Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier: ALOxKbvP9STSOxIjDk+RV6L5CoPTDuDgiFEH3xtmfdE=
Subject key identifier: 11:47:4D:91:F1:8D:F9:A2:6D:AD:2C:39:4F:98:08:A4:77:3F:29:C7
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 01A0D1C9AFF17DBCC06D8BBD8B21537B3A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 05:00:50 +0000
Manifest this update: Thu 24 Sep 2026 05:00:50 +0000
Manifest next update: Fri 25 Sep 2026 05:00:50 +0000
Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: p9VnqFXB/UIp7UZihDhBbKjOUq60IGGrnEHRa7Wu2sg=)
2: c_6OKa2kJtLM_j53PZ1MLqgDqDc.roa (hash: 4vJbjz8heF/m4GioZY43zb7qdmLusK1fKEnTbwbhKuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:af:f1:7d:bc:c0:6d:8b:bd:8b:21:53:7b:3a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Sep 24 05:00:50 2026 GMT
Not After : Sep 25 05:00:50 2026 GMT
Subject: CN=11474d91f18df9a26dad2c394f9808a4773f29c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:e3:ad:af:67:35:d8:cf:82:45:1b:b5:ed:
53:02:c6:07:9d:dd:44:87:3b:e8:c9:f1:3a:e9:e3:
eb:e0:fc:a6:80:1c:d8:31:eb:ef:69:49:86:2f:76:
cb:a6:63:ac:c4:c6:87:08:47:3b:8a:0c:ae:4a:51:
4c:af:85:c3:0e:7d:4b:32:11:4b:8b:e4:e0:3b:ba:
83:b0:45:8e:09:6c:f9:34:43:17:34:f8:46:93:10:
f3:b7:eb:26:5f:92:16:93:38:09:3f:d0:10:55:87:
23:cf:0a:37:7d:e5:44:78:18:f8:bc:07:ec:cc:4a:
2f:5d:1d:bb:ab:11:8c:39:68:52:c0:78:5c:94:e4:
36:6a:1d:fa:8d:58:8c:d4:59:60:d3:56:2d:b3:be:
6d:89:97:94:c0:e6:cf:5f:e2:3c:6c:9e:fb:de:8d:
a7:50:46:d4:84:57:c7:bf:7e:ee:d2:de:80:58:99:
06:e6:a2:b8:68:d9:09:a2:73:37:29:6e:f2:17:16:
41:bb:b5:9e:7c:65:7c:7e:f7:71:e7:a7:c3:e1:3a:
8f:33:cd:ae:3c:1b:46:2d:02:a2:75:bc:1c:46:2e:
59:18:71:73:a0:0e:76:ec:d2:6b:ae:1c:a1:50:43:
22:c3:6c:fe:05:83:8d:18:14:05:a8:25:2b:2d:74:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:47:4D:91:F1:8D:F9:A2:6D:AD:2C:39:4F:98:08:A4:77:3F:29:C7
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:67:9e:02:56:43:e9:81:e8:d2:af:10:7b:db:30:34:99:80:
41:86:a7:9e:72:5c:73:7b:55:3f:86:f8:93:2d:35:9c:da:24:
4b:2e:fb:6b:33:54:77:b9:f8:89:3b:21:9a:6d:51:cc:c6:32:
27:94:5d:12:2d:0d:f1:ee:a9:95:da:60:89:4a:c0:b1:bf:6e:
19:de:71:89:f7:d0:e5:34:7e:83:34:e0:83:5f:86:d6:9c:d4:
c8:03:29:27:87:45:ee:a9:01:d2:2a:56:4b:e8:48:5c:83:cc:
e1:d7:4d:bf:a6:ca:70:0b:ce:50:3a:3b:b6:af:67:b9:bc:26:
c3:f8:53:56:77:9e:18:42:b7:fa:7a:86:e0:3a:f7:cb:fd:02:
e8:e9:52:e3:03:c8:e2:38:b9:a4:82:51:f6:39:cf:ab:4d:83:
ac:cd:dc:f5:e7:5c:71:ae:10:40:61:fa:25:65:b9:91:6b:2d:
f6:c8:c8:8a:cc:d6:2e:0a:46:8d:07:d3:c8:05:c4:9e:b7:3d:
94:18:59:4f:ec:1a:bf:b6:d0:f1:b5:86:9d:67:a4:ac:41:26:
9a:70:a4:6d:7b:43:9b:c0:51:dc:12:98:77:c4:8b:10:11:6a:
f2:14:51:8d:e0:20:9a:99:e1:17:a0:cf:69:9a:2f:06:17:7f:
6c:8d:de:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:00:15 2026 by rpki-client