Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
File: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json)
Hash identifier: MkiCFVubCqacUFo8ibrV/2DUyVpv9722l+Lm49wAfHs=
Subject key identifier: A2:96:E6:88:E3:B3:AE:96:F0:93:42:CA:24:37:1B:F3:34:05:99:6F
Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
Certificate issuer: /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Certificate serial: 01A18C41EDDA77CE9990D4BCC276C3246D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
Manifest number: 1AD0
Signing time: Fri 30 Oct 2026 10:01:33 +0000
Manifest this update: Fri 30 Oct 2026 10:01:33 +0000
Manifest next update: Sat 31 Oct 2026 10:01:33 +0000
Files and hashes: 1: 4Af87rg4Bx7SgQQ5MxEN8mZ2YrY.asa (hash: Kzv9NX9qtlVE38MFIIf9pptzKBSLZ3APX1zKA5bjFE8=)
2: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: K/MKS0rNwM43BbgEfQdSnetgoCnrJf0+Dj/Ez2sgais=)
3: TC9K931IzwUdFmAUvzTbFXIZADA.roa (hash: UXVxdmIaXGeZhlCpGUNMtQmCisj0HfLJfUz0lrC+bHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:ed:da:77:ce:99:90:d4:bc:c2:76:c3:24:6d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Validity
Not Before: Oct 30 10:01:33 2026 GMT
Not After : Oct 31 10:01:33 2026 GMT
Subject: CN=a296e688e3b3ae96f09342ca24371bf33405996f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:27:75:e6:4b:3e:27:ec:c5:c8:db:7a:f0:
55:52:58:2b:5e:97:81:ed:66:03:8e:4a:20:21:7c:
99:be:94:db:7c:3b:80:74:73:28:38:b8:a9:1e:e5:
b8:85:74:8f:b8:30:92:8c:8e:a9:be:da:12:b1:4b:
92:3f:b5:a5:e9:68:fc:4d:56:f8:fd:50:9c:8d:59:
77:67:f0:84:26:6e:af:8e:5c:ad:e4:d6:8f:dc:93:
c3:2a:d1:cd:f9:11:b4:05:f7:b0:ea:18:fa:80:4f:
1a:68:14:4e:f2:7a:8b:b3:f7:8e:03:eb:eb:cd:81:
81:62:39:ac:b1:0e:79:58:89:63:d7:1d:f7:97:ab:
c1:20:84:2c:d8:19:34:34:24:76:7f:23:1a:96:85:
27:8d:49:b1:30:40:a6:de:42:60:45:04:e9:f4:c6:
e3:ac:ef:d1:5f:56:58:dc:87:35:96:0f:48:98:32:
0b:8d:35:2d:0d:f0:48:02:0e:00:15:9e:8b:2a:3d:
0a:db:5a:ee:6a:c4:c0:3e:fa:68:f7:50:3d:d9:db:
5c:8b:10:54:d0:02:3e:46:05:0e:91:1f:13:e6:fe:
dc:3d:56:59:0f:d1:ec:42:5b:a0:ec:15:57:f7:e2:
fe:e9:cf:be:30:46:82:63:2d:a8:19:9e:09:fe:da:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:96:E6:88:E3:B3:AE:96:F0:93:42:CA:24:37:1B:F3:34:05:99:6F
X509v3 Authority Key Identifier:
keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d5:48:94:51:31:91:c1:58:3f:19:6f:9f:c7:a1:2e:71:6a:
47:90:29:3a:70:f7:49:ea:53:ab:37:e9:7e:a6:86:ed:44:f9:
d5:51:6d:3b:51:71:c3:65:76:20:0a:be:bc:2a:04:dc:a1:ac:
17:c1:0b:84:08:5e:62:14:15:a7:31:6a:00:e4:65:7a:fa:63:
ea:53:80:e4:d4:3b:5d:f5:84:00:d2:a5:61:f6:e1:68:09:24:
89:92:a2:11:ee:d7:ea:7f:70:b3:3e:7f:02:40:be:e4:23:06:
36:69:b0:dc:a0:76:19:ec:56:d2:ac:81:33:3d:01:80:88:46:
c8:00:46:7d:f6:db:7c:aa:51:a3:c6:54:f3:3a:09:8e:52:1f:
94:05:17:be:8e:a3:70:24:21:31:7d:4e:d3:9b:ba:24:c1:31:
de:57:2c:34:64:45:f4:d2:3d:f8:e8:36:43:73:a7:f4:96:c6:
16:44:0b:34:3d:10:ca:e2:88:8c:1c:34:d2:a6:46:33:dc:c7:
8d:6a:9e:c2:21:c5:c8:bf:16:76:18:1b:9e:d9:b3:96:e7:fe:
23:af:2a:2a:3c:b5:9f:c7:59:4f:be:2d:9e:69:a4:be:4a:39:
7d:ca:15:f5:e8:50:8b:7c:72:fe:47:41:42:34:80:86:e9:bf:
d7:1d:35:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:24:34 2026 by rpki-client