Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
File: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json)
Hash identifier: ZtwgKAMGzA4ZcRKjBwYVpyJXYADyxGtL3GDXwjhCc6k=
Subject key identifier: A8:F6:AA:42:50:83:B7:62:93:7A:D9:4B:28:01:B2:52:02:3E:23:8C
Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
Certificate issuer: /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Certificate serial: 01A0CEFF6AF193750393D2DB13A96DE19A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 16:00:40 +0000
Manifest this update: Wed 23 Sep 2026 16:00:40 +0000
Manifest next update: Thu 24 Sep 2026 16:00:40 +0000
Files and hashes: 1: 4Af87rg4Bx7SgQQ5MxEN8mZ2YrY.asa (hash: Kzv9NX9qtlVE38MFIIf9pptzKBSLZ3APX1zKA5bjFE8=)
2: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: DhAGSsVRtQYezRdCD9FsECSruVD1FlzPIf9PMukCZz8=)
3: TC9K931IzwUdFmAUvzTbFXIZADA.roa (hash: UXVxdmIaXGeZhlCpGUNMtQmCisj0HfLJfUz0lrC+bHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:6a:f1:93:75:03:93:d2:db:13:a9:6d:e1:9a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Validity
Not Before: Sep 23 16:00:40 2026 GMT
Not After : Sep 24 16:00:40 2026 GMT
Subject: CN=a8f6aa425083b762937ad94b2801b252023e238c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:1a:22:cc:15:11:f6:f2:3f:ca:9f:79:78:
20:47:b0:25:2c:b2:f3:e3:f5:ac:2a:d2:c6:c8:96:
0c:54:a7:25:b0:f4:ac:32:4b:27:b9:9d:7f:d0:3d:
67:e7:2b:39:76:d4:14:c3:06:a8:9e:63:e7:a1:42:
39:9b:05:cd:d2:a3:aa:0c:5a:f6:b7:0d:8e:81:20:
73:c9:23:a3:73:f3:68:1d:bd:f3:26:7e:17:61:d9:
bf:ee:7c:d9:2f:51:3e:f7:fc:76:83:1f:4b:f0:34:
4f:e3:bd:ff:9d:f5:34:56:1a:f2:b5:e4:c4:c7:f2:
c3:e5:1e:00:b8:27:80:e6:94:c3:42:ac:b2:26:b6:
19:86:a1:b0:aa:fe:39:73:01:b0:ec:bb:0d:75:54:
06:cf:85:8a:70:ef:b3:e7:8b:23:a2:02:24:51:5d:
78:75:bc:49:19:52:35:ad:1b:7a:3e:7f:b1:f8:09:
de:8f:81:08:b4:c5:0c:4f:0d:4b:c1:96:11:91:94:
7d:ae:22:7b:72:63:f2:55:39:99:85:a6:9c:f4:69:
0b:0e:66:40:5b:1d:75:d7:80:6e:ff:ab:f0:02:11:
c0:8d:77:25:af:0c:d5:be:9a:5b:9f:01:95:b8:4c:
5e:a1:2b:ea:90:9a:1f:52:f4:6f:e9:20:a6:82:fb:
01:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F6:AA:42:50:83:B7:62:93:7A:D9:4B:28:01:B2:52:02:3E:23:8C
X509v3 Authority Key Identifier:
keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8c:8f:12:1c:8a:83:d2:60:65:e8:22:de:ec:0d:7e:4f:03:
e6:24:89:6a:c3:41:92:09:17:2b:97:f6:d5:ed:21:00:84:5c:
15:78:d4:b7:81:78:b8:76:d9:37:3e:53:92:f4:1f:fd:c4:d5:
c5:c6:d8:d5:3b:66:10:30:b2:38:3b:0a:19:a7:a0:b6:f6:61:
96:20:35:5b:0b:93:4f:16:c4:1b:c7:b6:a8:19:63:af:92:58:
a8:5e:8c:01:3b:18:f2:a9:6e:ac:4b:73:43:74:1c:af:67:7d:
e5:8b:fe:fe:a0:50:45:40:6b:74:2c:d8:b2:94:c9:a0:87:79:
e3:a8:07:e4:e6:e6:b1:31:1a:46:b3:b5:fb:8b:8d:f0:b0:2b:
0b:26:15:5c:5f:10:ba:de:31:5a:e8:58:68:e4:81:bf:b7:76:
68:ca:05:cb:d3:83:54:a2:2e:6a:a9:3e:c6:d7:31:cc:75:80:
74:4b:6a:f5:17:11:7a:1e:f5:b3:8f:65:f2:2c:6e:a6:e8:13:
ab:6b:1b:f8:45:05:62:18:13:9a:5f:c5:a8:66:82:bf:fe:02:
89:a4:8d:eb:ca:b3:90:28:c1:ce:a9:2e:67:23:fa:00:0f:ed:
00:7f:77:49:3f:73:b1:84:40:b0:8d:bd:77:d7:e3:46:62:c3:
8e:da:28:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:20:53 2026 by rpki-client