Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
File: B6zZpp4bhJhwhFisUiB8-sHyw8s.mft (raw, json)
Hash identifier: Z1FPW7znOXAMVL4hmnu4ZA/qseobi7YhtSzbwSGCe8w=
Subject key identifier: EC:D5:86:2B:0A:E7:08:97:02:4A:43:F7:72:74:BD:53:C5:16:78:EF
Authority key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
Certificate issuer: /CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Certificate serial: 01A0F1FA07DEE0A1A2C32EF86F0A260E0D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
Manifest number: 10FD
Signing time: Wed 30 Sep 2026 11:01:30 +0000
Manifest this update: Wed 30 Sep 2026 11:01:30 +0000
Manifest next update: Thu 01 Oct 2026 11:01:30 +0000
Files and hashes: 1: B6zZpp4bhJhwhFisUiB8-sHyw8s.crl (hash: riYvm3R/2g+bEPlrXM107I0eTIiWHk8eLm9xSbeYpj4=)
2: WDt4iXr00KdJl8lJ3kIc8IQzT9o.roa (hash: 7oBkx8M/MHVrcHIQeuXw3DqbXYhiRYHX24jPnVtX94s=)
3: tnOkWFw6MJrUIue2zhuX4sQG1i8.asa (hash: 1StTjv6ddW7y9JgQUiK1i4hkv02EUITt9D+rpzEw24E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:fa:07:de:e0:a1:a2:c3:2e:f8:6f:0a:26:0e:0d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Validity
Not Before: Sep 30 11:01:30 2026 GMT
Not After : Oct 1 11:01:30 2026 GMT
Subject: CN=ecd5862b0ae70897024a43f77274bd53c51678ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:59:50:56:bc:f4:a3:c1:83:99:68:da:56:21:
1e:a4:c0:d9:00:90:77:62:ff:1d:4b:b5:38:a1:4a:
ef:0e:3f:6b:ce:18:8d:47:d3:1a:96:b9:f1:61:bd:
6c:ec:22:24:36:0a:5b:33:45:43:80:82:40:f3:80:
ba:79:10:29:f8:7d:b1:11:a0:73:4a:12:4e:81:0d:
bb:2d:f7:68:1a:66:6f:86:06:b9:23:23:25:15:b1:
97:2e:40:7c:ac:1e:59:52:fc:8e:4e:8e:74:aa:fe:
09:20:e9:80:2f:fb:3e:70:bb:2a:ea:0d:bc:7f:03:
04:d0:59:38:58:65:66:01:cc:7c:dd:4e:8e:a5:65:
3e:ba:49:bb:40:3b:22:25:3c:c9:75:28:0a:22:56:
53:05:59:54:d4:ce:9b:11:68:c1:5f:65:f7:df:f6:
dd:2b:ac:5d:b1:c9:60:f4:64:29:5c:f4:d1:53:c2:
85:39:8e:97:46:26:63:78:3d:28:91:83:56:5a:f2:
98:d1:bf:88:6b:7c:64:f5:cf:d8:f5:92:13:9b:ae:
66:92:70:ed:9c:57:47:6a:27:c6:ec:47:ac:bc:8f:
4c:13:bd:29:df:b4:fb:86:a1:95:d2:fa:26:40:72:
65:17:d9:e3:19:9a:c5:53:35:96:f3:a8:29:50:69:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D5:86:2B:0A:E7:08:97:02:4A:43:F7:72:74:BD:53:C5:16:78:EF
X509v3 Authority Key Identifier:
keyid:07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6c:4c:d7:fa:ed:7c:a1:ed:72:9c:2d:a7:de:fa:bd:dc:cf:
62:01:b7:63:33:cb:70:0f:b8:a8:bd:ea:90:fe:61:b3:c4:7f:
68:06:6a:ae:85:83:c1:e9:f1:05:e7:36:80:55:7e:63:d0:55:
c8:b8:89:c9:78:cf:c4:f8:5a:4e:4a:5f:cb:68:84:82:5d:8f:
b8:b1:90:cc:87:e2:87:3d:91:a4:84:15:e8:1e:07:a9:2c:c9:
e9:89:b6:76:37:95:67:2f:44:74:48:54:e4:ff:45:18:13:08:
9a:a9:cf:f5:67:42:c8:7e:21:d9:72:2e:46:8c:70:42:19:c1:
1d:1c:85:a2:e6:3b:04:d5:13:1e:fa:f2:d8:2e:2c:20:2a:57:
21:92:48:3a:8e:ba:fb:df:f8:5c:2d:eb:e8:72:be:e9:a7:30:
c8:21:ed:7f:62:7b:77:dc:31:f4:7a:f6:50:bf:a5:5a:04:04:
d2:cb:34:b1:a2:e0:fd:a9:b0:fd:f8:ab:c1:f6:47:78:93:4d:
f9:5e:b2:93:c0:25:d5:fb:46:23:37:fe:3f:22:37:aa:ab:8f:
1e:0c:c8:1d:35:60:7e:87:74:93:07:40:93:f0:b9:f0:cb:95:
c2:1e:34:32:fd:35:ef:98:f4:72:f7:4b:37:80:95:00:44:fe:
ad:a2:e3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:10:06 2026 by rpki-client