Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
File: 6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft (raw, json)
Hash identifier: h/VzUujMbSHc+qTyR9dePYx71/uhtyUFiN+WKglfLfk=
Subject key identifier: BC:62:41:07:19:84:4E:1E:A5:F3:D0:5B:74:F5:AD:E0:24:08:CB:F5
Authority key identifier: EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D
Certificate issuer: /CN=ea2f671f10834dae48ea8d987342c375cab3316d
Certificate serial: 01A0DD60A82FAD48B7F1702B0BB25DD16265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
Manifest number: 066C
Signing time: Sat 26 Sep 2026 11:01:34 +0000
Manifest this update: Sat 26 Sep 2026 11:01:34 +0000
Manifest next update: Sun 27 Sep 2026 11:01:34 +0000
Files and hashes: 1: 1-BDF7EdL9hLHZ4qCs6jAWm3n8G8.roa (hash: 3HI3L0u1gTr2C+yxlBAEamd5L6jvpyumi2g5XXRKy/k=)
2: 6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl (hash: 4I9+6CNuse2yXyHCcmPOR5PJp7QN/L5RQ26Cv3QSUHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:a8:2f:ad:48:b7:f1:70:2b:0b:b2:5d:d1:62:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2f671f10834dae48ea8d987342c375cab3316d
Validity
Not Before: Sep 26 11:01:34 2026 GMT
Not After : Sep 27 11:01:34 2026 GMT
Subject: CN=bc62410719844e1ea5f3d05b74f5ade02408cbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:31:fb:f3:bc:d4:f5:08:3a:32:39:17:55:
12:eb:cc:9c:13:ba:c0:1e:41:24:73:33:7a:a8:bb:
72:c6:5c:6c:b7:dc:b1:57:c6:be:77:50:d7:17:38:
6b:a2:49:b3:de:c7:c7:7f:1c:3a:7b:31:65:6e:7b:
5c:e8:0e:4e:d9:60:1c:ae:97:9d:30:39:80:e9:0c:
bf:a5:dd:e4:bf:f5:dd:25:3d:e8:8e:ec:28:39:68:
08:14:53:23:82:44:6c:35:e7:24:3a:5e:fa:0c:86:
43:aa:11:a7:af:68:62:a1:a1:23:e9:81:8f:7d:30:
cd:dd:4a:7d:dd:ab:4e:c8:38:0e:73:44:4f:0c:31:
ef:68:df:0d:c2:f2:6c:32:63:3b:07:2a:7c:c6:53:
d1:88:48:ff:a8:07:16:f5:ca:35:30:77:ec:af:d3:
2d:4f:9c:f4:f3:d8:5e:6c:e0:d6:56:17:0d:51:6a:
77:d5:f0:19:7a:38:dc:16:cd:5a:74:71:a0:ac:3d:
3f:18:5d:73:06:5f:ac:ee:52:d0:b4:a8:fb:b0:ca:
18:c3:89:31:45:ed:26:3b:ce:71:4e:95:56:a9:42:
7b:0b:bc:60:b3:53:48:fe:fc:15:35:de:40:b9:8f:
9b:4d:1f:09:16:4b:d7:51:1d:f0:8b:da:b8:61:9b:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:62:41:07:19:84:4E:1E:A5:F3:D0:5B:74:F5:AD:E0:24:08:CB:F5
X509v3 Authority Key Identifier:
keyid:EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7c:85:44:13:6a:73:27:f6:92:91:3d:13:11:86:d4:1e:77:
08:d8:33:bb:2e:5e:f4:75:5e:4d:10:7d:92:1b:3c:68:07:60:
f8:a5:82:0e:54:7d:5e:e2:40:71:e3:82:33:66:25:01:ce:b9:
91:48:b1:08:33:cd:49:c2:d6:14:b6:76:7d:72:df:a8:9a:ed:
35:ec:7a:e5:73:7d:f0:06:d0:29:ff:e9:cf:c4:b2:2a:99:b9:
df:09:ec:e0:12:80:9e:bb:63:49:e6:9f:3f:6d:69:f4:ec:10:
4b:d6:00:a1:5e:44:68:a1:84:26:90:b2:8e:e8:93:45:93:7b:
a5:a6:7f:e9:40:83:c9:ef:d2:2c:13:5c:1a:8d:42:7e:fe:c9:
80:c3:36:50:0e:5a:f6:e2:9b:a5:62:f1:c9:e4:28:f7:15:b2:
7e:c1:2d:4c:10:ad:79:11:48:22:84:29:61:0e:d4:f9:33:db:
91:fa:04:2d:dd:c3:03:73:68:f9:e3:12:57:03:d6:17:f1:d8:
26:03:df:d4:95:71:1a:2d:29:c2:9e:4a:26:03:8e:25:d6:ed:
ec:58:54:ad:14:90:d5:f8:f6:cc:0e:06:9d:e4:62:9b:44:61:
3a:e3:2d:67:be:63:a7:97:2a:f5:ac:43:9e:82:0a:a9:80:f7:
5f:fe:09:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:31:49 2026 by rpki-client