Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier: fhPnzKFUZLQzPTr6AILylIKHH17m7XToOcN7KqTsJ8E=
Subject key identifier: 8B:74:27:EB:3C:B3:23:6A:6E:55:F2:8B:FB:41:67:BB:28:4C:52:28
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 01A0BB783A8961831F4A55E18AF68E34FAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number: 0DB8
Signing time: Sat 19 Sep 2026 21:00:13 +0000
Manifest this update: Sat 19 Sep 2026 21:00:13 +0000
Manifest next update: Sun 20 Sep 2026 21:00:13 +0000
Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: lpkIZ+222CPUcBol6+tVTNTJm2MMrIbY+zyRJ9jJWNU=)
2: JzPgFYHKYPTS04-dHtGN6w7B0bw.roa (hash: JVp2jGweTk75RJ8KZ5GxFoy/wMNQLkzVhJmQPmBEuV0=)
3: wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (hash: loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:78:3a:89:61:83:1f:4a:55:e1:8a:f6:8e:34:fa:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Sep 19 21:00:13 2026 GMT
Not After : Sep 20 21:00:13 2026 GMT
Subject: CN=8b7427eb3cb3236a6e55f28bfb4167bb284c5228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:98:95:ed:95:aa:fb:e2:94:03:b7:f6:14:
69:26:c9:cd:23:94:80:3c:5f:08:51:88:37:7d:bf:
7d:0f:9b:94:90:07:12:b1:d2:33:e1:87:26:84:2e:
82:58:9a:0f:e2:bd:96:0d:aa:6e:5c:54:8c:47:3b:
de:d2:89:23:50:82:a8:15:04:65:ee:03:0f:00:eb:
aa:e4:df:cd:44:d8:f0:df:7d:25:95:e8:df:89:68:
33:c5:81:5b:46:3e:65:4c:63:e7:76:5b:fd:da:8b:
08:19:25:54:d6:f8:50:54:5c:94:aa:ef:68:b8:27:
26:73:71:56:af:9f:f6:6d:12:14:36:8e:c7:c8:e2:
06:64:72:bb:ee:80:fe:e1:69:2b:e9:6d:61:51:e6:
d0:1c:ea:12:5e:9a:d5:80:8e:0c:a7:70:aa:f6:7e:
da:10:e3:22:80:07:40:0c:a7:e6:73:77:f0:ed:97:
d6:d2:04:3a:ba:d8:2e:15:55:75:ea:4d:3f:b6:1a:
b0:f1:55:2e:b9:22:75:2a:63:27:ca:f7:4f:38:c7:
99:d6:ab:29:c6:37:cd:ef:27:00:c9:6f:cb:ac:f4:
4b:4b:38:d5:09:0b:19:41:38:0a:5c:d1:0c:fa:83:
b7:4a:41:eb:48:79:ff:3f:3b:f3:a4:b2:0d:7d:b7:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:74:27:EB:3C:B3:23:6A:6E:55:F2:8B:FB:41:67:BB:28:4C:52:28
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:30:8f:59:c3:ff:b2:3a:17:8c:3a:5e:2a:4e:13:64:98:6b:
06:11:d8:18:b8:6d:f9:f1:11:60:21:3a:98:99:73:e3:e0:92:
e4:35:90:2d:9f:31:a0:97:1b:3e:5e:1f:f7:14:c7:b7:a2:34:
9c:66:41:1b:8c:e6:cb:b8:51:7f:aa:40:02:47:19:d9:61:41:
72:d5:cc:bd:87:8a:54:1e:03:ac:6d:ae:e4:71:da:b2:3a:20:
13:be:43:80:00:b6:50:96:af:a2:8f:da:6c:4d:ff:b0:b2:59:
f9:62:92:d3:d9:c7:73:9e:59:7c:74:24:34:6d:19:4c:e6:4e:
76:cc:a2:a9:2e:70:00:fe:88:a6:7a:94:78:ad:68:8a:64:27:
d8:7c:a3:29:4f:3a:76:9d:ff:a5:12:be:90:6d:12:04:c2:7d:
4f:5b:74:bb:3a:26:15:be:db:dd:5e:77:72:d0:1b:e1:5a:c2:
ca:0d:61:55:fd:fe:a2:f2:1f:b7:1b:10:c0:e8:65:67:ac:6f:
e7:da:36:89:21:b9:9a:75:3b:2c:4d:5a:f3:04:71:a5:4b:b4:
3e:bf:ce:50:67:c6:24:42:bc:b7:c9:21:1b:ae:8e:bc:6f:db:
2c:93:dd:28:d2:51:ce:4b:11:07:62:40:d5:1b:cf:92:85:98:
c2:f4:4a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:35:27 2026 by rpki-client