Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: 3W0/ObjdYLfO/ZEJpsf2Dv7+OJl61h7BeNTxGyresXY=
Subject key identifier: D8:5B:D3:F7:A1:29:B7:8D:D8:67:CA:68:51:C3:60:E0:68:29:FE:5E
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 01A13C6EC51E7EC5B3E4823EFE2443A1C53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 18E8
Signing time: Wed 14 Oct 2026 22:00:54 +0000
Manifest this update: Wed 14 Oct 2026 22:00:54 +0000
Manifest next update: Thu 15 Oct 2026 22:00:54 +0000
Files and hashes: 1: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: 1pOPya3FPwaw4Th/knLKKLOso5gO3HsE1vhX/SKhKkc=)
2: d4ZsetDOK1N8Oc6-p-HftKevwhU.roa (hash: 0L55RAM7hPd5rdjKfZF2PwQWl976vJkt47d6mV+kYso=)
3: jwNcE1s-makAFRG_Z0YpC8tgTEA.roa (hash: UWEBlXajJs0PyfeEOQvBkjJjVBwaTr2pthi+ykCI4sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:c5:1e:7e:c5:b3:e4:82:3e:fe:24:43:a1:c5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Oct 14 22:00:54 2026 GMT
Not After : Oct 15 22:00:54 2026 GMT
Subject: CN=d85bd3f7a129b78dd867ca6851c360e06829fe5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:2a:93:a9:47:3b:8e:06:25:93:6e:54:31:
4a:68:a1:37:e4:ee:6b:83:74:14:3f:2a:92:88:bc:
85:6b:1a:e9:c8:60:2f:9e:bf:a2:a6:ed:9c:e0:a3:
e3:9a:ed:6d:dd:c9:6a:71:90:ff:4c:01:93:88:2a:
ab:26:c9:7f:16:6d:f0:49:0a:fd:9d:cb:2f:79:a5:
e8:50:6f:15:b6:1f:29:f3:af:c4:74:d3:a2:f4:36:
32:80:dd:08:73:21:e0:f0:75:ea:24:21:d2:16:07:
67:54:09:d3:e8:cd:df:74:be:c0:36:6f:51:b4:7f:
93:c7:f2:77:87:50:00:47:ad:8a:62:27:7c:91:23:
31:d0:1f:43:05:63:f5:13:2e:e5:32:6f:11:21:47:
49:ce:df:04:83:07:81:ae:ea:3c:ef:be:d2:33:85:
d5:a0:83:7f:ed:a6:6e:86:45:01:60:09:1f:73:b2:
6f:99:9a:4d:6e:fd:23:94:73:6c:54:e1:11:a6:88:
35:4c:33:40:ca:51:3c:6a:c3:55:f9:8a:16:f5:0e:
cd:b7:93:83:18:28:28:73:bb:d9:56:81:15:71:38:
32:61:d6:dd:53:eb:38:c0:43:ac:5a:35:2b:cb:2c:
d7:f4:f9:d2:77:6e:70:e6:0a:e8:64:44:c6:5d:7d:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5B:D3:F7:A1:29:B7:8D:D8:67:CA:68:51:C3:60:E0:68:29:FE:5E
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:db:d8:43:23:57:1d:32:52:f6:f1:89:87:f4:73:01:4d:92:
04:02:29:63:d9:a7:32:d1:bb:42:14:d3:21:1b:a6:5f:f4:d1:
92:95:6d:23:32:b9:25:5d:f5:01:5d:1d:e6:78:b0:31:00:6d:
e4:48:06:f7:ec:c1:21:6b:a9:c5:c8:91:fe:70:3d:a0:01:fa:
fa:60:4c:d6:83:3b:09:4a:e9:af:32:e3:cc:2c:46:e3:45:88:
b4:18:af:1e:d0:7a:8f:de:c5:d4:79:57:f2:a6:ad:03:36:5a:
e9:65:51:47:81:82:dd:4f:ea:32:54:bc:16:25:5c:5e:be:59:
09:fa:c8:d2:c6:1a:9e:fd:b0:dc:8f:45:55:8d:18:09:ea:e8:
b9:26:bf:8a:e0:9d:14:c7:0b:bf:87:dc:3a:ad:81:2b:3f:b5:
69:2c:af:0f:23:bf:5d:33:9c:f3:d8:9f:c9:1a:18:21:79:3f:
a9:f9:86:28:09:05:85:bd:1c:a2:5f:07:6d:48:47:ec:a3:d7:
9b:e8:5d:5e:33:1d:9e:99:a1:f3:a5:42:fb:0e:c7:36:ad:32:
fe:50:ea:08:f7:ee:32:b6:73:2c:78:cd:7b:58:2e:48:16:50:
f4:0d:31:02:d4:fe:59:43:6b:d9:46:ba:30:31:17:5f:6f:64:
17:d3:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:36:07 2026 by rpki-client