Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
File: _6AZpcGWu9HMF9Go02xNZX84FqA.mft (raw, json)
Hash identifier: ZTRoeBnsg2ybI0yBT1ft++opgD6AKpOOpuSOh4dmPf0=
Subject key identifier: 53:98:49:82:57:C8:4B:2D:56:AA:14:BB:39:A6:03:0B:1A:96:CA:D7
Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
Certificate issuer: /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Certificate serial: 01A17E4F8ED27F79BECCAF51C3ED85A359E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
Manifest number: 0376
Signing time: Tue 27 Oct 2026 17:01:45 +0000
Manifest this update: Tue 27 Oct 2026 17:01:45 +0000
Manifest next update: Wed 28 Oct 2026 17:01:45 +0000
Files and hashes: 1: UBIEdD9qA-F9T8nxlsMSK5FtYzE.roa (hash: jOYSslPxBrJRqsrU66rP66QSxw2oakgO9xp5/EB14jA=)
2: _6AZpcGWu9HMF9Go02xNZX84FqA.crl (hash: gFeWVTK8ZCwmztfOilnuZft1Y6qzdBN9Ta9vTXwt90o=)
3: cHHYrdipeY5NlcG_Etj-ESKeV-E.roa (hash: cMykkeb+MqrwdvTEyDZmptksYNLf1s6n3czlPS8jDMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:8e:d2:7f:79:be:cc:af:51:c3:ed:85:a3:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Validity
Not Before: Oct 27 17:01:45 2026 GMT
Not After : Oct 28 17:01:45 2026 GMT
Subject: CN=5398498257c84b2d56aa14bb39a6030b1a96cad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:bd:c8:27:b9:88:91:ae:f7:fe:8c:a1:97:
49:48:a6:1f:c7:b5:c6:d8:ed:b5:e1:93:e5:9b:49:
93:b6:11:ee:8b:0c:42:2e:00:0c:22:b7:f8:ce:f3:
4e:d2:41:2b:58:5b:be:0e:86:7d:3b:b7:bc:3b:21:
72:63:21:a9:06:cf:7f:8b:f9:f1:8c:4d:2f:eb:5a:
27:b7:44:1e:a1:a1:50:6e:0e:0f:56:8e:74:f6:53:
f5:19:e6:3b:14:04:25:56:44:f9:5a:bd:dd:0b:f8:
31:65:5c:89:a6:79:f2:9c:bc:8a:ed:c1:fc:7e:89:
4e:9d:e4:89:7c:db:93:5e:21:01:db:4f:71:4b:49:
fe:ae:bf:22:97:d4:02:5a:23:fe:fa:d7:40:ff:db:
af:9f:46:e0:33:fe:f6:db:8e:0d:16:ba:97:01:fe:
fd:7c:1b:08:e2:4a:e0:2c:46:82:fd:b9:dc:39:3e:
03:3b:62:30:50:ad:2d:ff:1a:02:04:02:1c:88:71:
dc:2e:39:86:c5:49:45:25:be:47:d3:4b:17:c7:15:
be:fe:a9:5d:aa:f9:63:db:f6:5a:55:99:bc:36:78:
23:54:0c:8d:e8:c1:6b:37:2c:a4:82:a6:ad:5b:14:
7d:a8:80:94:99:42:79:f7:28:1a:21:5e:6a:7d:15:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:49:82:57:C8:4B:2D:56:AA:14:BB:39:A6:03:0B:1A:96:CA:D7
X509v3 Authority Key Identifier:
keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:40:89:0d:01:52:21:3a:c4:6c:0e:6b:f1:e1:5d:1c:0b:8c:
3f:61:17:bc:53:77:d9:c6:b6:f5:66:43:09:90:72:51:a2:ed:
51:d7:21:c7:83:a2:a2:ed:1d:b5:72:0d:e6:5f:7a:8b:46:aa:
cc:fe:67:12:18:7b:36:fb:38:ba:90:e7:fb:84:52:f6:c9:82:
ab:25:42:bd:35:2d:27:36:85:1d:be:90:f3:d9:0e:e2:06:0e:
fb:e9:f9:89:a1:e5:12:b7:f3:17:63:1b:f1:7f:82:81:28:17:
7e:fb:70:95:28:3d:84:b8:7e:64:f0:bf:8f:24:6f:00:c8:e6:
70:91:be:dd:2c:db:20:c3:ff:31:ab:34:5a:64:6f:16:bd:e5:
90:b5:4e:e1:39:c5:28:3a:4e:f3:c4:ea:68:4e:00:e7:6a:fd:
53:9e:a0:00:f6:9f:b7:4c:1d:be:d7:44:49:fd:14:81:bd:82:
c4:0a:cc:6e:35:ed:1d:d5:c6:18:ff:74:2c:7a:cb:d1:1d:b9:
5a:cb:78:a0:43:fb:9d:bf:2b:35:3a:35:4f:ae:03:6a:96:2b:
8b:c7:ad:b4:2f:ac:42:64:5a:2f:43:f6:d2:72:5d:90:ca:61:
13:81:91:c4:8f:0f:47:ce:62:2d:49:e2:4a:23:4b:ef:10:11:
c5:0e:de:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 19:39:00 2026 by rpki-client