Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
File: bE6tk3_29mwLFfItDUn5N243154.mft (raw, json)
Hash identifier: qntsBVTNVcE8A6RcBAyefhdKjc7wdcYj1MHlX/K8rsA=
Subject key identifier: 84:7D:0E:AF:55:E5:BF:BC:F5:CF:20:02:FD:AD:F8:50:7D:97:0A:04
Authority key identifier: 6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
Certificate issuer: /CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Certificate serial: 01A0F042BE6B475D34AED0AE055B9F7D8A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
Manifest number: E0
Signing time: Wed 30 Sep 2026 03:01:41 +0000
Manifest this update: Wed 30 Sep 2026 03:01:41 +0000
Manifest next update: Thu 01 Oct 2026 03:01:41 +0000
Files and hashes: 1: HtXE6o5gyDE8p-LeGfVTGKS-HFg.roa (hash: TRqFmFDs3cFEdD+j1MIH3IwsMTCX5wrTHYLogmPYGvU=)
2: bE6tk3_29mwLFfItDUn5N243154.crl (hash: gtVG4v2P1bwKAlDM3XXHzmejit3+JVTV91Yst2xhxM8=)
3: vTlhAenRPSZUNMMxyWS0DXwQ5N8.asa (hash: PklvSNrA+pjY5wXK2t56S6nxPO2i6UZMi9BUxQ6a3ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:42:be:6b:47:5d:34:ae:d0:ae:05:5b:9f:7d:8a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Validity
Not Before: Sep 30 03:01:41 2026 GMT
Not After : Oct 1 03:01:41 2026 GMT
Subject: CN=847d0eaf55e5bfbcf5cf2002fdadf8507d970a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:7e:84:2f:f1:df:ca:04:96:f8:c7:86:f9:
6b:11:ea:ec:17:76:37:3f:ab:cd:8f:2b:22:d1:82:
5c:7e:73:b4:24:07:89:ec:16:95:85:95:e0:3a:53:
9f:c1:5e:e3:19:69:0d:ba:e5:f7:05:02:ad:9b:c7:
d6:8d:9c:07:9b:2f:30:c3:a5:ee:40:76:92:09:71:
f9:e7:db:1b:fc:c1:0d:bd:40:04:b1:4f:87:d8:75:
96:5d:91:85:40:40:16:c5:1b:df:c2:38:4e:42:8d:
bd:97:f2:f1:6a:75:bb:af:f2:64:78:df:61:16:fd:
b9:10:4d:62:17:ea:0d:85:79:8f:f9:7f:3a:9d:43:
d7:06:f6:f5:73:6e:5f:ce:e8:af:23:f2:7d:43:8c:
32:e8:d2:87:cb:0b:2e:47:38:63:15:2a:18:5d:5a:
d4:9e:42:81:86:56:01:b1:53:2a:38:8c:93:fb:2e:
1e:51:92:95:07:5e:7c:e4:b4:1e:59:f1:a1:d3:02:
6b:92:5b:7b:23:eb:15:94:33:cd:53:97:0a:83:a5:
6f:29:54:b3:a0:af:c9:02:2b:0e:28:a0:2c:f7:bc:
5c:70:f4:fd:7c:0f:84:f6:69:cc:40:75:5d:fa:7c:
16:72:8c:0b:b9:dc:7d:20:13:33:2b:0d:9d:48:93:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7D:0E:AF:55:E5:BF:BC:F5:CF:20:02:FD:AD:F8:50:7D:97:0A:04
X509v3 Authority Key Identifier:
keyid:6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:db:aa:bf:de:5c:5a:05:c9:3f:0b:fb:65:65:f0:e0:67:c6:
52:44:55:3d:20:63:33:f6:0d:81:20:79:c7:2f:b4:d6:f8:a8:
9f:f2:8a:ab:0c:ba:8b:a4:41:8d:64:4a:c5:c9:07:07:b6:29:
d1:63:04:05:a1:26:57:9b:96:8a:ea:24:f6:00:eb:bf:ef:98:
67:0f:90:34:3f:e5:81:e6:92:cb:6e:ac:9f:a4:0c:d4:72:eb:
a4:d0:1a:b1:fa:69:5e:b3:5d:cf:c8:b7:c5:41:e7:25:0d:ac:
17:8c:8f:19:97:82:d0:32:2b:ae:fd:83:c3:81:04:d1:90:05:
0a:ba:e0:ac:38:1e:41:2c:30:f3:54:08:cf:88:ec:0b:93:21:
0f:43:88:11:98:2a:81:22:62:55:93:7c:73:69:82:f6:e0:a8:
42:b6:89:81:bc:66:70:83:f3:96:4b:e8:6e:3c:f5:ed:c7:f0:
65:a4:6f:1c:80:b0:4b:25:1f:f3:9e:2c:21:1f:f5:64:e0:65:
87:57:12:c8:cf:57:dc:10:21:94:33:fc:60:88:ef:eb:31:19:
13:80:da:bb:2e:d9:24:79:3c:96:d0:c5:ff:b6:15:e6:da:47:
45:b2:9f:f2:81:23:56:96:5d:de:d3:81:48:ce:77:e0:b1:4e:
0f:69:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:29:57 2026 by rpki-client