Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.mft
File: 6hSsfDQ-ywYpYcpi3-zMk2mPSSk.mft (raw, json)
Hash identifier: eiJTmUt5GjOC6Ijv6H09ykQo84iKKKTzRUHVICNuZl4=
Subject key identifier: 0D:0A:97:D3:C0:FE:4C:2A:B4:11:88:5E:C8:44:A4:17:39:6B:4E:AD
Authority key identifier: EA:14:AC:7C:34:3E:CB:06:29:61:CA:62:DF:EC:CC:93:69:8F:49:29
Certificate issuer: /CN=ea14ac7c343ecb062961ca62dfeccc93698f4929
Certificate serial: 01A04197C5799112B75B7E2035C6144459EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.mft
Manifest number: 0104
Signing time: Thu 27 Aug 2026 05:01:00 +0000
Manifest this update: Thu 27 Aug 2026 05:01:00 +0000
Manifest next update: Fri 28 Aug 2026 05:01:00 +0000
Files and hashes: 1: 6hSsfDQ-ywYpYcpi3-zMk2mPSSk.crl (hash: 66dtQUxDdiWuXjv1SMX8VhknMhYGz3QPG0GTUjIlBZI=)
2: s2QI6eE_fwfGrHoEVQhmnpik7pc.roa (hash: kZgESYCe8va+U+MzknhpISTNKl7kvl3ZrJbSLuaX9CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:97:c5:79:91:12:b7:5b:7e:20:35:c6:14:44:59:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea14ac7c343ecb062961ca62dfeccc93698f4929
Validity
Not Before: Aug 27 05:01:00 2026 GMT
Not After : Aug 28 05:01:00 2026 GMT
Subject: CN=0d0a97d3c0fe4c2ab411885ec844a417396b4ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:bf:14:73:06:49:99:79:35:f9:ab:b9:ce:
4e:23:e2:9b:ee:4e:6b:4a:2c:f4:51:d8:30:97:37:
ac:a2:c5:59:95:37:1a:67:7b:85:14:6e:35:39:2a:
b7:d1:b0:30:7e:79:54:e5:2d:95:1b:ed:56:07:c1:
45:47:e4:ad:b1:bf:ce:ff:ca:12:a9:43:ed:13:11:
de:e1:9e:d8:60:ec:f7:e5:c9:92:58:79:58:3d:cf:
73:13:3b:86:66:24:b5:51:98:bf:03:ed:89:81:0a:
b9:c5:6b:0f:0a:7c:72:07:e1:55:a4:d1:9a:f5:0b:
d7:b0:05:d4:62:e7:40:2c:52:d9:8b:61:e6:a3:e9:
70:b6:51:5c:1e:95:18:dc:fe:86:3b:40:64:da:05:
27:75:cb:a4:7c:90:cc:0c:4c:ae:c7:d7:b4:b4:d4:
d1:a5:f1:95:99:35:71:c2:ed:e0:05:d5:bb:5e:a6:
95:9e:ea:21:d3:90:e1:1c:a6:4d:dc:d7:44:a7:04:
08:f4:00:a8:c4:7f:33:ca:c1:5e:25:fc:3b:e3:81:
70:88:b7:4e:31:16:4d:27:7f:42:75:06:27:18:2f:
6c:a6:fc:7b:52:ec:97:2a:27:2d:01:c2:2e:ba:67:
6d:83:ce:04:8c:10:d9:09:ea:91:17:e6:3e:bc:c1:
56:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0A:97:D3:C0:FE:4C:2A:B4:11:88:5E:C8:44:A4:17:39:6B:4E:AD
X509v3 Authority Key Identifier:
keyid:EA:14:AC:7C:34:3E:CB:06:29:61:CA:62:DF:EC:CC:93:69:8F:49:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:44:92:e6:79:7d:ba:e1:4b:c6:fb:3d:e8:3a:a7:c7:f9:91:
5f:29:62:12:94:b8:71:4d:0a:84:8f:d0:92:82:1c:25:5b:25:
7e:27:69:8d:15:28:fc:1c:78:3a:46:54:61:ee:a0:cf:2c:3b:
c7:31:50:cc:8e:70:41:e9:c8:32:70:4d:12:dc:9e:04:00:d9:
59:e4:30:25:13:de:75:76:d1:1d:f9:8e:e7:00:cb:42:6c:f2:
e3:34:b5:46:3d:b9:f9:a1:ed:d9:4f:e6:02:61:cd:93:16:fa:
9e:32:d2:fc:b6:db:bc:06:6d:1b:15:bc:6d:9a:29:29:af:d7:
f4:de:b5:81:52:73:de:35:7d:7b:fb:34:24:b2:4c:82:df:4e:
50:81:23:d1:e1:53:dc:f3:44:f2:3c:4c:99:d6:88:c3:0d:c6:
ff:e2:1f:e7:cc:13:2e:07:3a:1b:a5:45:da:49:a9:df:73:c6:
83:e8:a7:a8:86:2b:f3:0a:93:d4:3e:9d:f8:c4:67:62:4f:ea:
9c:d4:bc:cf:95:57:f8:2a:ba:5a:da:bc:a6:c1:1a:9a:da:cd:
09:57:bc:6c:79:4b:57:22:1d:99:8b:e9:a9:c5:fe:1e:ac:fa:
9e:cf:a1:f2:91:81:f7:19:82:29:82:26:cd:ef:ad:23:9c:e5:
aa:64:49:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:58:18 2026 by rpki-client