Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
File: C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft (raw, json)
Hash identifier: w4F7UJmkr4IdYZPZNXBvueGLcM7SKEC8ekdVEPyqJwQ=
Subject key identifier: 19:23:23:9F:34:07:AD:A1:26:12:9B:9E:DB:DA:04:E6:A4:D1:F7:C5
Authority key identifier: 0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76
Certificate issuer: /CN=0ba11a46c44eecf90c6231f8456cc702ae938076
Certificate serial: 01A0CB2274FF16BABF0D2767D8EEA9F0B4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
Manifest number: 02AE
Signing time: Tue 22 Sep 2026 22:00:28 +0000
Manifest this update: Tue 22 Sep 2026 22:00:28 +0000
Manifest next update: Wed 23 Sep 2026 22:00:28 +0000
Files and hashes: 1: C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl (hash: ajZfRAT/x6w73HjnBvqkju+r55ZaxGa4OYcHC5Rdq/w=)
2: q7WfGeBPEEvSqwuhjuGB9MK0FR4.roa (hash: 6I5OLAD4XJOUPBEb7WYc+qrHbMwA5+oW8O7b01lul68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:74:ff:16:ba:bf:0d:27:67:d8:ee:a9:f0:b4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba11a46c44eecf90c6231f8456cc702ae938076
Validity
Not Before: Sep 22 22:00:28 2026 GMT
Not After : Sep 23 22:00:28 2026 GMT
Subject: CN=1923239f3407ada126129b9edbda04e6a4d1f7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:b8:b5:bd:62:5d:52:b1:7f:ec:e6:8e:53:
73:c5:69:f9:30:e7:48:4e:4a:92:19:5c:d6:91:f1:
8e:3d:66:3e:f6:7f:a2:be:30:f1:aa:5c:45:7d:19:
1a:cd:4e:08:4b:0a:1d:1d:73:7f:91:85:b2:9e:7e:
c4:dc:dd:98:8d:95:31:5a:b3:5f:d9:f0:2d:71:75:
64:e7:29:2d:53:ce:95:ea:1d:de:9b:86:24:00:e3:
a8:7a:75:42:da:f1:56:eb:f7:61:6a:f1:83:c6:6c:
bc:a2:f6:d1:72:ab:55:ec:9d:01:6e:60:20:45:17:
9d:bd:a4:e4:e8:6c:6d:a9:a1:bf:6f:f8:62:a5:fc:
c6:73:a5:48:29:17:ac:ce:61:52:6f:b5:d3:94:1a:
42:1c:74:42:d2:8a:16:78:7a:5b:de:9e:6f:08:78:
5c:03:a6:9e:69:d9:3c:75:9f:ee:be:91:28:50:6b:
28:24:b7:fb:b7:d8:68:db:f4:7c:26:99:df:d0:21:
6e:de:c2:87:9a:a8:d8:37:26:44:3f:5b:80:f2:6b:
87:78:81:b2:bf:43:42:40:f3:d8:3f:af:71:6e:ea:
44:09:34:c8:c0:a5:97:6f:fd:35:59:10:05:49:79:
f5:d5:70:16:a0:5c:60:f4:87:98:d0:d2:ce:45:16:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:23:23:9F:34:07:AD:A1:26:12:9B:9E:DB:DA:04:E6:A4:D1:F7:C5
X509v3 Authority Key Identifier:
keyid:0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b3:c7:11:9b:8c:03:50:36:4a:47:65:65:2a:0d:34:b9:82:
f1:9a:d2:50:86:b3:e5:83:b1:51:ff:b2:6f:80:26:1f:cb:b7:
ff:36:c6:d5:ce:bc:29:23:a6:73:86:db:d7:be:c6:2b:e4:83:
93:4f:e0:ff:ba:54:e9:c6:b0:b8:b8:5f:98:e7:19:3e:fd:1c:
6a:da:e9:7c:7a:ed:0f:2c:cf:ff:ab:b6:e6:63:f5:11:3e:38:
d3:08:51:db:52:d6:13:b6:e9:3e:43:8d:af:b1:fd:c8:b7:30:
6e:25:fe:64:09:db:c1:9a:f6:f0:df:0a:43:56:93:ff:d2:a4:
9b:2a:3c:1f:25:eb:9e:ca:73:12:fe:3b:88:ea:ca:a6:41:6c:
82:48:f6:c9:01:cd:44:0d:9f:5f:21:be:d9:84:82:b9:de:74:
16:0d:a5:a5:bb:fa:89:b8:af:74:dd:3c:d1:8a:9b:d8:3b:22:
f2:df:2e:36:6f:dc:04:76:89:6b:c2:d3:1c:0c:bb:ca:74:f5:
0e:98:04:0f:c7:e4:73:23:ee:e4:14:08:cf:6d:69:9e:40:43:
40:7d:40:b4:61:5c:f5:d3:9e:31:ea:f3:2d:6c:62:b7:54:fb:
ea:89:54:51:31:c0:2a:8e:de:6f:7d:e7:c0:83:e6:04:6d:3b:
7a:df:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:00:00 2026 by rpki-client