Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
File: _6AZpcGWu9HMF9Go02xNZX84FqA.mft (raw, json)
Hash identifier: QFtF/+meuIHzErQi2iJyIYB+x1Ag1+xi1MtMPwFcmuc=
Subject key identifier: B3:81:15:AF:EE:F8:5F:80:CC:13:CA:4A:F7:D6:94:3F:E8:22:15:8D
Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
Certificate issuer: /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Certificate serial: 01A17C60ACB952D77D0557E60B118B4F075A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
Manifest number: 0375
Signing time: Tue 27 Oct 2026 08:01:12 +0000
Manifest this update: Tue 27 Oct 2026 08:01:12 +0000
Manifest next update: Wed 28 Oct 2026 08:01:12 +0000
Files and hashes: 1: UBIEdD9qA-F9T8nxlsMSK5FtYzE.roa (hash: jOYSslPxBrJRqsrU66rP66QSxw2oakgO9xp5/EB14jA=)
2: _6AZpcGWu9HMF9Go02xNZX84FqA.crl (hash: iFLBGh9IXULHldVka+WpQ3Wcj5UrDT5zPbThCdbUcZc=)
3: cHHYrdipeY5NlcG_Etj-ESKeV-E.roa (hash: cMykkeb+MqrwdvTEyDZmptksYNLf1s6n3czlPS8jDMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:ac:b9:52:d7:7d:05:57:e6:0b:11:8b:4f:07:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Validity
Not Before: Oct 27 08:01:12 2026 GMT
Not After : Oct 28 08:01:12 2026 GMT
Subject: CN=b38115afeef85f80cc13ca4af7d6943fe822158d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:f6:b5:23:36:13:d4:65:2e:a9:8c:4a:ad:
fd:f5:ca:ce:62:19:bc:78:c7:7d:24:08:b9:83:ef:
d6:b4:e1:0c:32:d8:cb:93:4d:3c:4c:d7:5d:64:ab:
cd:fa:f6:a5:be:fd:f0:ac:d6:c2:fb:7d:29:b1:6f:
ac:7c:a2:7d:92:2f:32:5a:89:63:2f:81:18:31:6e:
f1:14:bc:95:b7:ef:81:33:49:49:00:64:26:3b:a3:
a6:20:44:a5:73:79:f0:c8:26:8a:02:d0:8c:86:01:
87:43:db:41:b6:72:86:13:93:f5:33:63:0f:94:72:
c0:08:3c:c2:c8:a3:24:ef:40:b2:e7:e5:4c:7c:18:
33:41:d1:53:9a:61:b9:38:3b:44:92:51:09:38:db:
3f:f1:d5:57:37:5e:f9:c2:0a:7a:7c:63:fb:68:83:
66:32:c6:66:87:72:c6:26:2d:86:b3:ff:97:34:20:
c0:b1:73:5d:2e:98:4f:0e:9b:bf:54:17:7d:16:46:
82:35:ad:26:7a:0d:0c:9e:29:25:5f:77:f7:d0:60:
58:4b:d3:62:51:a6:51:fc:0c:f6:0a:36:29:39:30:
d5:91:1f:b8:2e:9b:2b:f4:bf:a7:ac:62:4e:3d:f1:
57:e4:09:2e:6b:7a:af:3b:7f:c5:c0:f9:a1:b8:80:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:81:15:AF:EE:F8:5F:80:CC:13:CA:4A:F7:D6:94:3F:E8:22:15:8D
X509v3 Authority Key Identifier:
keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5b:45:66:54:43:c9:3d:fc:2f:5e:4c:a4:9a:c8:d5:c8:36:
f6:38:5d:d2:1c:ce:41:60:a7:29:eb:66:73:d8:2e:84:9b:a2:
70:fe:10:0a:c3:e9:7b:05:34:c7:9a:82:82:75:6a:11:cc:bd:
4a:73:d8:2a:aa:89:64:41:92:f2:3a:d3:3b:57:73:c5:6f:a4:
d5:ee:2c:59:14:c9:ad:ef:f9:69:a1:03:4d:47:14:19:63:19:
f4:07:0c:89:71:d7:39:82:ae:2a:da:b1:77:b1:1c:51:e2:6b:
4b:db:f2:4d:62:c4:4f:6d:03:05:7a:57:0c:40:6f:53:c7:de:
87:77:44:46:d9:55:82:15:f5:df:c1:bc:31:5c:8a:8b:36:2b:
ec:6e:cc:9e:a9:87:db:04:ce:a7:94:54:05:f1:60:c0:c1:95:
b3:1a:12:02:c1:1b:bb:94:0b:62:b5:1e:44:46:ae:64:2f:4f:
0d:2e:0d:1b:fe:fa:4b:88:04:91:51:80:51:5a:f6:2f:ab:f4:
0b:35:f5:ab:e1:b3:03:f3:33:14:d2:e2:49:7f:b9:5e:f6:0c:
a6:b2:1b:48:b3:fc:75:0d:cb:18:63:e7:c0:da:2e:56:2f:61:
ef:bf:17:d5:19:74:92:29:92:fc:64:c2:2a:c4:e9:fd:c2:6d:
1c:3a:a2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:23:40 2026 by rpki-client