Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier: PqSdn3yXozfMPnNjuwjPFmI6DPFQTFePcUZv3RDlG3A=
Subject key identifier: 59:16:37:A0:69:D9:29:51:3E:85:6E:96:FA:2E:B6:07:19:05:52:9E
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer: /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial: 01A140838CFF79999F92AC38B363FC3CEBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 17:02:05 +0000
Manifest this update: Thu 15 Oct 2026 17:02:05 +0000
Manifest next update: Fri 16 Oct 2026 17:02:05 +0000
Files and hashes: 1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: dLWg15vaukxepM+BhTVuYk9HILJfBBb8JS2zRthttWM=)
2: yhCwjfMZQm7fd9jkt80pOtuEFGo.roa (hash: hs2p0KXq3AByfrOTWurPjFi6ySD7XrB1GNNKZ5BnbRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:8c:ff:79:99:9f:92:ac:38:b3:63:fc:3c:eb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Validity
Not Before: Oct 15 17:02:05 2026 GMT
Not After : Oct 16 17:02:05 2026 GMT
Subject: CN=591637a069d929513e856e96fa2eb6071905529e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:1b:19:79:4f:1c:ec:82:af:27:0e:9f:4a:
cc:08:05:f0:a4:5d:46:78:db:9d:87:30:b5:c6:dc:
26:f7:01:11:03:b8:86:e8:65:1c:a4:f4:96:71:7a:
15:a6:85:ae:8c:5f:8d:70:51:80:40:b3:70:68:89:
e5:83:b8:65:bd:96:b1:c4:cf:1c:da:6c:6c:e1:31:
8b:77:ce:02:d4:7f:17:f3:af:f5:bb:c2:11:d7:a2:
d0:f4:6f:38:44:cc:14:3e:e6:e0:7a:92:5b:d4:68:
0f:6e:79:e3:44:21:e6:87:88:9e:bc:ae:c0:b9:80:
2b:e1:7f:71:97:bd:15:4f:1d:4e:20:fb:6d:97:a3:
b5:dc:15:80:81:d8:24:b2:75:57:37:ce:f8:b8:75:
40:91:7b:89:7f:69:ef:64:d5:19:3e:21:e4:e4:e5:
b0:51:66:c5:94:27:76:d9:d5:11:98:44:88:ce:1f:
ae:6a:4b:68:4c:b9:14:51:6c:e9:3d:7a:08:65:2a:
03:91:de:51:82:29:3a:6e:34:4c:e7:23:0e:9d:33:
5a:d7:9e:5a:3e:2a:3f:95:46:e2:91:08:0b:ec:46:
74:5b:53:dd:65:4d:b3:74:f2:ad:6f:8e:f4:35:31:
ad:cf:d3:7f:5b:d9:0f:5e:68:d5:ff:90:43:f7:a0:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:16:37:A0:69:D9:29:51:3E:85:6E:96:FA:2E:B6:07:19:05:52:9E
X509v3 Authority Key Identifier:
keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b3:8f:2b:8d:37:dd:27:10:dd:89:51:09:b7:06:21:75:7a:
d3:a8:a4:f9:bf:49:40:f6:25:16:0b:df:7a:b0:7c:3f:4d:f8:
89:af:78:e5:43:fa:42:28:0e:2d:ad:51:4b:2c:7b:22:3e:65:
d7:64:53:31:b0:0e:69:9d:76:47:fd:e7:ed:7b:86:bb:8f:a6:
2b:b7:7d:43:7d:2d:07:e2:ca:1a:97:e9:03:00:97:1f:50:6e:
76:39:27:95:47:bf:ea:86:bb:4e:1e:71:43:8a:fb:98:71:c2:
14:94:d3:8e:a1:99:44:d9:74:85:41:75:e0:cc:31:6f:68:1b:
3d:10:57:96:1e:aa:9c:77:64:65:fd:84:0a:88:67:f1:08:bd:
8f:24:b4:ef:c4:74:94:78:ce:bc:33:9a:49:98:1e:50:82:c7:
62:f3:34:4d:58:2b:c1:29:97:23:93:a2:88:a6:6b:ee:45:6b:
34:53:ea:5c:b8:f0:3a:2f:2a:cd:c8:55:c3:b3:ad:ba:67:40:
6f:e8:f2:0a:14:ce:f1:23:28:bd:52:d1:08:05:1b:6a:24:fb:
d3:5a:a9:20:94:13:7a:22:ab:e6:8d:16:dd:9f:f6:c1:97:bf:
3d:3a:a3:2d:fc:a1:92:90:01:57:00:a7:9f:92:83:4b:19:26:
a6:d9:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:09:56 2026 by rpki-client