Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: tQkVN23FRqWYe7pcrnuMwZf5im9nYQGAg5IfWt246Zo=
Subject key identifier: B0:93:8A:80:F0:E6:7C:26:0F:38:1F:AD:1D:71:FD:ED:30:59:4A:88
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 01A17D3CBF1A9FE30CF3740DC6EAC5CEC513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 18E6
Signing time: Tue 27 Oct 2026 12:01:35 +0000
Manifest this update: Tue 27 Oct 2026 12:01:35 +0000
Manifest next update: Wed 28 Oct 2026 12:01:35 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: 6ZcEUTQBD5woiq/0eNH8+K/k3Dq8pHaSGzm3NwL+BO0=)
2: GWAM8LaGeLrYT15NSq3dJ5pRlCE.roa (hash: lAj5QKk8rG4fdrfzMU388++vVHlAtgmU+Tql0pzD1s4=)
3: cXcOl7WzH8VMTtWoQHAORnWWU00.roa (hash: w7i9tvMdbueHmUcNSFT0V7pJYLo1g+xZ0pnzoESn5wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:bf:1a:9f:e3:0c:f3:74:0d:c6:ea:c5:ce:c5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Oct 27 12:01:35 2026 GMT
Not After : Oct 28 12:01:35 2026 GMT
Subject: CN=b0938a80f0e67c260f381fad1d71fded30594a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:02:c5:7d:4e:88:55:77:41:3b:12:78:d1:c5:
39:37:e6:0a:36:63:32:1e:92:51:d9:08:ea:f4:2b:
f4:7c:39:df:48:6f:36:e2:31:c3:bf:f9:37:63:9f:
cd:f0:fb:32:82:6d:e1:b9:9b:56:32:88:40:68:56:
d1:49:57:d5:31:c0:ac:57:c0:84:b8:cb:ec:f4:2c:
45:19:2d:12:ae:1a:e4:25:20:b9:c3:bf:a3:a0:53:
5b:ea:8e:c6:9f:75:1f:c6:6e:b1:0c:5a:15:0f:f4:
7e:22:d1:a1:cf:eb:be:9f:2e:5e:23:46:b1:95:c8:
99:d3:ef:b3:1e:4b:07:a0:cf:c7:33:9f:e3:4b:1a:
5b:d0:e6:ad:af:98:90:2a:37:7d:07:98:32:00:38:
45:ac:1e:2e:0b:0b:7e:5f:78:ad:c2:9e:c3:ca:54:
20:51:09:c6:d9:d6:be:bb:d0:af:29:2f:db:b9:25:
07:e9:07:1d:dc:25:65:1f:8d:5c:b8:3d:86:35:51:
80:d0:fb:19:e6:b4:e7:dd:85:68:a3:2b:4e:87:68:
9e:d0:b9:f8:c4:75:99:17:5b:9e:36:c7:e9:1c:f6:
24:3b:2f:50:87:6a:3e:71:df:c3:73:7a:59:41:77:
32:91:41:fd:01:8b:0d:99:5c:97:d5:af:2d:80:9e:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:93:8A:80:F0:E6:7C:26:0F:38:1F:AD:1D:71:FD:ED:30:59:4A:88
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8f:cd:5f:f9:be:ba:94:42:68:db:50:f1:68:99:ed:c0:58:
40:d3:fe:57:06:bf:2a:22:0e:c4:23:c6:1e:16:9e:55:51:dc:
a8:43:a5:f7:46:c9:28:35:b4:1f:9d:4b:b7:db:01:42:69:a9:
60:9c:31:b1:9e:9d:98:0c:b0:ed:ed:21:e4:45:30:94:fe:cd:
3d:b7:32:d7:a7:6c:51:e6:04:0f:eb:58:24:ea:f3:3a:d8:7a:
34:a9:a7:a1:52:1f:8a:3f:44:0c:11:a6:42:7a:f0:af:ca:4e:
d6:2a:8b:2e:30:e9:69:96:8b:1b:a1:9e:21:4f:eb:76:b3:cd:
71:89:69:38:76:bf:b3:f6:ea:a4:ee:be:9a:ce:43:61:17:b2:
8a:03:7b:c9:02:1e:e2:ef:8b:c0:b4:98:19:16:0f:f5:38:ca:
e5:38:f4:04:49:06:8f:d5:72:e2:55:9a:74:60:42:f5:31:43:
36:84:2e:5a:4a:9c:39:af:d0:de:d0:4b:01:84:42:90:fe:60:
3a:cc:ce:07:48:68:d7:91:35:ef:0a:d2:e3:da:00:fb:c8:0a:
1a:fe:63:6b:09:39:c3:04:79:0b:28:19:11:6e:0a:99:aa:39:
22:f1:5f:90:f3:2e:7f:84:74:1c:b7:91:f8:a4:61:13:59:1f:
36:6b:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:32:03 2026 by rpki-client