Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
File: P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft (raw, json)
Hash identifier: Rk6O3xnvbarXz/1ZNJV6ba1n2gbTy8n6K/SapND5SOA=
Subject key identifier: F8:12:66:AB:0A:DB:6C:E1:A5:E0:C3:54:CC:00:5F:AF:C4:F2:82:1C
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Certificate issuer: /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial: 01A08A55303D6DB71FC07AF2487983167F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 08:00:33 +0000
Manifest this update: Thu 10 Sep 2026 08:00:33 +0000
Manifest next update: Fri 11 Sep 2026 08:00:33 +0000
Files and hashes: 1: 1KXvQIh327qa8zgtbWEnrPoCoxU.roa (hash: TbQTpElFCKmdyIXdOK2W/0UzDCWZ7/Rjwh/zQFAlE/U=)
2: P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl (hash: on8EXhQXauEYo9HBgASPh01FopwmXtRMgcTx37kxm4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:30:3d:6d:b7:1f:c0:7a:f2:48:79:83:16:7f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Validity
Not Before: Sep 10 08:00:33 2026 GMT
Not After : Sep 11 08:00:33 2026 GMT
Subject: CN=f81266ab0adb6ce1a5e0c354cc005fafc4f2821c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:44:4f:30:20:72:f5:d0:ca:03:ba:79:11:
49:4a:04:35:a2:44:6f:72:5a:f8:f6:70:15:4c:a4:
95:48:98:26:72:3a:79:34:2d:08:f2:04:9f:36:53:
f5:b5:c7:46:9b:71:e9:ab:64:58:cf:86:5a:80:1f:
2e:42:80:eb:02:f8:c2:6c:80:e5:9d:bd:99:13:ed:
69:aa:1e:61:c4:63:97:09:08:c8:46:3c:ca:82:28:
f2:e0:71:96:29:aa:2f:54:af:eb:d8:0f:4f:ce:45:
c3:6f:6e:aa:27:e2:23:0e:21:9d:5e:b7:35:d0:41:
f9:d3:85:d0:f2:96:a1:a6:09:3f:6b:da:86:44:14:
b4:5b:e5:45:94:35:49:1a:89:06:67:20:57:e3:17:
84:7b:ea:a1:9b:b4:f4:31:16:18:75:40:08:9d:5a:
8e:2b:eb:40:7e:60:6c:f0:a4:bf:8a:25:0a:60:0a:
13:d1:c0:ae:f6:87:32:03:c2:a7:90:51:2c:7e:0c:
f0:b5:62:92:68:fc:6d:4d:e3:8e:02:b6:10:f4:61:
0e:03:d0:97:e8:a3:d0:35:e7:2e:d7:2b:3f:d3:d2:
fd:45:d9:8e:a0:b2:24:a1:e1:6b:65:19:6d:a6:30:
bd:17:91:f8:6a:40:b0:a7:ae:b1:a3:11:34:b8:da:
a5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:12:66:AB:0A:DB:6C:E1:A5:E0:C3:54:CC:00:5F:AF:C4:F2:82:1C
X509v3 Authority Key Identifier:
keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4e:f5:70:50:a6:02:e9:42:2a:4a:0c:c7:9c:ce:8f:52:ab:
ed:30:95:65:e1:86:96:d1:71:3d:88:43:d5:db:86:95:11:63:
07:3c:67:11:1f:8d:6b:1e:35:8c:7a:81:3d:04:db:23:b3:a0:
88:16:80:65:aa:ae:00:36:60:2d:de:b9:9e:92:2a:0b:2b:71:
3d:53:a9:fe:b9:67:3d:03:3f:63:61:32:cb:5b:5e:30:d3:3c:
09:43:60:13:76:4f:31:39:53:8a:78:ca:07:bf:25:6f:d0:80:
7a:d0:92:69:30:32:d0:29:dd:2b:90:e2:3f:c0:81:d8:9c:50:
7b:68:19:04:13:d6:de:71:91:24:e0:1a:ae:6f:c4:8e:c1:4b:
53:50:59:9c:81:b8:2d:33:fc:0f:c4:7f:c8:33:f1:54:b6:a7:
fb:fb:b4:2e:31:f6:63:08:57:9e:aa:81:e6:c0:1b:d0:32:6d:
76:b9:75:a5:16:03:c1:75:95:d7:84:0a:d0:84:e8:c7:1e:67:
47:b9:ea:9c:84:1a:95:41:68:9b:65:56:17:2b:97:bd:91:ff:
ec:f0:2c:45:c3:6d:4e:02:ff:76:a6:b6:8a:be:af:27:6e:56:
76:e9:c6:cb:62:59:3d:0f:62:29:52:a5:e1:d6:11:88:68:c2:
5e:a3:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:09:00 2026 by rpki-client