Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
File: 6KMuimrG9uw3hg7nwH6435MUd3k.mft (raw, json)
Hash identifier: ONCu7IkdiAa4o6rnu0Gdg0hUGEECBK/pJVGPtgsbt04=
Subject key identifier: D3:40:B1:94:0B:90:58:EE:94:33:D1:D7:9F:C9:E8:49:D0:82:8F:3D
Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
Certificate issuer: /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Certificate serial: 01A181BD9E55D6EAA8E65A477591CEB11023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 09:00:50 +0000
Manifest this update: Wed 28 Oct 2026 09:00:50 +0000
Manifest next update: Thu 29 Oct 2026 09:00:50 +0000
Files and hashes: 1: 0tMWDsmaNpirizCIuYm2kQJNSB4.roa (hash: 7gDJtEKwpzRoEr+LF0O50BFAilj5lath99QLh0PO740=)
2: 1Irv8E4u7UykS63xv-ROJgQRbvY.roa (hash: ONra4D/SwQN2JXNsh0SIHWZc56JHdpcbYmoF15rsgHw=)
3: 6KMuimrG9uw3hg7nwH6435MUd3k.crl (hash: Ij/g2leZbO8ZXwoEY8tv9Xgn3QYFJy1PrZu/BVyRsd0=)
4: BSyVVnIQyVE4YwB72lzy14u_BDA.roa (hash: UV3CW9R7w+p/7qtVB+/WOrunh+7+rnwo65AYKWYxNqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:9e:55:d6:ea:a8:e6:5a:47:75:91:ce:b1:10:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Validity
Not Before: Oct 28 09:00:50 2026 GMT
Not After : Oct 29 09:00:50 2026 GMT
Subject: CN=d340b1940b9058ee9433d1d79fc9e849d0828f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:9b:71:57:67:76:d3:12:4f:ad:08:51:25:
b3:5c:6d:b1:c1:09:05:68:14:f2:9a:ff:65:9d:84:
e2:ba:ee:15:cb:16:4a:18:ed:79:c1:e3:21:c9:e1:
23:1a:7d:66:60:d9:8f:da:e3:7a:db:6c:ba:4e:5c:
42:47:e0:47:d5:99:7d:3b:4c:d5:d2:d8:39:b6:72:
be:58:c3:7b:7f:42:b4:4e:6b:48:21:90:a9:3c:bb:
53:34:b8:52:55:7a:51:5a:f4:58:9a:1a:5f:38:7f:
5a:da:60:5f:6f:00:2a:e0:8a:43:8a:2e:74:28:41:
79:5e:02:3c:03:74:28:31:6c:de:d5:f4:d0:30:a2:
c3:98:57:9e:b8:7b:48:82:b2:f8:a3:4f:bb:fc:96:
c9:74:78:5f:94:5b:56:b7:84:e7:1a:89:74:45:3c:
9d:78:7e:4a:55:78:da:63:f7:04:85:24:59:5e:fe:
e6:9e:c5:0b:6e:fa:a6:f5:29:b7:94:60:15:d7:45:
81:b9:68:03:0c:8d:4d:6f:10:f6:fd:f0:e8:ba:12:
17:90:d0:28:f7:7d:6c:6e:e4:a7:07:32:1b:bb:23:
13:ac:1f:14:d0:d0:a3:19:69:c5:42:fe:68:5c:17:
6c:92:60:c7:3c:a8:ed:c0:86:e6:76:44:cd:ad:6a:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:40:B1:94:0B:90:58:EE:94:33:D1:D7:9F:C9:E8:49:D0:82:8F:3D
X509v3 Authority Key Identifier:
keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9b:dd:08:68:2a:05:4b:64:f0:59:b4:d1:f8:2e:9e:bd:eb:
64:62:b6:8b:27:91:f5:86:2a:70:c9:75:4e:c7:f3:9f:b2:70:
3d:2b:4e:d9:bf:09:bb:a4:72:50:de:76:b4:53:e2:bf:7a:bc:
27:27:07:5f:a4:49:06:f6:21:77:c3:a6:bb:cd:3d:ba:24:f0:
ab:96:e9:f8:85:fe:60:b3:0b:80:72:51:63:68:92:b7:e1:e6:
c6:29:1d:9f:8b:0f:07:77:19:f9:47:e4:4c:57:71:86:9e:71:
08:60:db:0c:90:b3:4d:ab:14:b1:5e:4c:f0:91:cf:7e:a4:11:
fe:dd:cc:9d:1f:dd:8b:90:e6:9b:01:c4:82:dd:09:ea:1e:89:
ca:60:0a:25:ac:5c:d2:39:9c:c4:05:bb:6e:3e:97:48:50:c0:
0b:d0:af:2d:4c:9f:39:d8:35:c3:1c:4e:d4:5b:eb:98:2e:95:
eb:47:8f:b6:a1:f3:d6:17:be:03:e3:23:b0:19:d5:dd:97:13:
c2:bb:01:dc:28:f4:ae:4a:15:f6:af:31:02:1c:29:eb:78:2b:
3c:71:0d:c1:e7:fa:31:05:59:00:d0:17:92:a9:58:3c:31:82:
e9:7c:dc:d0:a7:26:85:ee:8a:1b:4b:40:4f:c5:49:e0:b3:f7:
87:6f:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:16:44 2026 by rpki-client