Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: NUCDOv1N7AADzjdc5F04D0kDLIF1PI7ombt7GZDpXkE=
Subject key identifier: 77:46:B6:C9:CA:94:34:08:7E:53:4E:91:2A:68:8A:66:58:1B:A3:70
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 01A12BE8D5026FC7BE0571C0230F658B3CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 1A9F
Signing time: Sun 11 Oct 2026 17:00:41 +0000
Manifest this update: Sun 11 Oct 2026 17:00:41 +0000
Manifest next update: Mon 12 Oct 2026 17:00:41 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: hwx5ysgq5SwQB37Cfcaqsskxmx73YfNPula4Aa20NYM=)
2: RTa46YjqIB57sl6TXUqs2BxTTOc.roa (hash: KPHNrqroDbFqES68zQrY2KXBJL2CCYvWrdznMKfxk0E=)
3: X_sri3cRhFYahHNip0OaQkurzp4.asa (hash: fwKy6Axs5Ma5eaNMv/Pfvsc1xJbWQPfYwiDVZkFrQh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e8:d5:02:6f:c7:be:05:71:c0:23:0f:65:8b:3c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Oct 11 17:00:41 2026 GMT
Not After : Oct 12 17:00:41 2026 GMT
Subject: CN=7746b6c9ca9434087e534e912a688a66581ba370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:b6:df:2a:6b:db:7e:d2:60:02:ce:cb:9f:
63:4f:12:32:e2:73:71:56:06:55:a0:44:53:10:40:
fe:c5:be:37:8c:64:07:a3:4a:2b:ee:58:48:8a:fb:
93:e6:c2:b3:40:72:51:5e:46:4b:e1:f9:5a:b2:03:
4d:4d:05:99:9e:bf:d7:9c:cb:e9:f8:c3:36:4e:7e:
12:3e:8a:68:2d:7c:a2:49:59:80:7e:f3:59:b9:51:
8e:62:26:0b:f9:78:e8:ce:66:7c:48:28:b7:6d:b5:
be:74:35:75:24:26:73:9e:6f:5e:58:70:a6:57:e3:
6b:b4:79:9e:26:d4:10:4c:81:83:8f:5b:fb:18:86:
37:9f:db:fb:4b:cb:52:1e:b4:92:8b:4d:c3:58:5c:
b1:63:6e:2c:4b:f4:f7:cc:52:d1:cd:8f:d3:bf:d2:
a5:38:b7:34:c7:66:c3:46:db:17:06:17:c7:2b:10:
a2:71:92:ad:cc:5d:fc:5b:f4:9a:be:04:4a:b7:36:
d8:f1:79:ac:6a:e6:91:6b:71:f1:98:e5:ab:98:41:
51:04:c0:1f:ac:b6:46:f1:0b:30:9c:90:cf:8c:32:
b9:3d:d7:54:f1:fe:ab:47:07:05:ac:b0:80:04:ca:
75:dd:7d:7a:86:0a:c2:5c:7b:61:32:25:aa:50:b0:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:46:B6:C9:CA:94:34:08:7E:53:4E:91:2A:68:8A:66:58:1B:A3:70
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e0:44:25:2e:15:8b:5a:58:45:4f:fb:ce:79:bf:9e:e4:70:
35:a1:12:dc:49:51:42:a9:0c:79:5c:69:40:7a:bc:85:a5:4c:
07:86:4b:12:6e:8f:6f:d4:cf:26:3a:36:94:04:31:b8:f3:49:
27:2d:16:a0:ce:39:a8:f3:2a:ce:06:61:9b:38:6c:7b:10:6b:
d8:3a:2d:30:de:96:82:c9:8b:88:23:dc:f2:50:1d:e1:d1:bd:
8e:b7:e1:6a:4b:42:dd:ed:a4:90:95:16:88:65:76:93:61:36:
a4:d8:f4:1c:b2:c8:0d:96:93:5c:86:86:d7:d3:e5:54:57:58:
f6:91:be:60:fa:de:91:87:57:31:d5:5b:8f:54:d9:4f:48:61:
2f:27:4e:4a:4d:f4:49:23:37:db:fd:d7:d8:76:09:2a:3a:dc:
19:fc:90:30:b0:71:a6:eb:cd:c8:d4:4a:f6:57:01:c5:d4:d7:
86:3a:f6:0d:b5:d9:00:54:cc:a0:e9:e1:bc:e0:f2:37:68:89:
6b:e4:48:88:34:03:1e:78:20:95:84:44:91:a0:a7:82:f3:c1:
4a:f2:4c:5c:21:53:91:c2:92:59:31:ef:4d:da:c6:92:67:89:
66:c5:00:b4:01:32:3a:b8:0d:28:52:5c:2d:b7:2a:84:28:eb:
a6:54:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:04:49 2026 by rpki-client