Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
File: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft (raw, json)
Hash identifier: pQyrQ20CldeMY6ddbTXFLDOeL3jCmVWuWGXVoMjxZRw=
Subject key identifier: 17:CE:E9:AB:70:95:D5:39:AB:DC:01:46:1F:D0:9D:F3:B8:37:0E:CF
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 01A0D6F118CAA58433E65D33916284575EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 05:01:59 +0000
Manifest this update: Fri 25 Sep 2026 05:01:59 +0000
Manifest next update: Sat 26 Sep 2026 05:01:59 +0000
Files and hashes: 1: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl (hash: xEES2sD4l5zpPIbsCCuROt0CNaLeFe7IeJ5k1n17Y0Q=)
2: NIC6FPNA-Rut56ZtIFRnSurvICQ.roa (hash: 5L/3wMgmUEy2dfrMAgnd99xnHhW/Bj+jZ1MWwhBuJc8=)
3: YsYMCe9LReXjPKopmUA0EjsK0dc.roa (hash: y+81aZ09kbsZWCpPgtxvvuaCFjv5jJ1HQMWCIGPci3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f1:18:ca:a5:84:33:e6:5d:33:91:62:84:57:5e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: Sep 25 05:01:59 2026 GMT
Not After : Sep 26 05:01:59 2026 GMT
Subject: CN=17cee9ab7095d539abdc01461fd09df3b8370ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:50:28:e1:78:78:61:e2:62:28:1e:1f:fb:
6e:7d:15:e6:1a:9d:84:f8:f1:b5:40:85:97:d6:e2:
a9:f4:9a:2a:1a:cb:d4:5b:bd:bd:b3:1a:a1:2d:cf:
0c:65:28:95:ae:ce:3c:c0:88:d3:d7:e5:03:72:c4:
c1:81:51:14:7f:a9:c3:1b:78:b1:1b:35:b9:10:56:
b9:db:b1:15:0f:2f:c9:bc:1f:69:46:6c:7a:ed:0b:
2a:93:72:c7:b7:62:ae:6e:25:6f:6f:bf:55:58:bf:
cf:05:87:e7:53:28:ad:bd:62:8f:04:42:89:74:33:
4a:ce:aa:80:f5:00:8d:db:5d:1e:60:cc:91:a6:bb:
88:01:cf:d9:97:18:d6:bc:24:78:e2:9d:95:5e:83:
3e:98:39:2b:d5:cc:c3:a4:09:71:c5:32:bd:ec:4c:
9d:17:c7:2c:8b:a0:37:7e:c4:2b:17:f0:36:b3:96:
2e:8a:5d:ef:3d:97:54:31:e9:66:ad:b0:82:36:d2:
3e:32:45:2d:be:9d:b4:22:b1:38:db:f9:e4:55:ed:
20:92:0e:b9:c4:c5:a2:1a:ec:3b:cd:1a:1b:87:9b:
a9:9a:6e:07:a0:14:11:74:12:83:3f:ba:17:a3:77:
a0:3e:ff:76:3c:5e:0d:10:9a:d5:04:93:1c:0e:06:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CE:E9:AB:70:95:D5:39:AB:DC:01:46:1F:D0:9D:F3:B8:37:0E:CF
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0b:1e:71:9b:71:a9:a2:a8:e3:74:44:82:2b:0f:9a:88:17:
24:aa:0a:d8:ae:29:90:c3:18:0d:4e:d8:a0:74:34:b3:c2:7f:
21:7d:42:7f:26:6f:0c:7d:ff:c7:b3:f4:16:62:a7:3b:5c:cf:
1b:cf:7b:ab:3b:9c:d1:8a:1f:9f:d4:fc:bd:5f:7f:13:45:f8:
cb:41:18:16:76:bd:cf:bf:af:2f:dc:cf:ce:3d:cd:90:3d:9e:
76:54:56:ba:ba:a5:ae:cc:63:e4:97:bd:d7:fb:11:d9:3f:90:
16:bf:73:79:6a:c5:f4:c7:9b:42:44:d2:b8:7b:51:7d:7c:6f:
d7:b7:68:f7:e7:73:1b:9a:78:2c:45:72:20:f1:e0:54:dc:c1:
02:94:47:52:06:16:f3:dd:29:ce:1f:47:33:eb:cc:29:b0:6b:
b2:04:6c:cb:44:86:6e:64:96:28:b7:02:c3:e2:01:63:61:65:
02:85:e7:8a:42:de:77:9a:ee:e5:c9:95:0f:4a:6e:88:e0:84:
2b:0d:00:1a:04:45:64:44:6a:27:83:f0:e2:ef:15:cb:db:42:
23:3c:ff:64:ee:6b:d3:dd:d2:bd:b9:dc:cd:39:9c:8e:f6:d1:
b3:0c:75:28:70:54:89:a3:74:42:09:d5:fd:f5:cf:1c:1b:5f:
9e:aa:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:53:26 2026 by rpki-client