Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File: k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier: HCT5w8lX9lkqdTfuaEXjJ/VMt9A7QHBkBXpvp5OFeho=
Subject key identifier: 9E:CC:05:70:43:B1:6E:CA:CF:96:DF:76:07:EA:18:79:17:D8:9B:C9
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 019D2960E12766D1344847225851E29DBB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:01:47 +0000
Manifest this update: Thu 26 Mar 2026 09:01:47 +0000
Manifest next update: Fri 27 Mar 2026 09:01:47 +0000
Files and hashes: 1: PUAOGeZbC3q2hI4As6WIL56mug0.roa (hash: h0a5phhn/DN6rizIGXnIA2GO7M+qY/ayzPh0XbIIIlg=)
2: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: oPrCohjK/crKfbCAL6OIv20u6x6x1eQb/pQCNQ6awRk=)
3: vrE3hwEnS1QTByXaca8_W_PJzRA.roa (hash: OeImgN/hpE2K0k56AQ1gCUZZMDfEiohfiJN6dfI77C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:e1:27:66:d1:34:48:47:22:58:51:e2:9d:bb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Mar 26 09:01:47 2026 GMT
Not After : Mar 27 09:01:47 2026 GMT
Subject: CN=9ecc057043b16ecacf96df7607ea187917d89bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:38:4a:a7:ec:ba:fa:c6:1d:46:11:e8:81:
6d:0d:8c:76:f7:b0:33:c6:20:56:0c:ab:1d:2e:fe:
28:63:5f:64:9b:ab:5e:c7:68:4f:b6:20:e6:74:ae:
b4:e2:b5:ad:cc:9a:e8:fc:80:66:7a:7f:3b:9d:89:
25:07:5b:45:db:34:3f:8c:d0:d9:85:30:15:a0:a6:
42:62:2e:90:2c:de:64:d6:4e:38:f9:cb:54:9e:d3:
9b:b7:a5:ea:04:ac:5e:f4:bd:95:6d:e6:af:56:6a:
39:35:2b:8d:ad:b4:a0:99:98:0c:04:83:f6:4d:e4:
c2:7f:8d:1f:bd:fc:91:e0:4e:1f:21:22:81:6f:71:
75:79:5f:64:0b:1a:13:c4:18:94:6c:ab:89:14:79:
f5:13:5d:21:57:1e:bd:fa:19:3f:93:02:b4:02:7c:
09:57:f2:f8:51:40:dd:6b:3a:a2:8c:a7:be:bd:05:
d8:99:39:da:79:2e:1a:16:0f:db:9c:ea:9f:70:54:
51:12:43:84:7c:f4:14:07:a3:98:be:c7:4c:fe:db:
4d:69:25:8e:bd:51:1c:fd:19:b0:00:4e:ab:76:69:
d2:ed:63:cc:66:21:33:2b:fe:a0:9d:83:6b:78:d0:
c2:70:80:ba:94:85:11:69:56:c1:03:64:8b:15:10:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CC:05:70:43:B1:6E:CA:CF:96:DF:76:07:EA:18:79:17:D8:9B:C9
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:49:aa:39:d4:1e:33:f8:95:fc:75:22:61:fd:0f:72:1a:f4:
33:b7:6f:ca:5e:a1:8c:f6:c2:6e:00:aa:de:8a:34:8f:c5:2f:
7b:04:d2:bc:6a:91:fa:67:ff:12:26:db:77:d6:d7:1c:d7:e0:
d4:38:ca:b1:dd:d9:d7:3d:57:d0:62:16:ef:83:36:e7:5c:66:
d4:f8:6c:b7:7c:1b:bf:4f:08:45:66:26:22:27:7b:3a:77:f7:
b2:53:0e:af:ef:2f:79:8e:85:75:41:c3:ad:73:26:c4:d9:92:
6e:7a:1f:67:36:85:aa:af:98:31:b9:31:a3:48:2c:d0:84:30:
44:6b:61:98:a0:f8:53:04:3a:75:06:2e:2f:c6:27:fe:47:79:
dc:26:f5:d0:0c:6c:1b:53:e5:d2:b8:fc:e5:c5:38:f0:a0:44:
03:d2:76:a4:b7:97:7f:12:80:fe:5c:32:cd:e2:83:d8:7e:0e:
47:22:1a:00:c7:2e:eb:2c:b3:f4:72:26:ca:43:c2:dc:ab:70:
90:17:cc:d0:a1:9c:38:f7:ea:30:c9:36:fe:4b:0b:a0:39:00:
fb:e9:81:b8:04:44:7d:37:4a:79:83:1d:19:a9:2a:ed:b8:28:
d6:01:00:3e:25:43:ab:0e:ff:8f:b4:2e:f9:23:29:60:94:57:
34:0f:29:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:08 2026 by rpki-client