Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: HNulh5dWw0ygUCF816f0YnfiOHVE+rkh/1EhmPxu63c=
Subject key identifier: 72:F6:36:6A:36:17:9E:57:38:83:0F:01:22:8F:27:21:3B:F1:38:8F
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 01A1DCB91780363DE78EC126169EA70B46B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 0471
Signing time: Sun 15 Nov 2026 01:01:20 +0000
Manifest this update: Sun 15 Nov 2026 01:01:20 +0000
Manifest next update: Mon 16 Nov 2026 01:01:20 +0000
Files and hashes: 1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: gfOhasoM9XS+ddIiWdsL8ptJXLqZ/a3FVOvpR9p5DLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:17:80:36:3d:e7:8e:c1:26:16:9e:a7:0b:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Nov 15 01:01:20 2026 GMT
Not After : Nov 16 01:01:20 2026 GMT
Subject: CN=72f6366a36179e5738830f01228f27213bf1388f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:24:cf:f5:33:5d:0f:11:56:a3:ce:dc:b0:
64:60:e1:d9:aa:3c:8c:c2:0c:48:d3:71:1f:2a:75:
02:52:57:e9:68:9b:82:50:ec:c7:f1:22:d7:bc:95:
c1:c6:10:ef:36:37:b3:be:1f:b1:f8:53:01:d4:0a:
98:ad:cf:9a:da:d9:77:d5:c3:1b:2f:57:08:1d:e8:
4f:86:e4:2b:01:27:2c:a7:bb:dd:34:c8:09:c9:b7:
f1:dc:ff:d9:e6:ea:57:d7:64:31:a3:d8:83:94:21:
40:51:e2:19:ed:17:f9:bc:58:fb:64:7e:58:ae:19:
34:80:10:77:34:4b:9a:04:77:42:7e:e7:a8:c9:26:
52:11:50:ad:8f:6f:c0:b6:6f:c3:90:12:b9:13:03:
7f:55:3c:01:70:d6:44:9a:78:79:81:1a:94:54:61:
ba:3c:8e:d1:c6:fa:06:c9:b9:41:c3:b0:ea:ef:b2:
9a:3c:65:89:bb:12:c7:01:c1:b0:dc:0d:6d:c2:5f:
2e:12:a8:49:5c:ec:88:68:68:25:3b:46:81:7c:f6:
26:a4:28:21:90:ef:ec:e0:9b:79:3a:91:fe:64:20:
78:ab:00:0d:bc:17:0c:26:f0:35:da:9c:05:04:28:
b2:f0:ef:88:15:ea:8e:6b:1c:ea:07:4b:38:4b:be:
29:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F6:36:6A:36:17:9E:57:38:83:0F:01:22:8F:27:21:3B:F1:38:8F
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2a:6b:8c:2f:0b:cb:01:48:38:99:c2:95:3c:8c:3a:75:46:
8e:39:31:19:39:0f:01:dc:c1:61:f5:5d:0e:3c:e0:8f:11:f8:
43:00:2c:7f:7e:e7:da:75:1c:84:fb:90:06:27:a9:ab:0a:e5:
ec:d1:24:12:06:4e:3a:31:f2:8e:fa:a7:46:19:53:85:3c:60:
b6:3a:a2:ea:2e:cb:44:26:a8:2d:b1:11:70:f3:68:af:57:12:
9c:03:25:27:38:10:fc:f1:70:7c:b7:08:98:62:b3:59:fa:cd:
d5:39:05:53:0e:07:9a:74:d0:f3:e6:bd:8a:f2:01:b0:ae:0f:
e5:66:27:01:88:73:eb:e5:46:39:df:a3:91:96:06:ae:9a:69:
9f:58:95:b8:5e:52:a4:d7:a5:2d:e6:7d:79:49:3c:7c:c4:2f:
c3:f6:69:ec:1e:08:83:42:ff:12:d4:59:bb:92:70:27:ff:f6:
28:ee:23:69:f4:0d:77:f6:85:00:cf:c4:12:65:d1:a3:df:1f:
6f:0f:e1:63:c0:3f:f3:a4:10:3c:d9:8e:c1:f6:30:b3:bd:73:
d8:d6:ee:2f:8b:34:3c:f0:f5:f6:7e:c5:d2:e8:2d:96:24:32:
91:e1:9a:02:f4:8a:6a:0a:a6:53:b2:61:87:b5:a5:8d:13:20:
1a:13:0f:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuReANj3njsEmFp6nC0a1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNGVhNDE4NzhlZTkxMzdlN2M5M2Q2ZGNkMzFkMDIwZWMz
ZmU0NjEwHhcNMjYxMTE1MDEwMTIwWhcNMjYxMTE2MDEwMTIwWjAzMTEwLwYDVQQD
Eyg3MmY2MzY2YTM2MTc5ZTU3Mzg4MzBmMDEyMjhmMjcyMTNiZjEzODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsikkz/UzXQ8RVqPO3LBkYOHZqjyM
wgxI03EfKnUCUlfpaJuCUOzH8SLXvJXBxhDvNjezvh+x+FMB1AqYrc+a2tl31cMb
L1cIHehPhuQrAScsp7vdNMgJybfx3P/Z5upX12Qxo9iDlCFAUeIZ7Rf5vFj7ZH5Y
rhk0gBB3NEuaBHdCfueoySZSEVCtj2/Atm/DkBK5EwN/VTwBcNZEmnh5gRqUVGG6
PI7RxvoGyblBw7Dq77KaPGWJuxLHAcGw3A1twl8uEqhJXOyIaGglO0aBfPYmpCgh
kO/s4Jt5OpH+ZCB4qwANvBcMJvA12pwFBCiy8O+IFeqOaxzqB0s4S74p7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHL2Nmo2F55XOIMPASKPJyE78TiPMB8GA1UdIwQY
MBaAFHJOpBh47pE358k9bc0x0CDsP+RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAt
OGQzM2IyYTJmZGU4LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjU0ZWYtMzRlNi00OGNkLTk2MjAtOGQzM2IyYTJmZGU4
LzEvY2s2a0dIanVrVGZueVQxdHpUSFFJT3dfNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyprjC8L
ywFIOJnClTyMOnVGjjkxGTkPAdzBYfVdDjzgjxH4QwAsf37n2nUchPuQBiepqwrl
7NEkEgZOOjHyjvqnRhlThTxgtjqi6i7LRCaoLbERcPNor1cSnAMlJzgQ/PFwfLcI
mGKzWfrN1TkFUw4HmnTQ8+a9ivIBsK4P5WYnAYhz6+VGOd+jkZYGrpppn1iVuF5S
pNelLeZ9eUk8fMQvw/Zp7B4Ig0L/EtRZu5JwJ//2KO4jafQNd/aFAM/EEmXRo98f
bw/hY8A/86QQPNmOwfYws71z2NbuL4s0PPD19n7F0ugtliQykeGaAvSKagqmU7Jh
h7WljRMgGhMPSg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:05:28 2026 by rpki-client