Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
File: EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json)
Hash identifier: dAoYKoY/eSyYMUvdRs8UtcLgyILM1TmS35gSMM2lG1I=
Subject key identifier: A0:02:9D:64:8E:26:FC:0C:23:D0:DF:04:CE:97:5C:51:40:E5:CD:80
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial: 01A0FFB59539F5EFB28E7A618FC0A59849DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
Manifest number: 0EE6
Signing time: Sat 03 Oct 2026 03:01:25 +0000
Manifest this update: Sat 03 Oct 2026 03:01:25 +0000
Manifest next update: Sun 04 Oct 2026 03:01:25 +0000
Files and hashes: 1: C-EukaWXr2kXZCbaHLOBLQ9m5U4.roa (hash: 5oNWWP9JATtZbQ9s/+0aWJ+9EOmStquNZlSy9y4pgxk=)
2: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: WjPHSuM02ozpD6gFdrglkN5yBT5L8BWWBJBj+bZMVhg=)
3: HNkiKtIomNoYZ41hjRiwhD40-iE.roa (hash: 7gzZ4thPtC/HiasIMZqtWoVWvXNMp0vHFfmmHuAr/UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:b5:95:39:f5:ef:b2:8e:7a:61:8f:c0:a5:98:49:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Validity
Not Before: Oct 3 03:01:25 2026 GMT
Not After : Oct 4 03:01:25 2026 GMT
Subject: CN=a0029d648e26fc0c23d0df04ce975c5140e5cd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:d7:24:1e:7e:1c:ec:87:f7:f4:6c:f3:92:
6c:5d:c5:4d:07:da:1c:c2:b0:47:60:1b:59:fc:26:
f6:17:11:f2:b3:4b:cc:53:14:09:8c:b2:0a:bd:47:
6f:6d:af:ab:2c:d6:31:dc:21:c6:6a:cc:00:da:06:
72:35:d5:da:d2:7e:cb:38:eb:94:1a:be:b0:0a:14:
d2:57:54:7b:26:8a:d7:3f:4b:b9:df:bc:8a:94:c8:
d9:82:72:09:96:70:4f:52:72:4c:8e:c2:0b:d8:11:
66:92:87:42:8e:09:54:ae:17:d3:9a:ff:66:96:3e:
f0:07:03:24:e0:9b:18:7d:60:c5:11:db:cf:3f:26:
9e:04:15:9f:ba:79:98:df:a1:7c:00:80:ea:99:e1:
e5:1b:aa:2a:94:79:d1:34:60:fe:67:95:9b:91:a6:
a0:a9:26:72:0b:8e:62:3b:5b:61:a7:99:65:b0:db:
b2:b0:f2:13:c1:e2:d1:3f:cd:d9:f8:40:cc:03:8b:
63:30:79:e1:75:4e:53:37:10:a4:5a:f9:2f:f8:44:
f4:8b:0a:2f:03:f8:6b:44:7d:45:3a:75:f2:31:4e:
14:3c:e7:8b:e5:db:0a:4e:d7:31:d3:93:86:56:c9:
bd:ca:cf:b1:8d:20:a6:d1:35:4b:13:ef:3c:82:31:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:02:9D:64:8E:26:FC:0C:23:D0:DF:04:CE:97:5C:51:40:E5:CD:80
X509v3 Authority Key Identifier:
keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f1:47:b8:93:79:a6:ec:0a:17:70:e5:c7:13:7a:03:6e:c7:
e7:d7:fc:58:aa:44:c1:95:41:c8:ff:2e:22:21:95:59:8d:70:
12:43:25:06:75:d3:1c:cf:c5:d6:4b:88:ed:de:6d:29:5b:d7:
68:fd:2c:87:74:39:b8:88:a4:f1:1d:06:cd:76:22:9b:da:57:
14:ea:2d:c9:ec:c7:8f:d4:7b:c7:f1:4e:da:d7:6e:5b:ab:63:
3a:82:59:25:21:4a:9a:4f:f4:eb:a7:e5:f7:2b:0c:46:51:16:
4c:1c:80:3c:3c:88:b6:99:ee:8b:75:2c:6b:e2:f0:9d:66:54:
00:1a:fc:66:fd:ce:83:1b:e6:a9:3e:09:08:08:46:0e:b4:77:
cf:4f:35:0f:06:3b:77:4b:e1:86:b1:a0:e9:3d:5f:58:55:d8:
24:10:66:c0:2a:40:2a:b0:c7:67:1b:da:7e:a1:1a:d0:84:5b:
20:78:a6:d7:bc:4a:91:aa:3d:01:91:ec:cc:85:88:60:46:46:
32:9a:0e:c4:1f:28:de:e5:69:7e:ca:19:33:b1:d2:ff:2b:51:
c9:b6:a0:77:8e:20:c5:e4:66:8b:fb:39:6f:15:d0:6b:3b:ff:
db:bf:73:74:38:b2:8f:76:49:41:09:a2:79:40:29:4d:84:5d:
dc:8e:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:42:16 2026 by rpki-client