Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft
File: 6uYgsFna8H5G_DUi0JsZCVFs_O8.mft (raw, json)
Hash identifier: xYvD98PusMYRn+HdBrOziGSAO816rxR6C8bGDislYWs=
Subject key identifier: 43:9A:3B:1D:BF:24:78:65:9C:DD:58:9A:BD:CD:BE:51:55:72:6B:23
Authority key identifier: EA:E6:20:B0:59:DA:F0:7E:46:FC:35:22:D0:9B:19:09:51:6C:FC:EF
Certificate issuer: /CN=eae620b059daf07e46fc3522d09b1909516cfcef
Certificate serial: 01A0EB8A24E1A9EEDDDA991B50AE6AD42A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uYgsFna8H5G_DUi0JsZCVFs_O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft
Manifest number: 028E
Signing time: Tue 29 Sep 2026 05:01:34 +0000
Manifest this update: Tue 29 Sep 2026 05:01:34 +0000
Manifest next update: Wed 30 Sep 2026 05:01:34 +0000
Files and hashes: 1: 14k9WBYTwB5rY8Es6FCkuGE_LQ0.asa (hash: EbDiuMLMeOTXlBB/rfAnpSziN3nz5jdOmMgYker4Qok=)
2: 6uYgsFna8H5G_DUi0JsZCVFs_O8.crl (hash: D/DB5izpCNM/zY3dZnFS12C0PYXpNDTewWiyqDKc0lk=)
3: JufwG4y3MsIG7jxqVGEbh3ksTPA.roa (hash: fJpYP0RGygpZ8ZQop6IUb72Uh29ffAUMjbeCaPVw2Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uYgsFna8H5G_DUi0JsZCVFs_O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:24:e1:a9:ee:dd:da:99:1b:50:ae:6a:d4:2a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae620b059daf07e46fc3522d09b1909516cfcef
Validity
Not Before: Sep 29 05:01:34 2026 GMT
Not After : Sep 30 05:01:34 2026 GMT
Subject: CN=439a3b1dbf2478659cdd589abdcdbe5155726b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:4e:ce:d1:22:63:2d:a1:b7:4f:98:ff:19:
97:6a:96:81:1c:fb:34:43:89:6c:26:da:a6:e0:df:
18:0a:d8:f5:68:7e:b5:81:1a:f3:55:ca:92:5f:7c:
33:c6:d6:c4:cc:35:22:c9:f2:7b:a2:41:f9:3d:2a:
46:c6:69:58:14:37:56:73:df:a4:df:2c:3a:26:71:
1c:ef:ca:ef:3a:7b:3e:d5:a7:73:e6:11:30:d6:c2:
00:55:d4:81:da:d1:b1:92:c9:bb:9e:51:6f:b5:08:
d5:38:d5:a8:42:c1:73:c4:40:c9:a2:4d:f9:bd:1c:
16:c4:9f:8c:ff:db:6e:e7:ca:3b:a9:66:6f:25:ef:
bd:92:61:c9:b0:69:07:45:30:1e:95:55:9f:6c:6d:
5d:91:5b:72:8a:4f:9f:37:37:3d:6d:bd:4f:23:41:
53:e2:b8:f6:8c:d6:50:bf:f5:8f:25:7c:ab:46:bc:
5d:dd:81:4f:4c:f5:72:b3:2b:e9:89:a5:d6:05:94:
56:7c:f7:a8:1b:66:e2:52:48:b1:d3:1e:0a:78:d5:
35:2a:ce:58:18:70:85:0c:36:7f:34:26:92:83:b5:
65:63:0e:e4:00:c3:2e:9c:29:b6:e2:57:37:c7:9e:
1e:61:c8:6f:ef:9f:d1:67:ae:66:45:f5:da:2c:69:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:3B:1D:BF:24:78:65:9C:DD:58:9A:BD:CD:BE:51:55:72:6B:23
X509v3 Authority Key Identifier:
keyid:EA:E6:20:B0:59:DA:F0:7E:46:FC:35:22:D0:9B:19:09:51:6C:FC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uYgsFna8H5G_DUi0JsZCVFs_O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d1:ca:e1:68:1c:aa:70:99:83:5e:25:03:43:7d:67:ee:59:
b3:b9:11:b8:fc:90:18:36:bb:a9:4d:9e:29:b2:34:c2:b2:9f:
33:da:6e:7c:e1:b1:9e:64:a0:11:9f:3b:5f:b1:76:ad:44:68:
45:05:91:f0:79:1a:3d:9e:08:ef:26:40:86:22:e7:a1:fd:bd:
4a:b7:47:11:38:47:76:c5:af:03:d3:69:be:68:55:0e:ae:96:
5c:30:a5:02:26:ac:59:45:a3:48:03:b6:6d:bc:e1:1a:cb:84:
ee:42:7e:8e:81:b3:a3:ed:8c:ba:75:fb:34:5c:85:8d:af:1e:
e1:73:94:8d:8a:2a:2e:c4:28:89:c1:07:be:6b:fa:75:53:41:
fa:0a:1c:fa:8d:c1:e7:d0:5a:d2:f5:61:71:39:5d:bc:fb:fe:
30:1b:83:67:27:ac:a1:3f:47:fb:4c:98:ae:ee:07:f1:42:68:
55:a4:ab:d1:21:04:c1:59:f9:4b:74:a8:dd:00:f4:83:f4:1d:
d3:ec:6a:fe:25:25:58:97:c4:24:10:3d:39:d7:ad:6c:1c:53:
81:46:e8:f7:fc:4c:c5:2a:f3:63:c0:ed:b4:6c:9a:c1:03:3c:
bc:d2:38:c6:1e:2e:8c:16:78:a3:c0:76:f0:d6:2c:ab:50:88:
79:ab:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:20:38 2026 by rpki-client