Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
File: _6vCNZX9gER9mPXsNRMWG9JHP8Y.mft (raw, json)
Hash identifier: j1Qt1azpd7Fe25UflxqKKDElZXWYZiGQ1+pJBxSMbyg=
Subject key identifier: 4A:3D:53:0C:9A:A2:EA:25:A8:74:65:A7:54:21:C8:09:D1:98:25:3A
Authority key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
Certificate issuer: /CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Certificate serial: 01A128B0CF79E69699326F0918665B70AC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 02:00:38 +0000
Manifest this update: Sun 11 Oct 2026 02:00:38 +0000
Manifest next update: Mon 12 Oct 2026 02:00:38 +0000
Files and hashes: 1: _6vCNZX9gER9mPXsNRMWG9JHP8Y.crl (hash: k9qwKHaQL31E3qdjCkLB003cy1t2uu7likukowtr5VI=)
2: t2c4lmTqC9uGYzleHqLG4klFeZ8.roa (hash: fRL26pE0Lx95YEnYyPGswoxFOLVpoZdxz9ASbz1R9mA=)
3: wIbv7UWO_ALdEP04czwT0aWwxxI.roa (hash: 4JPtr6Gu7VDu44z7LHmoMEvhe+/5/6vfyE3Ntj5O0Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b0:cf:79:e6:96:99:32:6f:09:18:66:5b:70:ac:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Validity
Not Before: Oct 11 02:00:38 2026 GMT
Not After : Oct 12 02:00:38 2026 GMT
Subject: CN=4a3d530c9aa2ea25a87465a75421c809d198253a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:b5:03:21:33:68:8d:a1:27:0b:62:f7:56:
f0:09:0a:94:66:6d:ee:b5:a7:a7:02:13:37:1a:c1:
a5:82:13:35:ca:f3:90:6c:97:37:71:e4:ab:01:ea:
3e:ff:a4:4d:a3:c7:da:15:f9:0d:8b:12:83:3c:e1:
18:d9:42:7b:f0:8d:b0:a4:1f:3e:b2:3b:cf:34:31:
91:c5:6e:a1:2a:57:77:83:36:38:db:7b:ae:1d:02:
c0:02:51:72:e4:fc:0c:f3:07:a0:95:e9:08:df:34:
f8:c1:e2:1e:0c:c1:34:a7:48:d3:50:79:f9:0b:66:
50:34:6c:07:e7:1f:ef:54:a1:c7:09:45:16:7e:53:
cd:e1:28:4b:d8:db:06:a4:93:ef:96:f8:85:6d:5f:
de:73:99:ff:01:53:f6:e6:d1:cd:a1:ba:cd:4c:9b:
8f:4e:65:ee:27:e6:49:34:99:3e:2e:43:09:18:77:
54:d8:79:a7:cc:8e:2b:db:ae:89:6b:e0:81:c8:0c:
6a:9f:bc:b3:f3:bd:36:0d:e2:be:56:8b:30:c4:49:
99:f2:67:8d:40:45:8a:76:92:50:63:b2:f0:a3:d1:
c0:b7:1a:1f:81:ab:ef:9e:8c:47:4b:bc:e7:32:0e:
a3:a7:54:81:ff:48:5b:3f:e5:f8:fa:43:f1:2e:71:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3D:53:0C:9A:A2:EA:25:A8:74:65:A7:54:21:C8:09:D1:98:25:3A
X509v3 Authority Key Identifier:
keyid:FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:04:4f:6d:8a:ad:5c:cc:de:57:01:cc:6f:56:ca:0c:8f:48:
88:8d:85:64:0c:25:c6:6e:90:cb:5d:20:ef:cf:fb:a3:0b:1e:
f9:4e:5b:82:46:75:43:70:81:b1:60:09:31:c3:d7:8c:a6:58:
80:a9:37:42:0c:63:97:20:c2:1b:f3:1c:97:c1:23:94:00:ad:
10:8c:1a:a7:ec:1f:15:db:68:f9:21:dc:0a:dd:7d:22:fe:9b:
05:d1:c3:ad:7e:3f:1e:aa:93:be:0d:fb:d7:56:93:ac:4f:6f:
7b:59:54:b8:a3:a0:1c:7d:22:52:49:fd:81:98:db:41:63:a9:
a9:d8:2a:44:32:39:f9:75:64:c5:1f:ff:1c:8f:b9:03:e2:4f:
2b:ae:3c:92:cc:8d:50:65:b4:32:49:62:e9:ce:51:37:7d:97:
05:8d:73:b8:19:50:e6:48:66:36:53:30:03:5c:71:2b:3b:04:
e5:4a:b5:a1:4a:7a:c3:22:20:46:a9:c6:9d:e1:38:e9:84:24:
75:5c:3c:e2:88:e4:af:85:34:83:77:36:48:f2:a5:3a:f3:4f:
ad:3a:eb:f2:50:a4:88:1f:43:41:56:7c:fe:f2:e7:f9:74:cd:
4c:1d:47:4e:18:99:6d:fe:e5:92:1d:a3:c4:3a:3f:f5:bc:b2:
9c:08:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:52:49 2026 by rpki-client