Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier: fUjbjLFFE5j/bfVHqvuFRQYvpex7xtemXH+O0+3lQyo=
Subject key identifier: 68:C4:0A:F3:46:23:50:C9:3B:BE:FE:8F:35:3A:08:97:6D:7B:3C:62
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 01A153D2DDB5C668E30275F9D6EFE2170F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number: 0AD7
Signing time: Mon 19 Oct 2026 11:01:30 +0000
Manifest this update: Mon 19 Oct 2026 11:01:30 +0000
Manifest next update: Tue 20 Oct 2026 11:01:30 +0000
Files and hashes: 1: 1D6YY4AfNvV2NepuuxtkGVV-rLg.roa (hash: LNZLVcujqagQzwW2q2V4qRkT/sBDkvN16A/NWVzLzWU=)
2: HOYPj4fxlJpMEgvz-DEwT478Zw0.roa (hash: 7P50ZlqJyO8nhGQCGcuWiJXDncM9pWzrp0URwjErvl4=)
3: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: mqVFljoYcvIEpBuBJIpAiE5yIyF6oSh98KDmisKH9DQ=)
4: UtBuOFJeA4gPyVPmFEGgkw2zEFA.roa (hash: eu9hciCdi48z/WHUFfgsqnitXTRgtMV120uloxDdTDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:d2:dd:b5:c6:68:e3:02:75:f9:d6:ef:e2:17:0f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Oct 19 11:01:30 2026 GMT
Not After : Oct 20 11:01:30 2026 GMT
Subject: CN=68c40af3462350c93bbefe8f353a08976d7b3c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:1c:4d:6f:e5:8a:56:24:17:e4:44:13:b1:
37:69:25:46:c3:cd:16:16:87:34:c2:25:c1:6c:97:
c5:1b:38:51:c4:d7:33:76:12:67:7a:e5:c2:c2:01:
55:9b:fe:2a:ef:ae:08:8f:88:1c:c1:94:99:3a:57:
2a:e6:84:18:3a:5f:74:bd:9f:8e:11:6c:d9:2b:5f:
61:05:24:56:9a:86:3f:03:0f:82:38:cb:e0:64:c1:
47:37:dc:6c:86:68:9c:65:99:fb:ac:3f:6d:24:14:
6f:c0:64:9c:fe:c3:fc:a3:de:7a:90:5c:ef:75:8d:
76:34:b0:88:16:c5:51:a1:49:b0:65:5f:83:b7:1c:
e6:fe:67:35:e6:de:c2:20:23:82:cd:39:9a:60:b0:
cc:fe:54:50:6e:3b:32:79:c2:98:06:6a:10:32:c4:
af:e3:5c:e4:76:ac:97:2e:04:61:7a:3f:15:81:e4:
b8:e3:69:ae:99:63:bc:0e:e9:47:17:d2:26:72:79:
1b:04:e0:ab:19:e7:d7:1e:04:0d:b7:c3:fe:ce:25:
35:fb:91:75:dc:4b:6d:da:23:bd:5d:78:a0:9f:24:
e9:ae:af:e5:15:75:f1:31:be:a6:18:2f:2d:64:18:
c0:39:d3:ec:1d:8e:eb:b9:75:57:3f:dd:91:07:bf:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C4:0A:F3:46:23:50:C9:3B:BE:FE:8F:35:3A:08:97:6D:7B:3C:62
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:aa:f1:ec:0c:00:0c:06:f8:ca:33:61:ae:9b:57:3c:2f:88:
e5:00:bb:43:75:96:28:7b:4d:62:ed:0d:96:1b:1c:43:9a:ea:
17:a5:1a:cc:52:57:d2:01:f8:2d:77:04:c6:2e:13:83:a9:61:
1e:5d:7f:9e:12:f4:9d:22:60:9b:e2:3f:31:f9:c4:f1:81:86:
c3:ab:79:ef:3f:99:1f:38:27:19:ef:24:3c:9b:5c:dc:81:7a:
86:d0:cd:4a:14:c8:ca:b9:68:e7:b6:48:b4:5a:52:d9:09:eb:
3d:c3:05:78:a6:22:be:27:b1:ac:6e:01:4d:e2:df:57:e0:e5:
0d:85:ab:b0:61:dd:0e:7f:23:65:a1:fd:b9:f9:8d:a0:30:c5:
4b:b4:35:e2:04:28:2a:44:6d:cc:8a:83:16:f5:b8:d1:d3:e1:
da:57:ee:4a:77:ad:47:74:7e:2b:44:93:e3:f6:3a:b8:f6:da:
45:4e:0c:8f:b6:69:e6:40:e2:8b:f7:0f:19:f3:3b:b6:a7:bd:
52:e8:84:98:a7:f7:9f:17:48:5b:dc:2d:29:3a:c0:40:07:86:
25:03:48:81:eb:96:e7:f0:0d:86:f2:74:c4:a5:00:f8:a7:e3:
3a:cf:35:bd:2b:49:0d:51:53:48:2e:1a:0a:26:e9:0f:20:05:
74:42:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:37:10 2026 by rpki-client