Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
File: bE6tk3_29mwLFfItDUn5N243154.mft (raw, json)
Hash identifier: 9qXn6I4R5Szm2whVThvgTU0LJWmSI8vpqI8UzsKUVTY=
Subject key identifier: 67:4A:CE:D0:C1:6D:64:A3:F9:C2:57:30:E1:B4:59:F2:0C:44:4D:AA
Authority key identifier: 6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
Certificate issuer: /CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Certificate serial: 01A0CB90FC1BE878AAAC8A29ED2CDDD55A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
Manifest number: CD
Signing time: Wed 23 Sep 2026 00:01:11 +0000
Manifest this update: Wed 23 Sep 2026 00:01:11 +0000
Manifest next update: Thu 24 Sep 2026 00:01:11 +0000
Files and hashes: 1: HtXE6o5gyDE8p-LeGfVTGKS-HFg.roa (hash: TRqFmFDs3cFEdD+j1MIH3IwsMTCX5wrTHYLogmPYGvU=)
2: bE6tk3_29mwLFfItDUn5N243154.crl (hash: xtRKNUd/y8gwg3SbGiAfOxj1rnBaCqD5CMXQWn8nDUg=)
3: vTlhAenRPSZUNMMxyWS0DXwQ5N8.asa (hash: PklvSNrA+pjY5wXK2t56S6nxPO2i6UZMi9BUxQ6a3ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:fc:1b:e8:78:aa:ac:8a:29:ed:2c:dd:d5:5a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Validity
Not Before: Sep 23 00:01:11 2026 GMT
Not After : Sep 24 00:01:11 2026 GMT
Subject: CN=674aced0c16d64a3f9c25730e1b459f20c444daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:f4:0e:a6:a8:8b:81:b6:57:b9:7e:97:8a:
80:eb:1d:8b:c8:8a:86:81:ea:86:f0:05:64:a5:9b:
ce:08:c9:de:0d:e3:9e:cd:eb:c0:26:59:b4:99:1e:
bd:5d:bc:9b:6d:16:49:46:e9:10:c3:92:27:59:33:
e2:1d:f0:42:ba:c3:a1:73:1f:e1:57:64:e4:14:35:
8d:7b:e0:87:50:17:9e:70:a9:7b:3e:30:7e:57:7c:
67:d1:99:8e:57:7b:5c:0d:57:1f:f9:4e:57:5d:bb:
05:e0:0e:71:13:6e:2c:a5:88:9a:2d:b4:b9:7c:75:
31:7a:e2:06:cb:ad:02:6d:2a:7a:c6:c0:8c:84:d2:
4c:8e:11:4b:86:83:80:a0:df:be:70:d1:72:45:1f:
ef:c0:54:1b:1b:f1:58:9c:98:22:07:95:7e:86:3c:
37:eb:33:d2:61:2b:fe:ab:65:5c:71:09:15:a3:d0:
61:ce:25:40:d8:5a:60:48:27:d7:e0:1a:fa:50:a7:
8e:b6:39:db:fe:61:e6:dc:04:df:f5:dc:b1:20:1e:
22:5e:41:76:c5:e7:04:39:9f:a8:53:de:42:0a:4f:
3f:35:e0:89:19:08:41:10:61:1e:df:38:38:ef:21:
05:a2:28:4a:74:09:d6:1b:3a:92:57:5e:9e:63:76:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4A:CE:D0:C1:6D:64:A3:F9:C2:57:30:E1:B4:59:F2:0C:44:4D:AA
X509v3 Authority Key Identifier:
keyid:6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cc:6b:1d:25:01:b5:d9:26:04:58:7e:b7:44:ae:e2:3d:9a:
4b:66:73:eb:a8:ef:6a:70:f9:c5:c3:22:ec:93:f2:e2:ff:92:
93:dc:84:0f:e4:7c:c4:b4:b0:51:9b:1e:a7:5a:93:a0:0f:0a:
59:60:54:f2:40:37:82:6d:bc:4b:19:7d:f0:1b:3a:af:c1:0a:
32:f4:cf:11:ec:a5:58:44:60:79:ed:fd:67:f2:63:b4:3b:51:
72:73:a2:34:41:84:40:09:a2:1d:29:bf:44:45:b8:a9:cf:52:
17:45:d4:1d:d7:0e:ac:87:54:6f:89:ce:89:f9:d5:d3:6b:38:
9c:1b:17:2b:89:ef:2b:94:2c:04:b3:d0:98:63:f5:a9:95:06:
59:e9:73:c4:5e:75:74:9c:c5:88:d0:50:8f:d6:64:37:42:a5:
9c:49:97:0c:b5:63:26:33:c9:b5:04:7e:fc:3a:ce:a6:b5:0e:
5a:aa:21:38:bf:d2:29:14:dc:1c:96:89:fb:08:71:bf:fe:90:
77:a6:fb:3b:2e:89:0f:55:d2:de:1c:f7:d5:4f:40:13:bb:19:
05:61:ab:14:29:63:fe:15:61:77:b4:0d:5d:e2:b7:30:b0:d1:
ec:00:dd:be:ce:cc:ec:d9:f3:29:25:25:f6:26:58:fb:3f:1b:
ad:03:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:44:19 2026 by rpki-client