Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: wf0/CGqwPC+LdZ3LbsCApgSckubUFDhw63jhD/LLsdo=
Subject key identifier: BC:81:AD:36:F5:3E:89:3C:F4:1A:86:9B:3D:F6:B6:C8:74:9B:85:28
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 01A18307C867BAB71956726D60BD79AF3819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 12CD
Signing time: Wed 28 Oct 2026 15:01:27 +0000
Manifest this update: Wed 28 Oct 2026 15:01:27 +0000
Manifest next update: Thu 29 Oct 2026 15:01:27 +0000
Files and hashes: 1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: /+gMbHYSh1OISBsW3kxlJmX3Vj6uTaLzu2CIBtssK3s=)
2: BDoL8rUpvbaK_16BWlbfMCNWUSU.roa (hash: GfKO3arzoWGyw+NdQY8Rv86I2fy83YtHFt/TTLJyJno=)
3: hvVtewn6w22bnIW8yznhNvKtiF4.roa (hash: m3PFir5NovTfkiQPZLXiwU+9sgPb6SDjnc3/rkv8wo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:c8:67:ba:b7:19:56:72:6d:60:bd:79:af:38:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Oct 28 15:01:27 2026 GMT
Not After : Oct 29 15:01:27 2026 GMT
Subject: CN=bc81ad36f53e893cf41a869b3df6b6c8749b8528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:8b:ec:bf:a9:1c:ef:26:b9:65:40:0e:97:
4a:13:73:95:48:ed:e5:15:2f:25:95:6b:a2:3e:05:
6b:e1:c3:8d:98:ef:66:5f:da:d6:84:57:57:9f:4a:
4c:7c:91:26:32:9a:cd:7a:d4:64:3d:42:d7:4c:16:
9d:e3:47:b7:85:ba:65:1e:ad:3c:48:fa:a1:b5:4a:
50:b0:b2:57:ec:21:09:31:d9:14:49:40:cd:53:ac:
68:31:d6:84:5b:bf:92:c1:e7:22:9c:5e:24:ce:76:
2f:cd:78:58:15:9f:62:56:8d:c6:5d:f0:ee:8a:48:
c9:b4:8f:c9:0e:6a:c4:9f:de:30:4c:ec:e3:13:8f:
f5:ba:47:84:d4:83:5b:e1:93:90:00:92:42:1a:1a:
a0:f7:e5:44:87:ca:cb:13:d4:5e:0f:c2:13:05:30:
9f:50:85:d9:9f:c2:e4:e3:6b:bb:d8:12:d7:70:25:
fd:d6:9f:02:36:6b:c5:80:28:56:8f:db:d2:7c:bb:
db:7b:0f:29:d8:f8:de:de:08:b7:b8:37:79:82:8f:
19:f6:97:73:57:ca:b5:b5:11:23:78:bf:db:0a:6c:
17:14:53:d0:60:ba:42:1a:68:1e:2c:fe:81:cb:34:
e8:f0:18:e6:b4:78:03:76:6e:fd:77:4b:ca:ed:ff:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:81:AD:36:F5:3E:89:3C:F4:1A:86:9B:3D:F6:B6:C8:74:9B:85:28
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8f:d0:42:ef:2f:c5:9c:8c:e4:04:62:75:aa:f1:36:8a:0f:
d9:d8:3e:a0:5b:2a:0c:df:d7:88:d9:46:83:25:13:5b:bb:ba:
41:44:9f:07:9d:2e:78:8e:b1:28:4b:cf:06:35:90:91:d1:f0:
7d:57:14:23:dc:b0:f8:9b:c6:f5:47:ef:a7:34:99:ac:64:14:
15:74:27:d3:8b:b9:30:80:e1:58:c3:0e:76:93:b2:fe:ae:7a:
44:4a:14:ee:c3:35:fd:05:98:c2:8b:45:74:3e:21:88:0c:7f:
04:2e:1b:56:8f:89:fb:84:ba:91:9c:f9:4e:a1:83:1b:31:cc:
e2:c9:c7:c4:e4:32:5b:27:ea:9c:92:bd:72:1d:72:3d:ef:cc:
2b:4d:70:77:15:3b:bd:b0:95:0a:b3:10:c2:8b:66:64:11:53:
1b:5d:84:4b:fa:f5:e8:dc:d9:7c:67:3b:91:f4:5e:0a:31:e4:
3d:64:15:1a:f2:89:16:ad:2d:3a:64:38:25:50:87:63:f9:81:
1c:62:ce:f6:b2:5a:ec:5d:58:b1:ad:61:c0:ed:5e:41:ef:6e:
64:86:5a:96:9b:af:0a:6b:f7:03:8c:66:ce:2a:5a:bb:44:4a:
3a:b6:b1:0f:6e:35:55:ac:5b:03:46:88:23:f4:3e:fe:a8:c8:
df:f0:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:44:05 2026 by rpki-client