Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
File: 6rQDOf6nhnTLY0k0UbHTGhazOOg.mft (raw, json)
Hash identifier: /IhjLYkqZDgASKSzmHHgunD060PAOdMbwNGKl81DJ1E=
Subject key identifier: 76:70:D1:AF:FC:4A:87:94:C9:4F:46:B8:0F:B6:AF:A3:78:F6:6F:5F
Authority key identifier: EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
Certificate issuer: /CN=eab40339fea78674cb63493451b1d31a16b338e8
Certificate serial: 01A0889E37DF7D00AFAE9870D30031F45624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
Manifest number: C0
Signing time: Thu 10 Sep 2026 00:01:05 +0000
Manifest this update: Thu 10 Sep 2026 00:01:05 +0000
Manifest next update: Fri 11 Sep 2026 00:01:05 +0000
Files and hashes: 1: 6KqPxwz5HN8tB4czCK5TC9aRWjk.roa (hash: LIe7on9yf/qyzu9vp2pTn8miDNvuDmAxNQ8IOORYtdA=)
2: 6rQDOf6nhnTLY0k0UbHTGhazOOg.crl (hash: K496iDh+r2VkOTpr+xbQ6+xWdCrCldvqq64yEbVE5Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:37:df:7d:00:af:ae:98:70:d3:00:31:f4:56:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab40339fea78674cb63493451b1d31a16b338e8
Validity
Not Before: Sep 10 00:01:05 2026 GMT
Not After : Sep 11 00:01:05 2026 GMT
Subject: CN=7670d1affc4a8794c94f46b80fb6afa378f66f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:48:02:dd:c7:06:fd:71:0d:0c:5d:5f:eb:
c7:30:46:d1:ac:97:23:77:e8:d3:7b:55:b4:3e:d7:
86:d8:23:c1:a1:0f:c7:a0:36:97:4e:7e:7b:1a:ff:
99:cd:e6:f7:6a:07:eb:60:33:a7:4c:6e:a6:68:ec:
8c:4a:ea:aa:40:12:0c:b5:e0:bc:ec:1a:24:0f:77:
c7:1c:36:69:42:5a:37:48:75:40:51:57:0f:37:42:
a7:9c:75:5b:44:a7:8d:49:e6:55:69:7c:a3:3d:24:
53:e9:51:99:5d:12:79:1d:08:11:97:6d:a2:b4:dd:
b9:dc:d5:30:9b:70:8e:98:4d:14:c7:25:81:e8:d5:
a4:38:6d:ce:a6:19:e2:2d:63:c0:a9:ae:e6:33:29:
0f:51:b7:b2:74:7d:b1:0a:96:a5:bf:b8:9e:f7:70:
b2:9b:f2:93:f8:66:1e:22:9c:cf:cc:f6:ec:b8:f5:
70:3c:b8:f7:f2:b9:95:1d:cd:07:ab:a7:d3:69:af:
be:88:3f:e3:b0:06:a5:57:be:48:1e:76:fc:d9:ff:
c4:ad:1f:1c:79:65:c6:62:d7:61:51:cb:b6:09:09:
2f:c4:5a:04:2e:68:cb:35:db:66:e8:20:3d:1c:55:
cf:98:78:95:b5:59:1b:e3:5f:1c:23:65:1b:fa:3c:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:70:D1:AF:FC:4A:87:94:C9:4F:46:B8:0F:B6:AF:A3:78:F6:6F:5F
X509v3 Authority Key Identifier:
keyid:EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1a:1b:bc:40:c8:b2:fb:28:18:77:d1:85:2b:4f:3c:e1:8c:
5e:bc:de:5d:43:82:b7:e1:9d:bf:35:ad:35:d7:fc:4e:21:ee:
1b:12:c7:94:cf:a9:72:33:12:bc:21:40:25:31:95:c9:02:5e:
ab:00:36:e4:60:7a:3a:2b:8f:4f:dd:2b:39:d5:49:04:66:05:
7e:13:59:ee:f8:43:41:a9:3f:ea:5a:c5:3d:c9:d8:2b:39:a6:
34:b8:38:6c:32:29:19:47:fa:c9:55:ac:ac:f3:13:54:65:6a:
9e:a9:9e:75:85:65:a7:69:ae:7e:e3:55:23:2a:74:01:99:5b:
fd:b9:e0:eb:a6:65:95:76:bc:b4:35:67:66:e6:39:a2:55:e3:
bd:01:22:df:7d:84:d1:97:d8:a7:3f:54:56:49:a2:40:84:b3:
a8:46:96:d2:53:49:a5:8b:bd:d1:02:78:69:33:96:22:b2:c8:
62:7d:aa:ed:07:b2:b4:8e:ba:8a:bf:bb:e2:f8:01:4c:25:50:
fe:49:56:7d:fe:51:0f:a4:c2:10:97:2e:a3:f4:6e:15:2c:79:
d4:d3:4f:21:83:f6:4d:9f:55:1e:b9:a4:f1:24:b0:ed:85:8c:
e9:a9:5e:7b:c5:2d:11:f0:28:40:de:7c:2e:76:99:cd:25:4e:
e6:f5:4e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:32:39 2026 by rpki-client