Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: YFMVQmgvaTcXcUEXf7tsTAQXP5yjyoYR2HbxwqPQBd0=
Subject key identifier: EC:CB:15:9B:FB:40:98:97:9C:61:DA:1F:C3:2F:12:5B:F5:99:2F:B3
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 01A06EA7BDB925724DF91F7F0373266642AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 062A
Signing time: Fri 04 Sep 2026 23:01:21 +0000
Manifest this update: Fri 04 Sep 2026 23:01:21 +0000
Manifest next update: Sat 05 Sep 2026 23:01:21 +0000
Files and hashes: 1: B70dl_4-b5eVhvQvZuPSWgvFpmU.roa (hash: PEnqRbyIXEVxwwcn6v1NmFYPEb0k725A2k724/MK0vI=)
2: Ka34B6rBgIn3gd6cXePqD35HsVc.roa (hash: /Qd0BtNspWGLKcZicxcHQ+co2KBYSO2WlY4JEiRzWAo=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: 4mYV37uWQw00KjqQVXzuUmXyfT5cBPQiydqzUm3znOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:bd:b9:25:72:4d:f9:1f:7f:03:73:26:66:42:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Sep 4 23:01:21 2026 GMT
Not After : Sep 5 23:01:21 2026 GMT
Subject: CN=eccb159bfb4098979c61da1fc32f125bf5992fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:f4:77:19:af:f4:7c:e0:a4:35:e2:bd:ce:
89:39:5c:7f:98:ef:44:fd:66:2f:c3:34:2a:32:1e:
85:b1:62:7c:97:2c:62:0a:c9:38:f6:ce:73:d4:9a:
5b:b3:a1:04:c5:5d:e0:ab:1d:1b:1f:a6:cf:5b:7b:
e4:e4:c8:20:5c:8b:bc:3b:3f:b9:f0:61:bc:db:03:
0b:aa:ae:37:ca:fa:75:1c:3e:aa:3a:88:46:52:b1:
dc:fa:6f:59:ae:78:4c:e8:8a:61:30:fb:da:8b:b5:
98:7c:14:29:26:d7:a6:f9:33:20:fd:90:d2:24:e7:
9c:3a:83:42:0d:5f:e5:f7:cc:0b:5b:6f:6b:be:24:
e4:f5:5f:f0:61:c6:10:41:4c:32:69:c4:80:d7:03:
b6:b0:ff:0d:bd:5d:92:19:e6:ee:32:3f:d4:8a:63:
c8:78:26:36:42:12:71:4f:27:6b:f7:62:bf:f2:1e:
a1:c1:f9:25:dc:44:d3:16:6a:c6:b5:75:ff:8f:69:
ae:e8:55:23:ad:7d:b3:e5:5c:cd:c2:14:5f:31:fd:
99:bb:c6:fe:db:62:86:fb:86:16:ad:67:ec:e2:06:
98:44:7f:5c:3f:1a:18:93:ad:d6:78:55:86:06:a1:
9f:17:7b:8f:dd:4b:44:08:9c:bf:f0:72:84:a0:8d:
20:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CB:15:9B:FB:40:98:97:9C:61:DA:1F:C3:2F:12:5B:F5:99:2F:B3
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6f:63:a7:65:4c:63:53:4e:14:f9:cb:dc:7f:d8:38:32:ab:
3d:d4:ec:70:e8:db:bd:ae:9d:e7:8f:c6:3c:c8:a9:93:d1:c8:
fc:c0:65:9e:5e:b9:56:7b:07:34:37:6b:42:77:27:8a:d8:cd:
a6:57:bf:45:e6:7c:d7:17:fc:2c:b0:96:fb:33:cf:66:e7:07:
b2:bb:4b:7f:c4:e6:c6:51:36:9d:7b:e3:dd:22:69:43:07:18:
81:51:fd:f4:60:fe:6d:ca:0d:28:c7:da:e1:ab:a1:fa:96:f5:
27:21:2e:91:6b:2a:ce:3c:e7:ce:92:11:b4:77:50:e3:77:a6:
cb:d5:21:ac:fe:74:d9:61:c9:ef:c2:02:32:75:f4:59:e4:49:
23:b3:92:e1:91:aa:b0:a9:89:fe:ae:24:01:9e:fe:d2:65:41:
df:c6:68:0b:fa:95:47:78:8f:f1:05:4e:74:19:52:f2:cf:a1:
61:ee:40:8b:64:fc:30:13:d1:53:39:7f:89:0a:38:24:16:b5:
00:cc:84:50:44:6e:e9:7e:71:5d:4b:b5:42:34:61:7a:0a:6f:
69:92:5a:15:d0:a7:e7:be:fe:9a:9d:6a:50:b9:ef:26:49:e4:
d0:74:d6:2b:af:aa:95:88:08:e4:a4:de:e5:86:2c:d4:93:da:
d7:a8:18:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:11:49 2026 by rpki-client