
e7:69:89:26:a0:3b:52:c0:2f:75:61:53:8a:5a:67:
e8:97:68:58:1e:91:b7:6d:bf:ce:99:08:63:6e:58:
7e:ce:9f:d0:d1:74:45:ba:59:9d:7d:66:f5:9f:61:
b7:3d:7b:d1:23:29:d4:ca:23:d7:40:a2:7a:c5:33:
cd:60:25:c8:e1:ee:26:1e:c1:f2:93:30:20:54:44:
e8:04:dd:8c:3c:f1:c7:ff:5b:58:3a:fa:32:26:75:
c3:68:ef:ba:89:7a:22:e1:da:4e:69:c0:0f:27:22:
d5:b3:88:ff:d6:71:ca:69:ff:a5:ae:a2:5a:03:f6:
0e:18:53:06:8e:17:75:de:03:a5:a0:92:6f:dc:c1:
32:05:96:72:d0:f1:19:8b:e4:69:19:47:9c:f1:54:
98:a8:06:18:4d:5e:2e:59:81:cd:6b:a7:6f:58:e3:
61:f5:54:0c:70:06:40:be:ed:43:4d:81:de:74:b0:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3E:D6:95:BA:5E:64:05:45:5B:77:DA:CE:1E:30:19:16:8F:98:27
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:47:18:d5:71:c2:ea:cd:e5:88:a5:00:3e:5a:2f:73:20:b4:
0f:42:a9:3a:46:63:66:a3:43:c9:f2:bd:14:6a:5c:e9:9b:64:
a3:ae:98:c8:72:ab:48:73:59:18:15:bf:4d:7e:d5:3e:27:eb:
f0:fd:ef:ce:2d:17:71:35:bd:55:1d:35:19:60:34:3c:ca:4e:
37:62:20:2e:6c:79:d0:6d:ee:ba:c8:d8:a6:96:d9:fa:0e:88:
12:c6:c5:75:a1:45:c6:5a:d8:60:38:97:f4:e3:79:17:9f:6e:
71:eb:cd:d9:50:a6:59:e9:50:c6:db:d0:85:4b:dd:04:ff:9c:
85:00:3c:7e:39:9b:78:15:3d:ba:f7:08:16:b2:b9:24:e5:42:
64:b8:c7:82:83:d8:9b:95:aa:ac:28:ca:26:3a:8d:59:d9:6f:
06:51:4c:75:e3:c9:ba:b5:79:cf:f4:fc:35:f0:d9:c5:28:ee:
b9:d6:9a:c5:05:57:e2:aa:01:f4:1c:ec:c0:b5:c3:7a:70:22:
b1:74:16:a8:b5:71:84:a6:42:21:73:33:b3:97:e2:31:69:1e:
cf:3d:e8:9c:ec:fd:31:10:58:4c:c9:1a:5a:17:87:91:95:35:
a6:6f:52:16:8f:74:18:61:50:af:c2:d0:82:0e:b7:b3:c4:03:
52:af:aa:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6+Z4IZ4KP0N3ktecjTX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNGVhNDE4NzhlZTkxMzdlN2M5M2Q2ZGNkMzFkMDIwZWMz
ZmU0NjEwHhcNMjYwNTEyMTYwMTIyWhcNMjYwNTEzMTYwMTIyWjAzMTEwLwYDVQQD
EygyNTNlZDY5NWJhNWU2NDA1NDU1Yjc3ZGFjZTFlMzAxOTE2OGY5ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZQO65avhS4I32swxGrEzFKuMbqr
7LaP6YX8q7dFgDq1AD9heqLtSkQcsnQzbcQ9ALP2rHPOw4tQfZviEs1Kt9xOmgB3
5CNTHqfnaYkmoDtSwC91YVOKWmfol2hYHpG3bb/OmQhjblh+zp/Q0XRFulmdfWb1
n2G3PXvRIynUyiPXQKJ6xTPNYCXI4e4mHsHykzAgVEToBN2MPPHH/1tYOvoyJnXD
aO+6iXoi4dpOacAPJyLVs4j/1nHKaf+lrqJaA/YOGFMGjhd13gOloJJv3MEyBZZy
0PEZi+RpGUec8VSYqAYYTV4uWYHNa6dvWONh9VQMcAZAvu1DTYHedLD87QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU+1pW6XmQFRVt32s4eMBkWj5gnMB8GA1UdIwQY
MBaAFHJOpBh47pE358k9bc0x0CDsP+RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAt
OGQzM2IyYTJmZGU4LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAtOGQzM2IyYTJmZGU4
LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkcY1XHC
6s3liKUAPlovcyC0D0KpOkZjZqNDyfK9FGpc6Ztko66YyHKrSHNZGBW/TX7VPifr
8P3vzi0XcTW9VR01GWA0PMpON2IgLmx50G3uusjYppbZ+g6IEsbFdaFFxlrYYDiX
9ON5F59ucevN2VCmWelQxtvQhUvdBP+chQA8fjmbeBU9uvcIFrK5JOVCZLjHgoPY
m5WqrCjKJjqNWdlvBlFMdePJurV5z/T8NfDZxSjuudaaxQVX4qoB9BzswLXDenAi
sXQWqLVxhKZCIXMzs5fiMWkezz3onOz9MRBYTMkaWheHkZU1pm9SFo90GGFQr8LQ
gg63s8QDUq+qsA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:19:31 2026 by rpki-client