Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: RzApoQXM3lGKBoQ223ITdqM7DfJJaMDvDN7lG906Opc=
Subject key identifier: 3C:6E:F8:80:B5:75:9C:D7:5E:A5:76:48:6D:7E:12:A8:F6:C5:B6:0F
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 019F129BF6C7EE869BF916B80C1F38C612E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 09AC
Signing time: Mon 29 Jun 2026 09:00:38 +0000
Manifest this update: Mon 29 Jun 2026 09:00:38 +0000
Manifest next update: Tue 30 Jun 2026 09:00:38 +0000
Files and hashes: 1: 3gZgHbD-hrqcq_Pjyy1piMjeRhE.roa (hash: gOXLcL67YsVsuGlPynBLLbxradMX9qPaxCdbkscokfQ=)
2: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: WyIe+1OKVvHoaCBhinFGAO7eOrOq8/IWcX3Ny1N3LzM=)
3: t0K4HGcM7SYmbee1zvHwQlP_JGY.roa (hash: AGbfQJGLAl/VV+53Q0j0FQio/VcRd8jWfQfbs9NOEoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9b:f6:c7:ee:86:9b:f9:16:b8:0c:1f:38:c6:12:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Jun 29 09:00:38 2026 GMT
Not After : Jun 30 09:00:38 2026 GMT
Subject: CN=3c6ef880b5759cd75ea576486d7e12a8f6c5b60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:31:4f:e7:0d:3c:14:90:26:8e:e2:a9:66:1f:
a9:52:a0:a4:cf:60:9e:8a:bd:12:ba:59:75:d3:bb:
bb:89:40:91:f7:d2:e0:49:7d:16:41:90:8c:2b:f0:
f3:3d:a5:56:ac:52:bc:c0:e2:43:29:fd:dc:20:2f:
8d:1e:d9:4d:d6:3e:01:4d:7a:d8:c6:d6:38:ca:e7:
0c:5c:dc:44:40:f5:a0:0e:60:37:ae:37:2e:a8:ab:
61:8b:db:43:b1:58:f6:43:63:b1:dd:0c:9b:66:b7:
f2:13:06:8e:ee:8e:37:74:63:19:45:41:d8:00:f9:
67:96:71:26:cb:ae:b5:0b:d5:4b:42:23:b8:62:60:
29:8b:3c:a6:d5:92:3c:c7:38:54:3b:3c:24:a7:78:
1c:70:fa:4c:4c:46:50:54:66:1c:38:63:aa:d7:c9:
0b:39:1a:49:59:bf:26:8d:63:0b:11:67:92:86:6e:
34:8b:d8:0d:57:ea:ea:6b:58:e1:02:c9:3b:6c:fe:
7b:a4:1e:36:cc:03:e8:68:fd:e3:42:53:b5:0d:71:
de:bc:86:b3:06:da:bb:14:5d:2e:12:20:fd:51:c3:
8f:17:5c:8f:20:f4:78:19:be:f0:37:31:bc:8a:2f:
a7:b0:4e:26:22:fb:8f:7e:51:71:f6:9e:84:ac:8e:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6E:F8:80:B5:75:9C:D7:5E:A5:76:48:6D:7E:12:A8:F6:C5:B6:0F
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:22:94:19:42:a4:de:8e:44:7e:3a:43:1c:54:3a:12:12:c3:
ce:d0:22:76:6c:7f:a0:56:8e:17:ed:0d:b7:cd:b2:cc:df:c5:
73:0b:51:3f:9e:68:0e:ec:23:b9:7a:69:7b:1d:70:8e:65:d5:
20:c5:75:94:e8:a4:b0:41:f9:3e:e2:dc:21:d5:e3:be:d1:62:
35:19:42:34:f8:a7:14:7f:a5:d5:50:c3:bc:0e:b4:76:bf:c2:
9e:5f:97:5e:28:0a:e0:b9:f6:6a:9c:dc:cb:2c:56:98:b4:2a:
c9:d7:ca:0e:25:b1:18:ec:bc:e6:0e:62:77:34:ba:56:0b:33:
71:bb:b1:4d:84:5b:f9:5f:6e:40:e5:3e:1b:a9:3e:e7:6a:78:
60:4e:b5:fd:a6:50:dc:66:61:22:02:7b:86:d9:3d:6c:c6:2e:
18:99:20:00:89:36:0c:85:ba:a9:e0:19:a4:d2:ff:64:55:8c:
fa:3b:94:cf:41:5c:66:f0:a8:1f:33:d9:d8:0e:76:4f:b4:2f:
27:3e:63:b0:d8:d1:e5:60:c7:95:39:09:a2:a1:84:c5:10:f3:
9e:a9:c0:d4:bf:22:73:df:b0:49:63:21:9e:2b:c1:32:c6:a1:
49:f4:cf:e0:83:21:02:98:c1:13:14:8c:d2:41:25:cb:ae:c3:
42:0e:53:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:40:54 2026 by rpki-client