Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
File: 61VMRARsNkOakZc4lC8x-nVraRE.mft (raw, json)
Hash identifier: n0OSVO8guqYSJawuwzfPRoCj3yjf4syixxhX0zpHhYU=
Subject key identifier: B2:DC:08:71:9E:2F:06:66:9C:BD:50:DC:F9:FB:EE:52:4E:7B:5F:AC
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 01A0CCA39CDE0220131868950550EC65AAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
Manifest number: 17B8
Signing time: Wed 23 Sep 2026 05:01:09 +0000
Manifest this update: Wed 23 Sep 2026 05:01:09 +0000
Manifest next update: Thu 24 Sep 2026 05:01:09 +0000
Files and hashes: 1: 61VMRARsNkOakZc4lC8x-nVraRE.crl (hash: CIMmWV0OLw+NtLf29a1MHeRYQVsVWIy9AJedgJdsrMo=)
2: BSVnXWVLQnFahxWR27R2hZyRLOw.roa (hash: zWXD1zdzQR6HCoxaZdLT2hwbNb0wnUHdkVZOay9qs94=)
3: iuyoeGHJ2HtKzNIRjDQXGF_P-CU.roa (hash: ZnVPMJXUndFPgr3XLqfOVPInWvP+3NWpUFJHhSkpQhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:9c:de:02:20:13:18:68:95:05:50:ec:65:aa:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Sep 23 05:01:09 2026 GMT
Not After : Sep 24 05:01:09 2026 GMT
Subject: CN=b2dc08719e2f06669cbd50dcf9fbee524e7b5fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:0d:c0:10:29:9a:38:56:20:44:05:50:52:
ab:30:14:8f:64:7a:29:cb:b7:34:1e:93:7e:7e:e4:
05:b6:c3:28:d6:d2:3b:cf:e9:13:71:09:d0:17:2c:
e5:12:28:14:ef:f8:84:36:4d:a9:50:db:b4:06:17:
b5:7a:14:cc:95:a9:a9:98:14:65:40:64:3c:4d:8e:
04:de:bd:94:e2:8a:ab:41:82:c2:d4:e9:e4:a5:12:
53:e8:b5:bb:59:56:81:66:34:f8:c5:f1:da:1e:58:
1a:6c:9b:33:f3:5f:6b:7b:b8:94:fe:87:c6:18:86:
6e:07:ce:fc:c0:15:0d:44:da:01:22:f6:58:74:25:
2d:cc:9d:88:b1:b8:67:0d:39:6c:2b:ba:00:c7:84:
84:76:44:20:39:6a:ee:0d:fd:cd:58:7a:21:96:93:
8d:01:41:7e:19:4e:b7:81:79:c6:e4:f9:13:24:22:
71:ea:dc:92:3d:83:ed:71:83:af:17:c0:30:64:f6:
51:d0:e5:e0:70:f3:6c:91:e0:93:74:d5:dd:f0:7b:
7a:87:a0:4f:cd:e3:f6:45:21:10:76:28:79:b2:d6:
f4:2a:d9:bd:69:07:9f:46:6e:4c:e8:8a:02:ae:01:
5a:19:50:7d:09:a3:bd:af:42:84:3c:95:38:84:a8:
6a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DC:08:71:9E:2F:06:66:9C:BD:50:DC:F9:FB:EE:52:4E:7B:5F:AC
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e9:75:0b:50:97:d5:f7:a7:73:c9:23:75:62:86:7c:fb:da:
10:c1:47:ce:4a:60:d3:29:ff:49:2d:31:6c:0a:59:b2:3b:7f:
7c:97:58:c7:30:25:12:37:70:56:fa:d9:66:2b:b7:1c:3b:c5:
ea:db:07:f1:98:3d:08:c8:f9:fc:d7:56:fd:02:51:a7:59:14:
88:81:13:a2:c1:74:30:5b:bd:db:9b:b3:f4:c6:9a:9c:c6:9c:
42:1f:6e:24:6a:c6:6c:a7:94:97:0c:32:bd:1f:8b:9b:e5:55:
97:d2:8a:5d:3c:62:09:60:0a:54:25:ea:a2:d8:41:6f:36:bf:
8d:0a:02:bc:3a:aa:e7:34:b2:95:22:6c:c9:ec:0b:b1:3e:3d:
e5:25:0a:82:75:9b:94:d5:e6:67:07:9e:e6:f1:c0:0d:da:31:
02:88:88:c7:09:26:a1:c5:4c:9e:e6:e5:a8:d1:13:24:cb:8f:
e2:84:23:dc:6e:d2:2a:ed:38:83:c3:91:7f:48:84:d8:ee:a5:
ad:31:73:52:7e:7e:9b:71:97:14:c6:78:55:16:6c:33:9d:f3:
4c:6f:b4:d1:0f:f9:ad:0a:b8:59:19:4f:82:89:c7:e6:8d:cb:
27:e9:42:b7:13:8f:31:d3:e6:6b:82:c2:fa:07:7c:73:d4:58:
71:bc:9f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:40:11 2026 by rpki-client