Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
File: 6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json)
Hash identifier: yD8gY1Is+708LEM50scqDDguQ8xUjYFMyJF9igQr5DY=
Subject key identifier: 9F:A2:FC:37:5E:41:56:F5:08:3C:18:57:F6:51:17:27:D1:AE:EF:5F
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 019FCB2589DCE7D52A512C3621DCD7FFFD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
Manifest number: 0CA2
Signing time: Tue 04 Aug 2026 05:01:02 +0000
Manifest this update: Tue 04 Aug 2026 05:01:02 +0000
Manifest next update: Wed 05 Aug 2026 05:01:02 +0000
Files and hashes: 1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: St8HsyHn3JNomP6XNBA03fK98O87s7MGeuKZczOiOF0=)
2: b_tsB2psJkgmiZaOr3w-QgtEJZw.roa (hash: JEjqJzbCuRhzhys3DkYfGTwD4aP+4P2Txn/0Mjz9ZOQ=)
3: uSr1yIrAzCz2O7l9EFFpJ1IdM7A.roa (hash: 2JNNqAz8LguyYvZQxdaeLL3oFCalZa88Rp3mN9dpy5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:25:89:dc:e7:d5:2a:51:2c:36:21:dc:d7:ff:fd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Aug 4 05:01:02 2026 GMT
Not After : Aug 5 05:01:02 2026 GMT
Subject: CN=9fa2fc375e4156f5083c1857f6511727d1aeef5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:1b:db:18:18:f2:f8:b1:be:c8:e2:b4:f4:
25:fa:d8:21:87:d1:a1:cd:fc:bf:38:ac:4e:3c:ae:
4a:b9:21:a3:e6:65:50:68:5d:a0:ff:ef:ca:21:41:
01:24:2b:4b:82:c7:52:83:c8:d1:f0:fd:c1:f3:f6:
e0:75:8b:e8:6b:4d:e6:47:c9:3d:d0:1f:99:12:95:
9d:04:c1:3b:f6:4f:5f:09:b1:74:9e:6d:9e:34:10:
df:d1:5d:5d:23:cf:3b:97:6e:4e:95:e4:e1:83:db:
cf:1d:f8:db:10:9d:0b:9c:a5:65:90:6d:a5:b3:08:
5c:1c:57:c5:42:57:df:e8:07:16:8d:60:75:c2:61:
26:de:6e:29:fb:32:43:43:b5:2a:18:02:0a:fd:25:
b6:0a:66:5c:44:52:43:54:8c:73:dc:50:08:19:c1:
ca:d4:65:b6:74:64:bd:0b:87:38:80:c4:ff:5e:31:
e9:22:be:0a:15:35:af:91:37:ee:5b:ba:35:b2:db:
d1:2f:ea:49:f3:1f:d9:e8:ed:33:43:45:27:21:5f:
66:b3:6c:3c:e4:91:92:db:18:67:f5:61:e4:a6:5d:
a3:47:f8:d9:1e:98:1c:27:52:82:b1:98:94:f5:5f:
56:a9:25:09:e3:6a:5e:05:a8:ba:fc:cb:fa:45:e1:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A2:FC:37:5E:41:56:F5:08:3C:18:57:F6:51:17:27:D1:AE:EF:5F
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b2:62:87:58:d0:9c:f7:ad:9d:b1:85:28:30:3d:27:d9:bb:
fe:63:26:88:ee:b4:a2:e9:9e:54:bb:17:ac:73:87:79:4d:dd:
6e:7a:f8:66:4f:f4:02:7f:1d:f4:df:95:45:9a:e1:0d:3a:71:
a1:7d:75:57:1c:c0:ce:ce:9f:ac:09:f1:15:a8:01:79:4d:cf:
7f:81:09:93:b8:0b:c8:61:06:f4:34:47:d3:f6:b4:ab:72:88:
91:98:45:7d:3a:9d:4d:02:9d:23:c8:fe:d9:b8:76:d8:54:18:
87:0e:1c:3c:72:c6:fa:81:75:b5:e7:34:21:d0:a3:90:c1:e1:
46:03:7d:d6:8c:0f:df:eb:75:74:ee:f7:28:bb:61:3a:b6:a9:
7a:7a:7e:b1:90:2b:38:77:cd:18:63:70:e5:bf:5e:54:ad:6d:
f7:61:61:45:d6:b3:c1:f5:22:1e:fb:fe:6e:c3:c0:ff:9f:03:
03:df:61:d4:d5:16:6b:93:07:0b:b1:74:ec:57:8f:d6:6a:37:
4b:4b:9c:21:f7:9d:36:de:68:7f:26:e5:04:7b:4b:e7:ec:ac:
1e:0c:2f:c6:33:a9:2d:97:b8:6c:98:c7:85:d2:43:cd:72:31:
cd:23:c2:1d:d1:ac:cb:fd:8f:68:0f:85:4d:80:6e:3c:c2:f3:
c3:d4:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:59:28 2026 by rpki-client