Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: qBWrZFSFhAcGpyOt2BqDeHPQT1KAVyE6GaHwuAXzdeg=
Subject key identifier: B5:68:A4:B6:0E:4C:2A:D4:B3:B3:04:59:EB:02:F7:3F:F4:08:36:D8
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 01A13F392568D104B698FBA0B5620F5F53A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 11:01:12 +0000
Manifest this update: Thu 15 Oct 2026 11:01:12 +0000
Manifest next update: Fri 16 Oct 2026 11:01:12 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: 1DJb0Gzzoe4PH/1+K3AE4Q7pLlbO95vc+WqttfBht+Y=)
2: ESyG_uYtG5IcanDmyfXRMGONZ1Y.roa (hash: R7QxOEza/Zy8vZPkOSk/PHJrwRu23ZaevpUcd1rTXKk=)
3: sXZEyLDztNjM23Z0NfTDSffhRV4.roa (hash: j1ThO6JX0t+4KZGC5ITUDqv+a2GExzOx5SfNMj5dHwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:25:68:d1:04:b6:98:fb:a0:b5:62:0f:5f:53:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Oct 15 11:01:12 2026 GMT
Not After : Oct 16 11:01:12 2026 GMT
Subject: CN=b568a4b60e4c2ad4b3b30459eb02f73ff40836d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:74:e1:34:f0:11:c3:2c:ae:78:b3:a0:72:02:
b6:8a:ce:98:a6:b5:56:6d:bc:63:65:81:f2:46:85:
03:37:3a:46:8f:4f:33:4c:02:3e:6e:6b:7e:84:db:
a8:b4:58:65:d7:9a:b0:dd:ad:11:ba:13:0c:ad:67:
c4:19:e9:25:b4:c6:53:f4:4e:14:df:32:21:da:a1:
8b:1b:b3:07:ee:f1:92:27:38:84:96:1e:35:21:5f:
7b:a6:e2:6c:9d:72:cf:2c:9b:89:19:cc:6d:03:6a:
e2:18:71:1a:9e:66:b0:37:00:26:a8:35:db:17:38:
84:a9:5b:bf:d7:44:5a:c2:df:90:8b:08:3c:08:ac:
ea:01:6a:51:82:6a:1e:aa:82:e6:ef:02:8d:ab:e8:
eb:72:7a:f1:7a:7d:8e:d3:87:b1:da:80:b8:84:6a:
fe:fd:8a:fe:55:9d:a4:f6:74:7c:be:43:f3:01:c1:
ac:68:99:6e:9e:9e:c1:47:13:b6:2c:04:6c:80:10:
46:b8:d3:9b:d2:19:3b:7a:6f:bb:78:f1:86:2f:f0:
1d:a6:48:6f:b2:ce:77:62:3f:66:0c:11:38:99:bb:
a3:b3:8f:be:d0:f0:db:26:7c:21:31:bc:c5:5c:93:
f0:db:2a:9a:d0:35:5f:43:35:43:84:96:9f:e7:48:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:68:A4:B6:0E:4C:2A:D4:B3:B3:04:59:EB:02:F7:3F:F4:08:36:D8
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:57:4f:a5:1c:75:cb:a9:c3:93:fe:9a:2f:ba:c0:23:2c:f5:
df:cc:90:df:87:d9:8c:79:3b:92:6c:d8:23:28:85:e1:b3:04:
04:77:0c:26:e7:95:d5:97:79:60:82:39:74:d2:c6:4a:9f:5a:
9f:c2:ed:17:b9:57:fb:ba:0a:af:74:77:b9:2f:fc:8c:7f:3e:
aa:2f:49:c9:45:3b:71:5e:49:da:4d:ca:e2:f8:93:3d:7b:e8:
90:d5:01:c1:56:ae:e0:01:bc:cf:72:7b:4d:43:58:55:5f:f5:
ee:d6:01:e5:dc:2b:88:78:c6:fd:f7:70:67:2d:43:1a:6f:5c:
57:93:e7:d3:be:89:78:7d:09:34:8c:09:ed:76:29:77:06:d0:
fa:c7:b3:eb:be:7d:1a:9d:66:55:ff:28:94:ae:84:92:b3:e1:
02:6c:fb:6d:e2:05:d3:43:ee:e2:99:47:19:ec:62:34:97:80:
6c:71:bc:78:c8:29:19:02:7c:94:ae:7e:70:9f:e8:e0:ae:67:
38:03:0d:5e:cc:29:a8:83:0c:16:e0:84:c8:c9:8c:20:35:76:
06:5d:8b:d2:9d:fe:97:2c:d5:b9:22:f4:44:33:8c:7b:b6:d3:
d9:dc:71:56:58:ad:b0:8e:b7:e7:76:63:91:95:94:c8:a2:4a:
66:43:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:10 2026 by rpki-client