Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
File: C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft (raw, json)
Hash identifier: QHfMagS/zJ9bJ1/REswxIiqTnhFzUJBuYSuOpy5PEPw=
Subject key identifier: 9A:63:43:20:44:D1:74:0E:6D:05:A1:15:C2:0D:E9:DB:90:76:C7:D8
Authority key identifier: 0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76
Certificate issuer: /CN=0ba11a46c44eecf90c6231f8456cc702ae938076
Certificate serial: 01A1A524E04E405C24ECE132466E61FF44CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
Manifest number: 0320
Signing time: Wed 04 Nov 2026 06:00:19 +0000
Manifest this update: Wed 04 Nov 2026 06:00:19 +0000
Manifest next update: Thu 05 Nov 2026 06:00:19 +0000
Files and hashes: 1: C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl (hash: NeulDwzGtftWfqhF8BT9Cz/7bM1RTjIoBe+HyjH+y64=)
2: f8Fa-1BgGSCDRddRgU0_kBA1sf8.roa (hash: 3X3V1Td6yfTIoqJh6y0NH6OR9q9jh8r7Y0iQcYhxcco=)
3: q7WfGeBPEEvSqwuhjuGB9MK0FR4.roa (hash: 6I5OLAD4XJOUPBEb7WYc+qrHbMwA5+oW8O7b01lul68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:24:e0:4e:40:5c:24:ec:e1:32:46:6e:61:ff:44:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba11a46c44eecf90c6231f8456cc702ae938076
Validity
Not Before: Nov 4 06:00:19 2026 GMT
Not After : Nov 5 06:00:19 2026 GMT
Subject: CN=9a63432044d1740e6d05a115c20de9db9076c7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:50:f7:d7:9a:dc:64:cf:51:e7:d0:ba:4e:
0e:00:6f:94:4d:45:e6:29:3e:2a:e8:a5:f2:72:29:
16:87:49:3f:c8:8d:0c:4e:71:c3:07:23:43:4a:8f:
f3:69:33:1d:a0:36:8b:a2:4e:42:60:c2:81:07:d0:
f6:64:55:b9:4e:bd:7a:0a:a8:3f:e6:9f:de:27:e2:
77:a4:34:61:f3:7d:3d:4d:30:9b:53:42:dd:32:f6:
2a:04:08:d7:09:ad:6f:b1:68:61:07:5d:87:4b:dc:
ea:3c:ce:da:93:c8:52:d9:72:67:cf:98:51:7b:b5:
f3:80:66:f6:91:a5:15:0b:9c:b0:2a:66:7f:05:42:
12:70:eb:7d:67:5a:37:e5:52:8d:a1:d4:dc:08:0e:
c1:4c:cf:2b:0a:a3:3f:fc:f7:f2:b3:8f:03:f3:c1:
d5:65:b1:9c:b6:96:fc:82:8e:7e:9b:0a:26:aa:82:
f8:77:f2:ed:25:b0:65:4d:7a:af:2c:cc:7d:80:ab:
4b:1d:d2:9d:20:31:81:7d:fe:41:75:89:b2:98:c5:
40:6a:bb:37:ea:cb:46:12:df:d4:a6:91:99:ec:ea:
bc:7b:be:e6:22:8d:02:a3:15:5c:13:90:7b:d5:53:
7b:a6:ce:02:fc:bd:60:71:cb:6b:50:3e:33:0b:1c:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:63:43:20:44:D1:74:0E:6D:05:A1:15:C2:0D:E9:DB:90:76:C7:D8
X509v3 Authority Key Identifier:
keyid:0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bd:af:c0:62:36:0f:b1:25:16:6a:0b:37:b4:ba:4a:b3:d3:
0c:e9:34:4b:d3:10:79:75:c7:b4:ee:0d:eb:37:63:cb:b5:84:
98:e0:a9:ca:9d:14:d9:8f:38:64:46:cc:19:6d:a3:2d:35:47:
47:e1:66:15:46:95:7b:9c:93:a4:b2:b7:59:cf:31:17:33:5e:
fd:ae:01:20:e4:ba:e5:90:e2:c2:7f:b6:b2:83:a3:c3:4e:4a:
a9:db:f7:16:53:91:31:6f:da:50:fb:87:07:bd:22:94:b8:ca:
3f:c9:c7:fd:38:4b:1a:72:9b:15:2b:d9:78:01:cf:8c:9a:f5:
77:19:15:d3:71:89:ce:4f:bb:cc:98:16:24:1e:29:3d:4f:ed:
a9:c0:bc:18:21:1e:b9:93:b4:22:ae:17:00:b4:46:f6:26:40:
d7:39:f0:5f:51:d4:79:7a:59:94:59:08:5d:5d:b8:d0:eb:e7:
a6:9f:c8:85:40:91:31:0f:8f:82:39:0e:e4:f1:a9:64:1f:6c:
23:cb:85:1c:60:2d:08:85:66:58:7e:9a:f4:47:91:74:8f:fb:
c8:cd:11:6e:cd:82:e9:f2:e5:81:1a:59:3f:3b:c7:01:c7:69:
14:d9:5f:7c:38:0a:b5:a3:b9:0f:b8:af:9d:b1:b7:a1:b4:25:
0d:b2:bf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:53:43 2026 by rpki-client