Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
File: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json)
Hash identifier: lKkfyok139eXfZgopDjTaKxBaLKZLYJvItfBUKH4D/A=
Subject key identifier: D5:7E:68:39:A2:54:AF:4D:41:9C:90:E8:98:3B:D9:A2:8F:04:64:91
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 01A0CEC8B21DE1BFE5AE9568609C789EA5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
Manifest number: 0F23
Signing time: Wed 23 Sep 2026 15:00:54 +0000
Manifest this update: Wed 23 Sep 2026 15:00:54 +0000
Manifest next update: Thu 24 Sep 2026 15:00:54 +0000
Files and hashes: 1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: F32pS397cPIjR4nO7SCNv3dvtoVsZcd1PCdDTPdT5Is=)
2: x_ow3qxhfOMLBRjgBidD1PQTkzs.roa (hash: tTO9VSPgrTRCs8qsXCJT8F1FGJbKaVUFEepw4YEza7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:b2:1d:e1:bf:e5:ae:95:68:60:9c:78:9e:a5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Sep 23 15:00:54 2026 GMT
Not After : Sep 24 15:00:54 2026 GMT
Subject: CN=d57e6839a254af4d419c90e8983bd9a28f046491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:e5:1c:62:87:a6:0d:61:83:e7:85:d9:2e:
5c:a7:53:f5:56:8a:fd:4b:c1:35:1b:51:00:06:61:
08:70:fd:1e:b0:24:55:55:7c:c9:f4:b1:9d:e6:85:
2e:fe:7e:e9:64:13:55:91:20:96:ff:0d:df:27:0b:
3a:0f:07:64:71:eb:e7:eb:b2:d2:3f:7d:5c:3e:a1:
82:1f:86:49:30:55:75:06:3d:89:ec:9f:44:aa:d2:
db:5d:55:ce:af:92:e2:6f:b2:f5:10:1e:06:a4:31:
ed:31:66:19:de:40:57:f5:b1:41:22:67:ce:a0:77:
2a:31:6d:d1:e6:90:2a:b4:1f:66:3c:71:95:d6:cb:
23:c3:7a:cf:37:0c:35:f8:c8:b3:68:ea:6c:2c:1c:
32:04:3c:bd:99:50:c5:38:d9:d7:0d:8e:33:4c:f6:
fe:dd:db:3d:18:db:10:6c:cc:da:31:51:6d:04:ea:
ca:bd:11:17:57:8c:55:09:61:1a:dc:7b:83:69:18:
3b:f7:52:7c:c1:aa:50:ac:3f:50:52:15:54:17:84:
21:00:20:2f:db:fb:9c:96:2b:82:ac:f7:0f:9c:62:
58:3f:af:4c:8b:43:07:70:55:2c:84:fb:fa:ac:ee:
f0:6b:b1:66:eb:10:2f:54:00:55:08:eb:61:51:6f:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7E:68:39:A2:54:AF:4D:41:9C:90:E8:98:3B:D9:A2:8F:04:64:91
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:16:bb:d8:42:4a:da:1e:b4:db:f7:0f:a8:07:c0:25:9b:74:
61:4d:ae:c9:fe:71:05:1b:e1:2c:e8:ab:99:92:b0:26:43:fa:
bd:5c:c7:87:bd:2f:7b:43:e3:42:aa:b7:9e:54:14:e8:86:e1:
f6:0a:dc:43:10:6e:4a:97:51:45:cd:da:23:f7:c4:8d:8f:e8:
1c:04:0f:0f:13:80:11:ef:37:03:dc:f3:cc:16:19:5d:1a:0f:
69:5a:1a:66:f6:4a:60:86:0b:5f:a0:0d:2c:6d:c8:58:98:05:
67:7b:74:e3:aa:5c:8a:4e:c0:53:65:99:36:92:ce:4c:1f:dd:
e7:c5:49:03:d8:20:66:d4:db:b6:fc:c5:92:60:72:df:c5:9b:
5c:b6:8c:2c:d5:b9:e1:24:7f:6b:f4:b6:13:15:88:d4:76:6e:
01:b0:fc:20:ab:97:97:d9:b1:da:99:da:09:ce:76:54:4a:d9:
ce:24:60:9a:19:67:f3:14:5b:cc:02:e0:9a:d6:d3:f5:11:a6:
7f:52:c6:b5:fc:b3:c3:62:e6:bd:9c:a9:27:de:4f:27:35:a2:
cb:37:60:49:ed:34:b9:a9:a0:df:60:2a:24:0e:56:0b:46:5e:
43:02:80:0d:d6:66:4a:80:43:62:0e:be:ad:eb:38:82:2b:09:
98:c0:bb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:08:39 2026 by rpki-client