Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
File: b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft (raw, json)
Hash identifier: Ul0D9Vkg1sNY5HVyLhcRuJPrI6CfolZR+Lz8uq+n0Wo=
Subject key identifier: 36:0E:7C:64:31:6D:BE:5B:FB:88:F6:D3:C2:EE:68:38:08:3B:3C:C0
Authority key identifier: 6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
Certificate issuer: /CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Certificate serial: 01A0FCEB0FD0C5C4EB28A78089E680F80E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
Manifest number: 0709
Signing time: Fri 02 Oct 2026 14:00:58 +0000
Manifest this update: Fri 02 Oct 2026 14:00:58 +0000
Manifest next update: Sat 03 Oct 2026 14:00:58 +0000
Files and hashes: 1: 4EQFHPchKGJRSlfAMbJURA8f5Vw.roa (hash: r/Hza9cO99krJK0iZfoHSiR1NTC0AWSrrarH8tZXu0g=)
2: b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl (hash: gOwJom0Q2XXySleC2+daTj4uMVOCylYYzmJ/6a47YPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:eb:0f:d0:c5:c4:eb:28:a7:80:89:e6:80:f8:0e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Validity
Not Before: Oct 2 14:00:58 2026 GMT
Not After : Oct 3 14:00:58 2026 GMT
Subject: CN=360e7c64316dbe5bfb88f6d3c2ee6838083b3cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:5e:e0:fd:55:06:39:78:46:71:e8:e6:5e:
28:ec:52:e3:e4:c1:ed:33:98:a6:36:9f:bb:b1:15:
c9:7f:16:07:98:7a:1e:13:a7:32:f1:21:62:ec:9b:
15:7e:99:5b:a8:f9:fc:15:7c:25:dd:94:dd:e3:18:
24:ba:79:a6:9c:0c:a1:c8:6f:22:80:9f:6b:75:13:
ba:2c:1b:8a:2d:30:db:26:94:70:38:69:e9:d4:4b:
15:e3:a4:47:92:7b:d8:c6:0d:79:e9:c5:11:4b:6c:
87:5a:4c:41:4e:72:bd:66:f3:8e:f6:88:80:2c:58:
a5:88:9f:e2:a7:fd:85:c8:17:d7:47:c4:b3:39:24:
45:6a:18:62:ea:8a:05:db:6c:eb:b4:bf:3c:41:09:
71:6d:9f:25:0f:79:ac:80:0d:fb:91:34:1c:f1:ba:
30:cf:d5:7f:28:3a:2c:f7:59:b5:da:3b:af:76:04:
d3:a6:93:77:1f:68:f3:bc:43:42:ee:49:af:18:9f:
98:fc:55:3d:a7:2c:49:9c:a4:66:ac:20:40:f1:55:
58:85:8d:e5:91:77:a4:6c:a8:f8:8d:ea:09:bb:41:
b4:ed:72:72:af:1d:6b:4e:f8:3e:29:34:8a:6c:db:
f9:aa:db:9f:33:16:8d:12:d4:8c:dc:04:54:7b:09:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0E:7C:64:31:6D:BE:5B:FB:88:F6:D3:C2:EE:68:38:08:3B:3C:C0
X509v3 Authority Key Identifier:
keyid:6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:24:bc:70:b8:3c:c5:4d:f9:e7:5b:2f:23:11:d7:66:b5:b3:
8a:bd:85:b1:71:63:f7:55:16:8c:60:7a:1a:17:c1:f5:bf:97:
f9:39:6f:07:df:2b:48:41:b3:ef:f3:58:fb:42:fb:64:51:d1:
3c:23:45:c2:e7:c0:10:0f:6f:0f:28:56:94:3c:85:2b:2e:4f:
da:b1:a2:cf:e8:dc:a0:51:ea:a1:a1:d1:1e:4f:f5:7c:a6:0b:
e7:20:cb:28:1c:1a:b4:3a:54:e3:8d:b1:a5:42:53:72:0a:cd:
9e:31:03:5a:a8:79:df:87:cd:53:a2:ac:92:25:6c:4a:a3:62:
b6:27:8b:08:fd:7b:f7:a7:d9:63:e0:16:e3:34:58:e2:8d:19:
43:d1:d4:fa:f9:1b:e9:a0:88:e9:4b:3a:05:47:d6:cb:c7:51:
38:bf:5e:1a:17:0e:48:ec:2b:4d:af:fc:2c:62:dc:c5:71:84:
b7:70:d3:5c:6a:cd:e0:2f:29:6e:91:7d:b9:e4:34:10:35:23:
93:8e:51:d3:0b:8a:63:d0:e3:6c:16:13:e9:c2:ab:c7:c4:92:
ea:2e:30:0f:61:4a:59:86:c6:98:23:f3:d3:59:6f:24:04:5d:
9d:ac:ab:ef:a0:e2:e8:90:a2:19:de:7c:ff:5c:50:1d:ea:24:
13:e5:62:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 03:38:06 2026 by rpki-client