Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: /yZd/C8v9GwfgOP40PmKQCabHqUltX9N5fnedtpS5yI=
Subject key identifier: 4C:78:0E:33:55:A2:DA:BC:F7:64:27:AD:23:A0:6A:4A:17:DC:4F:54
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 01A0890BDBD394303B1D13F99748DB37E14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 1867
Signing time: Thu 10 Sep 2026 02:00:50 +0000
Manifest this update: Thu 10 Sep 2026 02:00:50 +0000
Manifest next update: Fri 11 Sep 2026 02:00:50 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: WxdM+u/qfKT30Z28HLyRThTQ/TkOdJlGurW/drJKkck=)
2: 5EAz5dndjgfQfjMqO-fDSjEIW8A.roa (hash: G2Rnah1hR8UxH5++PW3B2fPR5YMOIykQT7T/Zz40bFo=)
3: GWAM8LaGeLrYT15NSq3dJ5pRlCE.roa (hash: lAj5QKk8rG4fdrfzMU388++vVHlAtgmU+Tql0pzD1s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0b:db:d3:94:30:3b:1d:13:f9:97:48:db:37:e1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Sep 10 02:00:50 2026 GMT
Not After : Sep 11 02:00:50 2026 GMT
Subject: CN=4c780e3355a2dabcf76427ad23a06a4a17dc4f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:ac:c9:12:ad:3d:ae:ec:74:43:13:7b:6e:
24:67:a2:e8:ea:76:8a:b6:47:03:c1:2c:dd:97:4e:
f9:6f:14:4b:05:b8:cb:39:12:5d:ef:62:47:16:a0:
c9:e3:63:04:c4:8e:47:c7:72:e4:9e:45:92:b6:91:
c3:06:32:fb:b9:d4:94:e1:77:df:8c:65:d8:92:85:
dd:ef:94:bc:a0:12:f3:96:8c:f2:d6:2d:c8:3a:ba:
80:02:c6:4b:52:fe:32:31:4e:4d:2d:a1:36:a1:62:
69:f8:78:91:6b:cb:b1:00:4f:7d:35:76:67:eb:df:
a4:72:c5:20:47:c4:77:b5:7c:c7:ab:a8:5a:13:40:
81:b1:81:8c:4c:53:8c:5c:ee:94:15:33:97:47:fc:
07:d0:d7:74:7f:03:82:c7:ac:e6:fb:aa:28:59:4b:
48:89:30:fe:9b:30:31:cf:52:7e:87:19:1e:64:38:
2e:72:b4:ee:39:61:b2:96:e6:52:31:be:47:20:68:
49:db:a1:ec:32:dc:ff:7e:1f:c3:e1:f2:02:5a:cd:
40:b9:28:75:8e:71:32:99:79:a9:0d:55:1c:da:dd:
c6:07:36:b5:1a:da:41:2d:af:ab:23:a6:1d:04:46:
dc:5d:cf:33:e7:11:ac:5c:f7:61:ce:f3:26:4e:e6:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:78:0E:33:55:A2:DA:BC:F7:64:27:AD:23:A0:6A:4A:17:DC:4F:54
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4e:2b:12:5f:5a:07:03:f4:0b:e0:21:35:c0:57:ca:c2:0c:
8b:dd:89:0a:f7:f8:87:ad:59:10:24:78:e5:e2:17:17:56:e0:
47:aa:8f:b6:05:46:c8:b3:bd:ba:0b:c4:34:36:92:f2:a1:90:
c9:bf:e4:3c:b5:d7:ea:d2:77:09:79:80:9d:7a:11:7b:00:46:
42:88:c6:3d:b7:62:c8:be:cb:1f:20:13:37:45:46:99:91:00:
42:83:74:b0:63:c7:f9:43:4b:06:5e:d8:a0:4c:24:e9:1c:c2:
06:d6:4a:89:bb:c5:4a:89:c4:93:84:75:ab:35:46:72:95:1d:
56:99:11:e1:51:d8:93:73:c4:4a:e3:2f:6b:66:28:3f:ac:5c:
f7:14:ef:ac:11:8b:14:8e:95:a1:2b:85:c1:ca:44:df:1b:46:
16:cb:23:b5:88:9a:e9:3c:eb:d0:70:6c:ec:b2:bf:f6:7d:2e:
fc:45:e1:4d:cd:65:a0:cf:36:58:f0:c4:14:15:d8:24:7a:99:
5e:7d:d3:96:6e:ff:5a:43:70:58:f4:8e:0c:70:7b:d6:7b:58:
6e:d5:98:3b:b3:08:94:22:74:6d:0b:03:4f:dd:4d:3c:dd:a5:
80:b3:ba:e0:ce:b0:76:46:17:c9:4c:9f:4b:77:e8:fd:7e:7d:
01:3a:5e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:17:03 2026 by rpki-client