
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File: 6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier: F1YdJKNgJDwIieeYZnMoAVSK7Fe0WqjcdA7d/BCQpb0=
Subject key identifier: 03:3B:FC:32:A2:76:22:83:FA:22:20:26:B9:5B:98:6D:D7:1D:2A:E9
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer: /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial: 01A0E92DE0C569F6FB7685EF34E038A21AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number: 15F2
Signing time: Mon 28 Sep 2026 18:01:32 +0000
Manifest this update: Mon 28 Sep 2026 18:01:32 +0000
Manifest next update: Tue 29 Sep 2026 18:01:32 +0000
Files and hashes: 1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: GfpikzQc2Wo7qjlyiQkhHL89gB1KEsDSFJGK7ZvWCS0=)
2: CjBaa9MFOHdFcsIm4Lx8f3AZ6xI.roa (hash: QjbiROKOhG1ze6MejGLSTsEjjilErNJuaQg6C4Cn2lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:e0:c5:69:f6:fb:76:85:ef:34:e0:38:a2:1a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Validity
Not Before: Sep 28 18:01:32 2026 GMT
Not After : Sep 29 18:01:32 2026 GMT
Subject: CN=033bfc32a2762283fa222026b95b986dd71d2ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:aa:bb:bf:b2:85:6f:b1:3f:89:4f:4b:ba:df:
84:2a:0f:3c:61:0d:6c:b1:8a:3d:aa:e8:06:6c:8f:
f3:a6:84:a3:c9:09:3f:f9:a8:ec:5c:b6:4d:62:3d:
08:f0:b0:11:92:b2:78:6d:b7:e8:3a:89:06:7e:76:
74:54:6d:d0:0d:c2:ed:ad:20:cc:24:16:3f:40:ee:
f5:cb:f8:3c:8e:87:5a:e0:ae:69:95:db:8e:21:a2:
e3:1f:6b:41:36:e9:46:ea:46:9b:d2:fd:36:39:8b:
4d:6e:e8:78:09:c6:ec:22:ee:e6:b6:16:d2:ce:37:
ef:7f:d3:0f:13:be:bd:c6:5c:ed:fe:79:9d:49:d1:
a7:b7:ef:0d:77:79:6f:54:35:76:2a:92:b8:31:10:
a7:f7:dd:bb:67:f6:e9:44:4f:dc:54:df:81:a7:2f:
b9:47:7d:94:60:2b:d8:f7:1a:ac:a9:7f:d5:fa:1e:
46:ad:8f:e4:7b:88:36:a2:97:40:01:e0:43:28:d2:
5f:12:83:f9:39:a7:78:44:f3:db:96:80:f0:16:2b:
4a:6e:e6:ea:20:a9:e0:da:04:65:3b:fc:ff:74:e5:
44:11:d4:e1:e1:49:c6:a2:50:80:e2:55:40:88:56:
67:fe:64:e0:d8:07:8a:81:a3:4f:db:d2:e0:9a:30:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3B:FC:32:A2:76:22:83:FA:22:20:26:B9:5B:98:6D:D7:1D:2A:E9
X509v3 Authority Key Identifier:
keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:eb:32:25:1f:5b:c4:46:60:79:2d:fe:01:2b:9e:9c:a0:dd:
3a:cf:4c:a1:d8:1e:61:96:1e:51:cc:a8:32:c3:72:c1:49:3c:
37:b8:0d:5b:c9:ba:70:18:3c:bd:e7:3f:84:98:7d:5d:4b:83:
ce:42:23:0f:bc:4e:52:06:c0:f0:34:5e:e2:4e:e0:6c:2f:43:
4f:00:49:cf:b1:be:6f:1e:88:f8:2d:a5:4a:93:ff:21:83:dd:
ec:f1:81:bd:03:d8:05:a3:df:31:58:71:7c:73:78:b5:c1:a7:
dc:d7:43:10:81:c3:30:41:20:fb:e3:49:83:b8:09:65:c7:db:
65:31:a2:f2:ca:66:8e:bc:73:22:fd:86:23:ab:89:2c:ab:d8:
31:f9:18:26:6e:ca:8d:ec:5e:c2:d7:68:71:be:82:b9:e0:3c:
49:f1:c7:be:b3:d7:ac:3c:32:6c:26:73:c0:b2:71:2b:73:46:
ff:a4:e0:f2:43:f5:06:7a:aa:6d:bc:55:1f:0b:a9:71:0b:73:
e3:df:4e:69:84:a2:df:38:f9:7e:b6:83:ef:45:35:d0:d8:f4:
40:a1:b5:a1:2b:dd:06:c0:00:e8:1c:7a:04:e0:f6:9b:ee:a4:
54:2c:b1:ac:71:cc:02:9f:d0:3f:53:1e:1b:e8:01:81:fe:f3:
6d:7b:92:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:35:28 2026 by rpki-client