
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: DVmusZFQytZzh8tQ8jfywMM98pCe3KlezT7b5JXjvfY=
Subject key identifier: 8E:30:E2:A2:B1:99:9F:8D:7D:83:90:55:B0:E2:18:A2:A2:70:C8:9E
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 01A0E10644ADD04055851BEEF6B29758F691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 0DA6
Signing time: Sun 27 Sep 2026 04:01:19 +0000
Manifest this update: Sun 27 Sep 2026 04:01:19 +0000
Manifest next update: Mon 28 Sep 2026 04:01:19 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: T07ImQX2qE7cQS24qSMb5WsJLp8j3hAVuL46jWy34uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:44:ad:d0:40:55:85:1b:ee:f6:b2:97:58:f6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Sep 27 04:01:19 2026 GMT
Not After : Sep 28 04:01:19 2026 GMT
Subject: CN=8e30e2a2b1999f8d7d839055b0e218a2a270c89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:79:5c:52:4e:ad:f2:f4:4b:47:65:1e:35:07:
50:9a:eb:4d:d5:31:9f:a5:35:12:8c:99:35:3a:62:
6d:0f:01:94:07:68:44:98:79:ee:57:f4:5a:5e:71:
da:7e:f7:6b:65:a5:e2:f2:24:32:25:2a:1f:f5:79:
ee:b8:88:d2:40:cb:e6:7f:6b:d1:f7:a7:ed:3f:fe:
13:84:50:e1:34:76:38:ab:53:cb:d8:02:b4:2c:74:
85:30:63:8f:3f:bb:b4:8a:9c:86:09:27:94:c3:c5:
a0:19:45:bd:05:bf:d3:d9:a6:b7:7e:00:bb:5d:be:
08:64:e2:20:43:82:29:5c:08:6f:70:39:88:5c:b6:
b7:6a:40:f4:f6:e6:df:ed:e1:17:7e:7e:02:b6:f8:
1a:41:21:03:c3:9a:ef:84:8e:58:be:84:8f:34:25:
15:ad:4b:1d:7f:40:0a:b5:16:de:b1:c6:a9:6a:65:
28:70:9b:85:e2:66:6f:e6:a2:e1:f6:3a:5a:36:0c:
8b:e5:57:cd:65:79:35:24:d1:ad:1b:f8:7d:cc:23:
89:49:cc:8c:66:db:de:a1:05:29:c5:d1:64:5a:77:
f8:d5:0e:6b:f1:28:2e:65:5d:39:da:13:be:65:d4:
84:1e:b2:2c:a9:75:f7:f4:e0:42:45:af:be:64:f7:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:30:E2:A2:B1:99:9F:8D:7D:83:90:55:B0:E2:18:A2:A2:70:C8:9E
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:45:87:e9:f5:ad:eb:a6:21:7f:9d:71:44:4d:ad:70:67:56:
18:1f:91:45:0c:44:27:f6:ee:22:c7:63:6b:3d:23:bc:01:56:
12:19:89:f7:04:64:22:6f:6c:08:4b:44:62:fe:13:ef:a8:db:
7e:2a:96:3a:f4:b7:8e:fc:10:0f:72:bf:ed:f3:f0:8f:34:b3:
4e:0b:e2:7b:90:9e:12:c8:6a:7c:86:36:93:fd:f1:69:19:4a:
19:dd:55:6c:e3:dd:0b:e3:57:33:00:a8:8d:2c:9e:30:09:c7:
d5:55:db:9f:2d:45:fb:0b:c8:2e:43:ee:45:c3:69:e7:ff:be:
fe:ff:6a:68:59:6d:31:ae:50:8d:cb:42:8e:7a:68:07:2d:34:
55:f0:52:b5:8b:6b:de:db:dd:90:63:8c:18:60:42:8b:b5:b2:
ce:b9:34:53:2f:ff:9c:9f:18:89:55:b4:14:e4:66:86:40:f9:
f6:f1:07:9b:db:bf:0d:57:93:67:2e:e3:b2:c1:ef:23:85:27:
e5:4d:c1:4c:01:37:76:a1:a3:e9:6c:c2:db:13:f3:72:4d:17:
1b:e7:cc:a5:e4:cf:27:09:2b:2c:ce:59:85:fa:3a:29:93:a1:
98:e5:79:da:1a:f8:8d:14:c5:87:20:e5:d8:20:1a:b3:59:40:
31:d4:d2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:42:32 2026 by rpki-client