Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier: b89eORrQIHzIrF3UeuNo55Kwy1eEu//gj1wl3apla70=
Subject key identifier: 78:44:7B:00:21:2E:C3:91:80:CE:38:9E:F7:13:32:D8:6F:C4:8D:2A
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 01A08AC3A5AFEC0BBA82E827ACE4AB7DA1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number: 04B2
Signing time: Thu 10 Sep 2026 10:01:12 +0000
Manifest this update: Thu 10 Sep 2026 10:01:12 +0000
Manifest next update: Fri 11 Sep 2026 10:01:12 +0000
Files and hashes: 1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: Triew3IvQSQ6HGWaw3vmONykIy6PY+iymSzq2DA44ao=)
2: H8hy3M-dZbF5LF-bLNKLGkSAiM8.roa (hash: QhTyNMDXFYnK58Oe3Oi5QvMxyGR5QCyt3DqruWhYNhc=)
3: HCRPp5sqGGtIFHlFpCyszLUz01k.roa (hash: cvHb6PDwmvy9cnfO0m3z8Rn9MwuFaJOfZKh3d+uRF+I=)
4: dfuGHC5y6Cs6OtKLWfnDqLIypp8.roa (hash: FQBN+1FQkvOKlz8zc9u6RmD3hivGzzNsAeQ1Z6/0iFk=)
5: fPuins3lFUZ1jY8d9PDJqkylDns.roa (hash: AByQCiojVMPZv7xB+mvq4iwdIkbNNsl1NPcp0f8rA/A=)
6: jLnRiuqaeMjm778rNoTsOOpbmqk.roa (hash: O+LqSjIvdiGCJU85S8encdf0tP/8HNlkHBkVyyeQEYw=)
7: nky6VY8kQKqSy_Jo_ry1YB-6XXk.roa (hash: YIoLB/kdYI0wpUMtQO8K9AaO+DoKlWfs1MurD/HYA/k=)
8: yWPqOgOBvju_AqBpcll2n69Siyg.roa (hash: r7Vqk0QTVCvbIxJGhQ/NDTG06WGq4j4lpvgrIiORKak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:a5:af:ec:0b:ba:82:e8:27:ac:e4:ab:7d:a1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Sep 10 10:01:12 2026 GMT
Not After : Sep 11 10:01:12 2026 GMT
Subject: CN=78447b00212ec39180ce389ef71332d86fc48d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:b0:26:c2:80:57:f4:c4:81:34:42:03:41:
c5:8d:ad:a7:6d:fb:7c:6f:4a:f9:67:2a:31:8e:9a:
6f:2d:1d:e2:4c:71:65:f1:ca:ef:45:7a:23:53:98:
5a:09:0a:54:56:e3:44:7d:44:9d:c1:72:43:de:a6:
69:3d:5b:6f:69:47:89:8b:4f:40:97:fb:e1:85:00:
81:16:c7:59:c0:cc:45:90:fd:65:72:46:16:67:58:
64:19:7b:bc:60:f7:f5:7a:dc:e6:37:0c:57:1e:21:
93:f8:e8:21:49:f6:59:9c:fd:7d:54:40:0c:43:a5:
88:cc:de:4f:52:ca:a1:b0:5a:f0:b2:96:34:ba:57:
85:d7:f6:b8:3e:b7:b6:c1:2a:2b:45:22:9c:5a:69:
fe:37:66:c2:ce:82:95:93:5e:8f:7d:28:41:83:fe:
08:cd:24:ee:26:aa:62:80:9a:88:10:31:63:60:c3:
55:f9:c4:1b:67:93:52:42:0b:75:2c:b1:37:1d:a5:
20:47:96:4f:4e:c3:14:6b:7e:26:33:98:ab:5d:d2:
ae:62:01:e3:46:19:24:37:ad:a8:c1:81:9c:68:d9:
fb:b2:4c:85:bc:0f:a0:19:cf:11:cd:f3:40:e0:24:
a9:c2:8e:d6:07:1a:11:7f:3d:f7:d4:ed:a6:c0:1d:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:44:7B:00:21:2E:C3:91:80:CE:38:9E:F7:13:32:D8:6F:C4:8D:2A
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:56:bd:0b:96:a8:01:53:21:d0:bf:fd:ef:6b:34:60:5f:d9:
6a:fa:02:2d:90:88:49:95:a4:be:bf:67:14:33:12:25:55:f2:
ed:01:1c:53:7d:69:0f:33:28:69:f3:84:90:2e:5c:ec:14:d7:
6b:7f:6b:00:14:b2:17:9a:82:ad:4a:bf:ed:25:1c:b4:a5:f6:
25:42:df:a8:36:44:e3:b6:f9:72:9d:5b:9f:e2:bc:0a:ce:62:
5f:0c:a9:0c:0e:44:af:a1:08:c1:0d:9d:35:e9:c6:14:9f:87:
a5:f6:c0:06:f6:40:7f:74:3b:52:89:be:13:f6:49:de:a4:c1:
cf:55:00:19:40:9e:84:f5:44:1d:e7:ca:71:43:16:1c:a3:0c:
1d:30:32:48:63:7c:ba:48:d0:56:ab:0e:1e:cc:f4:42:40:77:
75:ab:78:11:e5:0a:06:1b:90:10:34:5d:c1:8e:3d:e2:62:b7:
5d:48:79:05:e1:26:3a:34:fc:76:7a:33:36:e8:bd:8a:42:09:
0d:bd:48:4e:df:ab:9a:44:85:53:a7:08:6c:59:37:4a:b7:44:
08:2d:50:21:e1:82:d4:f6:82:3f:6b:80:1c:01:5c:57:43:90:
ef:81:94:0d:d7:61:f6:1c:d7:a3:e2:22:8c:6c:70:ee:6d:a9:
68:d0:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:38:58 2026 by rpki-client