Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
File: 6rQDOf6nhnTLY0k0UbHTGhazOOg.mft (raw, json)
Hash identifier: aC7yMILmQaC4mm4a0vXvRRXb78MuFDgwknM0xH7vDZI=
Subject key identifier: 5E:A0:4D:D5:CC:A7:58:05:A5:01:D8:68:72:84:0A:02:57:CA:94:18
Authority key identifier: EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
Certificate issuer: /CN=eab40339fea78674cb63493451b1d31a16b338e8
Certificate serial: 01A18977E5DF0BC6ADEED747D29E5EEDA455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
Manifest number: 0145
Signing time: Thu 29 Oct 2026 21:01:38 +0000
Manifest this update: Thu 29 Oct 2026 21:01:38 +0000
Manifest next update: Fri 30 Oct 2026 21:01:38 +0000
Files and hashes: 1: 6KqPxwz5HN8tB4czCK5TC9aRWjk.roa (hash: LIe7on9yf/qyzu9vp2pTn8miDNvuDmAxNQ8IOORYtdA=)
2: 6rQDOf6nhnTLY0k0UbHTGhazOOg.crl (hash: OGXNNNw5yf9J0Q8QzuXJT90nMj2CeHj+KLdvAXGEljc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:77:e5:df:0b:c6:ad:ee:d7:47:d2:9e:5e:ed:a4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab40339fea78674cb63493451b1d31a16b338e8
Validity
Not Before: Oct 29 21:01:38 2026 GMT
Not After : Oct 30 21:01:38 2026 GMT
Subject: CN=5ea04dd5cca75805a501d86872840a0257ca9418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:4c:38:5c:ec:92:28:fc:7f:97:dc:ae:95:
92:52:9e:75:b4:cf:12:0e:4a:18:3a:d8:e3:af:6d:
0d:57:0c:3b:92:80:31:b0:03:b6:2a:c7:25:7b:61:
32:e9:97:d8:51:ec:1f:83:05:2d:c5:4b:20:20:54:
78:07:d7:f7:87:7b:2a:b8:7e:55:90:bc:7a:e5:f0:
0b:a1:9a:01:49:ca:da:84:39:f7:76:11:dd:0c:cc:
14:05:44:b8:ee:db:06:49:60:80:4a:b2:85:a8:67:
17:9c:7b:41:0b:1f:47:f2:7e:6a:7d:75:49:3d:ec:
73:f2:26:d9:61:d1:39:14:68:fe:6e:72:aa:63:2d:
f2:39:28:68:c4:3a:97:32:3c:b4:c1:ce:d3:a4:b9:
90:2b:4e:cd:0f:4e:b0:a4:e1:b1:10:41:76:df:22:
21:b3:a6:a6:1d:40:f2:34:3d:60:7e:bb:6e:4b:4e:
5f:47:db:2d:7f:8f:ab:e2:e0:ca:ce:fe:86:67:e0:
51:24:33:2e:b6:a3:f9:3f:5d:9f:cd:ed:7c:f9:ba:
ea:5a:09:b2:ed:4b:d7:38:26:25:06:d9:8a:fb:21:
68:0e:8c:f4:00:4a:9a:7d:a7:fb:5c:37:91:20:d4:
c0:a5:7f:37:ad:54:4c:fc:27:a3:4b:cd:cf:1b:c8:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A0:4D:D5:CC:A7:58:05:A5:01:D8:68:72:84:0A:02:57:CA:94:18
X509v3 Authority Key Identifier:
keyid:EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:99:cf:c2:47:47:ed:a7:c9:f5:12:2d:ba:12:20:29:3d:66:
51:e9:8b:94:6a:bd:e4:00:a1:fe:d2:3d:a7:c9:79:97:3e:b4:
22:e8:48:9b:0d:a8:ee:03:16:71:df:d9:05:80:e1:eb:74:96:
15:8b:7a:92:ea:88:cb:ae:c4:52:75:ba:70:55:cb:c9:6e:17:
09:97:69:fb:43:5c:33:6b:78:34:dc:ef:e1:6d:d4:4d:cc:82:
cf:19:1d:f9:68:e1:e4:d7:c2:a6:c3:0c:eb:2c:a8:72:46:2b:
8e:fb:5c:f6:01:80:71:73:a8:38:95:1c:f0:90:b1:07:7e:cd:
5b:37:16:2c:83:3e:b2:13:94:99:2b:f9:54:e4:28:70:e9:c0:
8f:3b:a4:78:e4:dd:a2:bc:01:92:56:0a:99:9b:81:ea:16:57:
be:a7:f1:c9:11:54:8f:17:fc:f3:70:ad:9e:9d:18:25:0e:8d:
79:cf:0f:bc:dd:0f:f6:95:58:bc:f3:6b:87:2b:9d:2d:d6:65:
c9:93:e5:89:22:40:8a:20:3e:ee:c1:29:be:a3:06:7b:3b:7e:
33:1b:5e:65:8c:35:d0:06:e3:d1:2b:03:df:de:32:62:06:be:
02:ee:c7:1c:b9:88:df:94:78:0b:b1:8e:67:69:82:7c:06:5a:
5d:36:3f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:52 2026 by rpki-client