Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.mft
File: _XG6v3rWzBDWx2Tz5WrkFcHEX6A.mft (raw, json)
Hash identifier: RmjhB6IJz4XD2ur3Hc4wZsWx3ljJgY1jGZlcDM+N4Kg=
Subject key identifier: C6:E8:7B:1C:62:14:08:A7:09:1B:65:EA:D5:B5:B1:84:FB:8B:59:22
Authority key identifier: FD:71:BA:BF:7A:D6:CC:10:D6:C7:64:F3:E5:6A:E4:15:C1:C4:5F:A0
Certificate issuer: /CN=fd71babf7ad6cc10d6c764f3e56ae415c1c45fa0
Certificate serial: 01A12AD716B8DA690FDE7CE0870FBD166C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.mft
Manifest number: 77
Signing time: Sun 11 Oct 2026 12:01:41 +0000
Manifest this update: Sun 11 Oct 2026 12:01:41 +0000
Manifest next update: Mon 12 Oct 2026 12:01:41 +0000
Files and hashes: 1: ROLB9Mjn_CZgxTvW4BQk8AHfg6I.roa (hash: 2ep/pOW0R9I7zZ6fjDatO/bNW3VCn7ZijHQTLotnUyc=)
2: _XG6v3rWzBDWx2Tz5WrkFcHEX6A.crl (hash: nxOssOoUVwp3avxQimW+eZtWqjpN2DFKas7EkOXA184=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d7:16:b8:da:69:0f:de:7c:e0:87:0f:bd:16:6c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd71babf7ad6cc10d6c764f3e56ae415c1c45fa0
Validity
Not Before: Oct 11 12:01:41 2026 GMT
Not After : Oct 12 12:01:41 2026 GMT
Subject: CN=c6e87b1c621408a7091b65ead5b5b184fb8b5922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:54:94:cc:e7:39:5e:27:47:94:4f:a1:c7:
97:e7:f7:0b:d0:21:fc:be:47:0f:7d:17:98:5c:9a:
6c:40:ba:01:01:10:48:67:f1:7e:de:95:ac:96:c8:
c7:8f:4f:61:5a:52:61:a5:b5:74:e4:ab:e7:64:e1:
27:7c:63:a5:fb:64:ab:22:e1:06:c9:a1:f9:0e:39:
66:a9:23:5a:2c:71:4a:07:f4:35:33:bb:bd:5c:41:
f9:37:01:2e:f0:b0:97:35:9a:d6:bf:3c:a8:a3:9e:
ff:17:8e:0c:1f:3e:08:91:53:17:d8:bf:48:02:38:
ef:b4:94:76:a3:dc:49:61:f3:a6:b5:c2:ee:a2:b5:
63:21:91:c7:c9:5c:b9:af:de:42:4c:3a:bc:ae:ac:
18:96:5c:9e:79:e7:79:73:68:ee:6f:2e:8e:29:da:
85:2a:1a:cd:18:e4:75:61:95:d1:02:a2:ef:4e:77:
49:f3:8f:1e:ac:d4:30:f2:34:88:9c:d2:f3:e0:cf:
1c:3c:b0:c8:4e:a2:4e:e9:fd:25:c7:a7:50:82:99:
f9:d8:af:46:86:0c:3a:e6:5b:cb:cb:70:46:2f:72:
6c:b0:32:8f:5b:50:34:1b:14:05:72:8e:57:50:36:
1e:90:71:60:85:6b:b1:be:18:41:49:d0:4d:4c:a3:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E8:7B:1C:62:14:08:A7:09:1B:65:EA:D5:B5:B1:84:FB:8B:59:22
X509v3 Authority Key Identifier:
keyid:FD:71:BA:BF:7A:D6:CC:10:D6:C7:64:F3:E5:6A:E4:15:C1:C4:5F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:db:ac:d9:80:03:9f:5b:e6:87:ce:82:aa:e1:14:0a:3f:3e:
a5:29:42:20:e9:0c:b2:bf:1f:d7:13:1a:9a:cb:4f:e1:ba:18:
45:54:1b:c5:02:4d:7e:0b:2b:60:e9:91:a5:f9:81:80:0a:94:
ac:55:83:03:c1:e2:7d:0d:c6:2c:81:dd:41:00:5b:fa:5a:9b:
49:65:3b:19:98:5d:f9:96:8e:e1:d9:67:4e:40:18:97:a3:e5:
18:9d:08:91:a2:06:21:de:42:66:fa:b6:20:99:00:17:8a:d2:
a5:98:cb:35:c7:ed:36:a4:56:58:60:2a:78:1d:24:84:9a:73:
55:35:7b:11:6e:87:f7:a7:ff:1a:8d:d5:95:b3:f5:b2:0a:81:
3f:8b:9b:08:23:18:7d:34:a1:e4:f2:e7:a3:60:d1:12:4c:45:
10:6e:2d:5e:96:66:49:d9:38:8e:4b:1e:60:5d:65:e8:48:f5:
7e:07:7d:37:62:7f:39:a5:d5:b9:74:37:59:a5:26:c8:89:94:
8c:94:9f:de:7b:b2:6c:26:f7:95:c2:4e:96:49:18:46:19:32:
fa:fb:ed:ce:f4:da:d7:5e:3b:ca:89:77:e8:41:38:c9:83:4e:
7d:5f:f8:f0:9b:f0:a8:13:72:42:f0:3f:c3:b1:12:62:cd:42:
7a:77:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:45 2026 by rpki-client