Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
File: 6zlyC79FBhEPkD017RJJvUkeqLs.mft (raw, json)
Hash identifier: ZymxP5BouzOj+a7+/tt9J7Hlj6dnJ2My1WTF+VuLXCI=
Subject key identifier: 80:6C:20:E3:D4:FD:60:D1:0B:1B:77:DF:F1:7E:21:D4:CA:06:9A:4C
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Certificate issuer: /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial: 01A0894307BC9D7B756DDEFDD49B996B721A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
Manifest number: 01FF
Signing time: Thu 10 Sep 2026 03:01:06 +0000
Manifest this update: Thu 10 Sep 2026 03:01:06 +0000
Manifest next update: Fri 11 Sep 2026 03:01:06 +0000
Files and hashes: 1: 03p-Qz6XRyJNNeVn4ckBquqSilU.roa (hash: ysNzZw8fmnL30nJOwCbMlcySw0Zqlls7bKqqA6kBPb4=)
2: 6zlyC79FBhEPkD017RJJvUkeqLs.crl (hash: ADlvuwrKdXfWSyODKWYWkOFNh8T1xyNHjHNRbnuH8M8=)
3: mAUXHWg9xwo5F85IXm5SVffTuuA.roa (hash: GCJWVxe5b23c6JrLrMVtSOWuGjfgn1uA/TJ0/8z7eXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:43:07:bc:9d:7b:75:6d:de:fd:d4:9b:99:6b:72:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Validity
Not Before: Sep 10 03:01:06 2026 GMT
Not After : Sep 11 03:01:06 2026 GMT
Subject: CN=806c20e3d4fd60d10b1b77dff17e21d4ca069a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:a9:27:c0:61:20:50:e4:b1:69:a1:54:e3:
8f:b7:5e:89:7f:d2:62:11:8b:ac:fb:2b:7d:2f:21:
68:98:d0:0c:e3:cc:c9:52:8c:e7:87:cf:0b:04:14:
0d:a0:fb:91:42:61:d0:e4:51:e8:a9:69:c5:a3:c0:
cc:96:c7:e6:f9:1a:e7:e7:0a:29:63:cb:0d:19:e6:
54:e2:94:aa:04:b1:f3:b9:a3:79:8e:18:79:17:56:
d4:84:6c:60:e9:03:4b:a4:54:d6:ec:f9:3b:eb:55:
5e:9e:bd:a0:1c:9e:c2:55:e9:34:64:ed:07:8f:f7:
4a:d7:28:19:5b:2a:e7:1d:c6:51:f4:f0:51:db:c5:
8c:d3:e5:ba:54:45:af:a4:d0:e2:d4:3f:ab:36:72:
bb:ed:76:6d:a5:85:ce:c2:80:83:0e:65:c2:02:3b:
b9:c6:c7:5d:64:b8:e3:82:7a:80:62:55:9a:97:1a:
fa:7f:09:8f:c4:b4:8e:67:80:f1:94:da:2a:14:58:
f5:b8:2a:3d:0d:cd:89:74:33:ff:11:57:aa:3d:a4:
1b:9a:63:ae:a4:e6:1d:2c:91:3f:9f:87:87:bd:5b:
18:f3:c1:2f:c8:53:60:9d:5c:b5:4e:b4:80:01:42:
53:4e:1b:1a:a2:2f:5a:ce:26:df:e7:ca:c8:58:b2:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6C:20:E3:D4:FD:60:D1:0B:1B:77:DF:F1:7E:21:D4:CA:06:9A:4C
X509v3 Authority Key Identifier:
keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e2:c3:56:a7:be:b3:43:22:d5:61:de:4e:fa:d3:ca:41:4c:
4d:ba:77:95:1f:78:e5:02:83:38:8e:3b:a9:06:a2:a2:37:03:
4e:63:93:5b:86:fd:6d:fa:bc:34:94:7d:0e:6f:35:ff:06:ce:
16:fa:13:d7:b5:c4:c5:b4:61:3d:f2:59:20:be:19:1f:73:c9:
8a:63:0a:ea:86:99:46:42:d9:b5:7b:5e:b5:be:f3:46:80:d1:
de:d5:3b:dd:b7:5e:87:f5:ce:d4:34:b6:e1:9d:cc:b0:e0:75:
2d:a4:96:3c:d6:9e:d4:1a:8a:89:b1:4d:84:48:d2:0e:7b:81:
bf:f2:22:2c:95:64:4c:8f:c9:5f:80:cd:05:1e:a1:76:d6:91:
dd:3a:e2:dc:17:4a:9f:79:a9:66:a5:e5:b5:b8:b1:a3:fa:a1:
e3:ce:8e:d3:cc:9e:17:79:9c:c8:02:80:f6:4a:9f:d4:ad:0b:
ec:3b:9e:94:3b:c0:a9:a0:90:0a:3c:87:12:80:7b:8c:08:d2:
b7:b9:28:6a:25:04:2a:e4:99:94:10:46:bf:3d:42:96:03:de:
a2:c9:70:8c:f5:13:d6:95:05:a3:db:72:02:89:50:7d:a9:c1:
f7:7e:26:37:37:f9:4a:b7:6b:b9:7f:8a:2f:08:ce:ae:a9:26:
1b:30:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:15:21 2026 by rpki-client