Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
File: C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft (raw, json)
Hash identifier: HEEIhM9eccxh8TECUlh+CAxvZvb4cnoLmlB2bq8jEzM=
Subject key identifier: 98:18:18:9E:27:3B:BC:6B:85:D9:C9:BB:49:07:7B:1B:69:F1:07:72
Authority key identifier: 0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76
Certificate issuer: /CN=0ba11a46c44eecf90c6231f8456cc702ae938076
Certificate serial: 01A040173CB9CB64C62EBE85522FDAF2905F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
Manifest number: 0266
Signing time: Wed 26 Aug 2026 22:00:59 +0000
Manifest this update: Wed 26 Aug 2026 22:00:59 +0000
Manifest next update: Thu 27 Aug 2026 22:00:59 +0000
Files and hashes: 1: C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl (hash: RUuoyqEffEw+5I4C8rJia0Dhbqy1JMznMyoBMlqvllM=)
2: q7WfGeBPEEvSqwuhjuGB9MK0FR4.roa (hash: 6I5OLAD4XJOUPBEb7WYc+qrHbMwA5+oW8O7b01lul68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:3c:b9:cb:64:c6:2e:be:85:52:2f:da:f2:90:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba11a46c44eecf90c6231f8456cc702ae938076
Validity
Not Before: Aug 26 22:00:59 2026 GMT
Not After : Aug 27 22:00:59 2026 GMT
Subject: CN=9818189e273bbc6b85d9c9bb49077b1b69f10772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:4e:7b:a1:fb:ce:52:f5:c4:c8:26:96:f2:
5b:6a:fa:d7:c8:c4:97:3a:8b:c1:2c:be:ff:32:63:
3a:18:b4:08:7d:60:fe:0b:09:9a:57:6f:c6:75:60:
ab:27:ee:88:b2:5c:5b:ae:c5:02:cc:38:22:5c:ab:
6b:8b:b9:e6:48:b6:f5:11:ab:f4:cd:5b:34:cc:9a:
38:f6:3e:ee:c0:e9:23:16:cc:40:30:ce:c2:1b:18:
50:aa:ec:45:6f:f6:f5:cd:04:27:58:6c:70:12:31:
30:e5:f2:05:8c:7c:ed:03:ce:77:b8:c5:d5:80:d2:
de:5c:2e:9b:c5:e1:13:b9:4b:46:3f:98:ec:8c:d4:
80:15:67:f2:23:85:65:ad:da:30:5f:1e:ae:72:28:
1c:9c:d6:b3:79:16:96:0c:62:df:de:c9:6e:8a:e4:
25:37:e8:8b:61:39:60:55:fb:3b:a6:80:5a:19:54:
86:49:62:f9:48:4b:8c:fa:eb:43:b4:29:71:31:72:
9e:28:1f:c4:4b:95:1b:02:ab:7e:24:6d:8e:69:09:
4b:cb:a0:98:64:24:20:2c:32:de:f0:42:f6:56:26:
2a:0d:41:c6:ed:ef:74:e8:b3:53:a1:75:99:6d:6f:
59:c8:cc:d9:fb:12:9a:02:c9:78:17:a5:6b:80:d8:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:18:18:9E:27:3B:BC:6B:85:D9:C9:BB:49:07:7B:1B:69:F1:07:72
X509v3 Authority Key Identifier:
keyid:0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:72:0a:db:31:44:05:03:94:b9:4d:a4:46:3e:72:b8:e4:a6:
18:fb:03:b8:0a:10:f2:47:ac:ef:42:33:9e:7b:44:6f:9d:77:
54:47:1e:18:62:6c:4a:d6:a6:a8:97:72:10:be:c9:95:9a:48:
ba:d9:51:33:64:c4:5e:80:84:89:9e:f8:26:90:f2:20:bb:0e:
e2:95:24:7d:28:25:89:a7:dd:b4:07:1b:46:dd:5b:3c:af:01:
c6:7c:14:f3:0b:7f:c7:c9:02:69:ce:6b:52:d3:89:48:a1:5c:
b9:8c:0b:f9:62:71:c6:fd:11:d3:80:b2:9d:3f:f7:8e:e0:b1:
94:14:74:25:b4:c2:7e:f4:7f:c4:2b:8d:4f:75:16:15:5d:9a:
77:35:e6:ed:d2:cd:1e:09:64:58:20:78:27:f4:67:fe:97:58:
0b:0c:13:23:5a:e9:36:b1:42:41:b8:4d:48:61:b4:5d:af:de:
9b:c5:73:25:4c:af:55:ed:0f:ff:39:a0:44:07:6a:7c:32:26:
56:92:fa:33:2d:98:52:dd:9e:33:a8:51:7d:b4:4a:d5:26:71:
3e:d8:8c:9c:80:32:a7:5f:8c:a9:c5:42:36:13:ed:1a:18:a8:
d0:45:81:6a:de:34:35:57:75:19:e5:7b:17:fa:15:ef:58:c6:
07:20:3e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:19 2026 by rpki-client