Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier: qbEKQI7gBt6fG5KPh3cRivac+53pwsPfu9UUJMg6uLc=
Subject key identifier: BF:85:EC:62:84:92:6E:3C:DC:79:A3:FD:DA:93:BE:91:76:4B:27:CC
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial: 01A0017023987A6DC0B1D09A5410F9E17BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number: 12DB
Signing time: Fri 14 Aug 2026 18:02:01 +0000
Manifest this update: Fri 14 Aug 2026 18:02:01 +0000
Manifest next update: Sat 15 Aug 2026 18:02:01 +0000
Files and hashes: 1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: QnaooSedBFz9WNLxWqvpYXgbcrrEthTVRNxEmgik7pQ=)
2: TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa (hash: +nAGfw2iTYghUOUt6Pu3fvtqpyelpRx/U3nYc4p6P9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:23:98:7a:6d:c0:b1:d0:9a:54:10:f9:e1:7b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Validity
Not Before: Aug 14 18:02:01 2026 GMT
Not After : Aug 15 18:02:01 2026 GMT
Subject: CN=bf85ec6284926e3cdc79a3fdda93be91764b27cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:7e:36:de:82:2f:1e:7e:35:96:fc:f3:8c:
e4:62:6f:15:c5:8a:0d:b6:69:94:e3:12:64:2f:49:
44:70:57:3e:7e:c2:60:3c:b8:4a:dc:8f:b4:3a:56:
21:78:60:2c:d2:a0:a5:82:57:41:ec:f8:e7:33:0c:
61:0e:d9:01:70:91:e0:5c:dd:ff:ca:e5:9a:27:22:
0e:9c:a6:f5:88:a6:f2:6a:74:67:ab:69:57:81:84:
93:43:97:7b:2d:3d:84:4a:bc:4e:0d:80:1a:65:0a:
80:07:5e:68:13:e8:ff:d6:71:4d:2a:c6:d5:00:59:
55:04:97:51:c4:f9:39:99:dd:49:a3:0d:fe:0c:f3:
57:60:7e:70:8d:c2:b3:7c:8f:72:1c:66:ce:43:58:
3a:42:c1:32:d5:73:1f:a8:42:86:bf:aa:b1:fa:27:
93:c2:b1:93:68:77:28:9c:80:33:78:6b:b7:a2:2e:
56:15:29:70:ef:88:ce:ad:df:47:a6:49:22:a8:ce:
ac:5d:7a:11:36:3d:65:80:54:76:02:0a:3c:7a:4b:
8a:80:a3:7e:fa:39:5e:3b:21:24:0a:14:33:68:f0:
5c:a9:7f:48:aa:7c:86:a5:43:52:32:17:b9:6b:c9:
7c:20:79:1f:70:24:b8:18:c1:c5:7b:64:54:63:2a:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:85:EC:62:84:92:6E:3C:DC:79:A3:FD:DA:93:BE:91:76:4B:27:CC
X509v3 Authority Key Identifier:
keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a6:8b:93:1c:bf:44:ce:6b:9f:d3:33:e7:ce:1f:ff:32:75:
6c:93:93:ad:bb:63:04:eb:78:6b:7e:cc:a5:a3:45:de:7e:74:
dd:bc:37:65:d8:5c:7d:f7:f8:21:6a:f0:6e:3e:12:13:ef:56:
47:97:c0:4d:f6:13:52:62:3f:5f:08:b6:68:c6:45:fd:7d:7e:
f3:e8:59:87:be:b4:86:8d:aa:de:12:6f:22:d2:e2:ed:4e:0e:
fc:29:5a:71:2c:8b:41:ea:6c:ba:38:9f:1e:5b:f1:6f:f2:e6:
3c:ba:0f:53:79:95:1e:9d:b4:42:a8:4c:87:c1:24:25:fb:e3:
e4:85:da:bb:d1:d8:b1:b9:4e:ee:56:39:3b:9e:ed:00:4e:8e:
5c:84:8b:92:2a:66:61:68:b2:12:9b:bb:dc:b4:4a:d8:17:84:
87:05:34:c2:67:f7:9f:8a:e1:3c:a7:1b:bf:e9:2a:f1:0a:18:
7e:4e:8a:78:a3:0b:ea:05:08:c1:15:57:91:4d:c3:19:75:17:
24:ed:b9:03:d4:eb:b4:e0:79:41:8e:c3:30:c3:c0:e6:2a:da:
eb:b5:fc:94:84:8e:1d:24:ff:f2:73:49:af:d4:87:c4:3c:ad:
f8:3c:45:1a:20:66:e6:db:8f:52:5c:38:9d:51:64:a0:e6:9b:
30:31:21:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:03 2026 by rpki-client