Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
File: 6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json)
Hash identifier: PEJvPAo8i1mI18JUbALjIteN4tks15mW52Zsh9JJz3A=
Subject key identifier: 74:0C:CE:96:F4:0B:09:B0:04:C0:60:7F:0A:07:AE:B3:31:AC:59:E1
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 01A0D3B8490ABFBD31F0289274C4EBFE46B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
Manifest number: 0D2B
Signing time: Thu 24 Sep 2026 14:01:04 +0000
Manifest this update: Thu 24 Sep 2026 14:01:04 +0000
Manifest next update: Fri 25 Sep 2026 14:01:04 +0000
Files and hashes: 1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: LZo1fklrcgzbQdeU1/t0ySty+WiNqw4mIIFoE6FyMLM=)
2: b_tsB2psJkgmiZaOr3w-QgtEJZw.roa (hash: JEjqJzbCuRhzhys3DkYfGTwD4aP+4P2Txn/0Mjz9ZOQ=)
3: uSr1yIrAzCz2O7l9EFFpJ1IdM7A.roa (hash: 2JNNqAz8LguyYvZQxdaeLL3oFCalZa88Rp3mN9dpy5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:49:0a:bf:bd:31:f0:28:92:74:c4:eb:fe:46:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Sep 24 14:01:04 2026 GMT
Not After : Sep 25 14:01:04 2026 GMT
Subject: CN=740cce96f40b09b004c0607f0a07aeb331ac59e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:8d:fd:db:c5:8c:77:f0:56:99:55:28:50:
82:98:59:2f:d4:03:2d:cf:2f:8c:79:13:1e:47:c6:
04:68:bf:87:0d:4f:20:96:37:2c:81:45:d1:7a:7a:
a0:a3:d9:41:3d:43:ee:9a:cd:0f:c9:bf:90:b5:07:
67:1a:f3:f8:32:9a:50:14:89:59:9a:1b:5e:60:22:
6a:d7:26:bf:51:c2:21:cf:90:e3:fe:cc:fe:f1:63:
26:de:06:94:a2:d0:7c:d4:27:11:35:ef:2b:7a:95:
a5:d5:da:35:41:38:35:27:7e:fb:d3:2d:8e:9e:95:
aa:e6:ec:ce:bd:f4:7a:26:c0:16:34:4a:b2:65:af:
29:6e:54:de:8f:78:0f:92:f4:a1:9e:54:86:6a:65:
17:12:56:ba:71:ea:1b:7a:8f:dd:b6:ec:e2:c3:28:
5d:03:7c:dc:cc:84:93:bf:df:88:ad:90:35:d1:b6:
b5:b4:3a:5a:4d:25:29:5f:a7:15:9a:ba:21:a8:3a:
ba:ce:8a:f1:e3:78:dd:f9:26:da:f0:90:4d:5e:b8:
2c:60:2b:b8:15:0e:4e:7c:ee:23:df:8b:20:43:81:
90:e3:38:e3:7e:95:d5:88:6d:e7:c4:b2:27:5f:0b:
3a:69:3d:18:69:4c:ac:17:cb:6d:f8:f4:09:b2:a3:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0C:CE:96:F4:0B:09:B0:04:C0:60:7F:0A:07:AE:B3:31:AC:59:E1
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c8:db:99:48:36:b7:1a:a7:32:9d:5d:c1:63:27:41:e7:a3:
95:87:96:2d:06:46:cd:34:75:f1:46:82:07:8d:91:99:b6:ba:
fb:06:56:0f:5c:55:51:95:f0:3f:ee:a3:3b:41:06:7f:8d:8b:
16:2b:eb:a9:b0:71:65:c7:95:17:b2:b7:49:c9:48:a6:9e:5d:
4d:1b:80:21:4d:20:a7:a0:c5:92:6f:e3:c7:a5:54:87:a3:53:
ed:45:84:ba:b3:c0:9c:e1:29:71:04:c3:f6:48:d2:69:db:91:
57:29:b6:be:ff:19:ed:bc:81:5f:eb:dd:9e:42:0e:b0:7c:ef:
99:f9:e8:b5:88:bc:45:33:e6:32:d2:f7:3a:15:42:34:3e:6e:
9a:eb:ea:55:df:c0:24:e8:f4:78:77:2e:a0:93:f2:21:4e:2b:
53:6d:93:53:c8:45:7a:47:ed:f9:c8:48:43:d7:ad:38:cf:d6:
d4:6b:4d:b7:57:0b:b8:5f:55:28:b8:27:98:f4:f9:3c:6b:bd:
c2:82:ac:46:a3:77:9e:97:89:ef:9f:87:33:a8:3c:64:e3:5c:
27:c3:13:a2:61:b0:c3:87:da:8c:57:74:67:9e:8c:43:61:c6:
74:d9:05:27:0b:8a:c0:0e:f4:42:ed:16:4c:01:a0:b9:c8:5b:
bb:76:5d:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuEkKv70x8CiSdMTr/ka5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWNjZmQyMWFiZDdmZTNmYTBkNmJiMzFkZjQ4MjBiZmI1
YTQxODgwHhcNMjYwOTI0MTQwMTA0WhcNMjYwOTI1MTQwMTA0WjAzMTEwLwYDVQQD
Eyg3NDBjY2U5NmY0MGIwOWIwMDRjMDYwN2YwYTA3YWViMzMxYWM1OWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkmN/dvFjHfwVplVKFCCmFkv1AMt
zy+MeRMeR8YEaL+HDU8gljcsgUXRenqgo9lBPUPums0Pyb+QtQdnGvP4MppQFIlZ
mhteYCJq1ya/UcIhz5Dj/sz+8WMm3gaUotB81CcRNe8repWl1do1QTg1J3770y2O
npWq5uzOvfR6JsAWNEqyZa8pblTej3gPkvShnlSGamUXEla6ceobeo/dtuziwyhd
A3zczISTv9+IrZA10ba1tDpaTSUpX6cVmrohqDq6zorx43jd+Sba8JBNXrgsYCu4
FQ5OfO4j34sgQ4GQ4zjjfpXViG3nxLInXws6aT0YaUysF8tt+PQJsqPEtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQMzpb0CwmwBMBgfwoHrrMxrFnhMB8GA1UdIwQY
MBaAFOmsz9IavX/j+g1rsx30ggv7WkGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMt
NzViNjg0Zjg5MGI0LzEvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMtNzViNjg0Zjg5MGI0
LzEvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsjbmUg2
txqnMp1dwWMnQeejlYeWLQZGzTR18UaCB42Rmba6+wZWD1xVUZXwP+6jO0EGf42L
FivrqbBxZceVF7K3SclIpp5dTRuAIU0gp6DFkm/jx6VUh6NT7UWEurPAnOEpcQTD
9kjSaduRVym2vv8Z7byBX+vdnkIOsHzvmfnotYi8RTPmMtL3OhVCND5umuvqVd/A
JOj0eHcuoJPyIU4rU22TU8hFekft+chIQ9etOM/W1GtNt1cLuF9VKLgnmPT5PGu9
woKsRqN3npeJ75+HM6g8ZONcJ8MTomGww4fajFd0Z56MQ2HGdNkFJwuKwA70Qu0W
TAGguchbu3ZdXw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:59:13 2026 by rpki-client