Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File: s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier: m/1XAdoE+6kHRgjpRTZ27bV0yaB6u9OVztbsftQdAMs=
Subject key identifier: D8:9A:54:AA:88:83:FF:D7:82:41:BE:19:8A:CE:4B:20:BB:B9:29:FE
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial: 01A0897A143B88C92C6BFFA4508C3C6CFC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 04:01:13 +0000
Manifest this update: Thu 10 Sep 2026 04:01:13 +0000
Manifest next update: Fri 11 Sep 2026 04:01:13 +0000
Files and hashes: 1: Av5bsVoq8UQGaosqV8V6-3ucUR4.roa (hash: QEALuD9emwTtaKDjepBpTR7X0rF/uZcvg9fbjrjCtSw=)
2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: RwfPJRPEtgOZpBuP7fy3cqpu+E00yeBwr8Z++vSk4nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:14:3b:88:c9:2c:6b:ff:a4:50:8c:3c:6c:fc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Validity
Not Before: Sep 10 04:01:13 2026 GMT
Not After : Sep 11 04:01:13 2026 GMT
Subject: CN=d89a54aa8883ffd78241be198ace4b20bbb929fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:57:8c:d5:03:69:58:de:8c:48:a1:03:1c:
6e:eb:40:7b:9c:9a:c9:da:cb:e8:93:95:9b:72:d7:
f8:5a:d2:70:fa:9c:9c:54:e3:9f:c9:73:8c:42:aa:
c2:1a:21:c7:83:1c:f9:e8:7c:92:c6:d1:21:90:99:
cd:9e:28:fc:0d:1d:7e:c9:bc:19:dc:be:cc:a4:9f:
dc:9c:cd:89:97:7d:a3:17:da:f0:ed:c2:dd:38:9b:
0b:cd:65:05:94:41:06:03:10:b2:ec:f6:5e:6f:3c:
b9:a9:51:fd:b4:99:8b:52:46:5f:c1:c3:7e:59:ca:
12:33:26:ea:63:2c:e9:17:5f:f9:fa:8b:f3:26:59:
5d:da:fd:c5:da:c0:55:a6:f6:9f:0b:c1:03:20:f7:
f3:20:4e:37:89:92:78:bb:62:7d:69:a1:5a:f0:64:
7b:4f:d8:59:9d:77:0f:7d:e8:df:45:d8:4b:c5:95:
8a:a9:0d:88:6f:7a:69:2c:b5:90:99:07:a0:b3:ce:
b1:e5:80:30:32:19:01:3b:d1:28:ce:be:e9:c6:22:
5f:74:de:bf:20:b8:8e:c3:e9:ec:77:62:99:e4:9d:
ce:c0:22:b1:98:8c:6e:6a:b9:0e:d5:e1:f4:55:91:
bb:c4:ec:95:15:3c:b6:e1:d9:84:1c:6f:36:98:ac:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9A:54:AA:88:83:FF:D7:82:41:BE:19:8A:CE:4B:20:BB:B9:29:FE
X509v3 Authority Key Identifier:
keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b4:86:39:f4:b8:43:4d:4a:12:17:ef:1a:71:54:67:35:2e:
71:36:f4:b8:4c:aa:c6:51:70:ae:35:5c:ea:b0:c3:94:18:e7:
87:52:31:a5:bd:2a:24:d4:e6:23:4a:6a:fb:04:fe:42:27:53:
ae:fb:77:40:b2:2f:f3:af:4f:b2:56:11:ec:15:76:27:eb:66:
f7:52:c2:a9:ff:71:18:fe:32:1c:b4:45:17:d0:db:99:da:92:
aa:b5:6e:d8:54:91:59:57:94:7c:8e:77:98:4c:d1:ac:11:f6:
b9:10:9a:90:c0:8f:5c:ea:ed:26:20:24:44:b5:8f:9d:29:0e:
2a:8a:b9:99:35:a5:2f:bf:f7:11:a6:5e:eb:d0:5a:c5:d8:24:
86:c3:d6:5a:23:6c:f8:4e:12:c5:14:70:88:50:54:00:f5:da:
42:e5:15:c4:0d:ea:d2:6d:9e:05:11:44:80:9b:b5:92:d0:a6:
3e:00:c4:58:7b:9f:bc:6a:6c:d3:2a:83:38:2b:eb:a7:04:26:
c6:3d:43:ae:14:56:ce:d9:7a:db:09:2b:01:b3:ce:33:8f:4f:
f2:92:6a:68:ef:e1:aa:39:3b:71:81:dc:b1:34:e5:80:c1:b3:
22:94:d8:d8:0a:9e:2c:ed:ef:b4:81:d2:86:1e:25:fc:29:0b:
c6:37:26:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:41:27 2026 by rpki-client