Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
File: 6HFybEwQPg60LC8Oi12ocz-n7-0.mft (raw, json)
Hash identifier: Scu9eWrenFGxlWztjANalkUZHo/i2kXnxVXkgkShf+w=
Subject key identifier: 01:21:71:A3:03:DE:E6:B7:07:BF:6C:B2:2C:0D:34:D5:BA:FA:15:BB
Authority key identifier: E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
Certificate issuer: /CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Certificate serial: 01A0D5DDC9168B01EF716AED0A02326CCD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 00:01:16 +0000
Manifest this update: Fri 25 Sep 2026 00:01:16 +0000
Manifest next update: Sat 26 Sep 2026 00:01:16 +0000
Files and hashes: 1: 6HFybEwQPg60LC8Oi12ocz-n7-0.crl (hash: 0RaGnMINHkFb5mxZOoNuVkA23R81DckoQK+0hprCw+M=)
2: uKa6FxImXf06YNSnlN4nrccJ9Cc.roa (hash: ePdUA2mdutDGzHN2U8mQRRE7yoNYH9bgsLzTLHYrHtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:c9:16:8b:01:ef:71:6a:ed:0a:02:32:6c:cd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Validity
Not Before: Sep 25 00:01:16 2026 GMT
Not After : Sep 26 00:01:16 2026 GMT
Subject: CN=012171a303dee6b707bf6cb22c0d34d5bafa15bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:92:6b:28:99:29:5d:30:1a:ee:19:26:58:
8c:ca:c5:4a:b5:07:a9:3a:c3:73:8e:84:eb:67:75:
c0:1b:0f:cf:a6:4e:fd:96:3e:8a:03:4f:55:cd:fa:
88:8f:68:74:54:a9:23:82:6b:a6:36:73:73:86:be:
46:55:d5:d6:b5:c5:14:75:be:65:91:59:ff:82:0f:
26:6f:de:61:57:ba:90:22:63:93:e4:77:b4:41:60:
db:ea:95:99:ad:9e:7e:70:d2:53:55:1b:7d:bf:46:
5c:f4:9c:2e:9a:d5:31:d6:b8:96:41:3a:1c:ad:f3:
b7:bb:39:ab:6c:ff:92:70:04:c6:94:19:1a:9e:3c:
9f:34:85:48:b6:ce:6b:30:9d:ca:3a:df:e9:83:67:
68:d9:cb:80:47:71:18:3d:8c:db:60:02:69:13:8f:
a3:e1:fa:d6:bb:64:a0:2c:31:11:ca:a0:18:e3:a8:
6f:4b:16:3f:f3:b1:7e:a4:3f:b6:e3:2f:48:6e:ea:
d8:1d:92:68:b0:bc:cb:fe:06:09:d4:7b:2d:9e:fd:
88:04:10:18:6d:94:aa:df:dd:3f:1e:2f:d9:ba:dc:
86:2f:91:68:09:4b:0f:9a:16:59:1f:4c:ee:36:7c:
48:7c:26:9b:db:3b:32:91:a9:2d:c9:36:9e:17:3f:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:21:71:A3:03:DE:E6:B7:07:BF:6C:B2:2C:0D:34:D5:BA:FA:15:BB
X509v3 Authority Key Identifier:
keyid:E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:02:7a:b6:c0:c5:d2:2d:8a:35:26:f8:c6:08:be:b4:d0:99:
b2:8a:de:83:42:76:80:53:92:0e:3d:19:80:70:30:22:67:ed:
d3:a4:b6:26:af:5c:ee:69:b8:55:03:73:55:7e:f6:0f:04:20:
7d:ce:0b:2d:2d:07:ed:05:ef:1c:ca:3e:ce:ae:80:6f:92:3d:
46:93:b7:4f:9f:80:2c:1a:4a:02:52:eb:ce:17:86:29:a6:38:
79:5b:e8:1e:bf:71:e7:e3:f5:22:80:6b:fd:46:52:6c:72:3b:
3a:ed:df:44:68:ee:8a:75:a3:d0:d2:70:38:f3:84:ba:5b:81:
48:92:f7:d9:99:87:ad:6a:cd:36:89:bc:a0:cb:21:57:a4:ea:
ee:8c:a0:11:db:3b:c9:2b:25:4b:87:84:4b:2a:62:1d:bf:f7:
c8:74:cd:6c:c6:0b:a6:ed:1d:c1:4e:67:78:a4:17:a7:4c:e2:
f0:29:77:5d:f9:f7:89:31:1e:15:8b:b1:d9:d6:df:5e:41:2d:
65:a7:ea:9c:71:c8:9d:47:e7:ba:9f:58:03:70:ec:4b:2c:93:
a8:e9:a8:79:ad:fd:a6:16:6e:48:00:04:48:87:29:be:51:1f:
87:1f:9d:20:18:b5:6f:5f:63:c7:99:c2:2e:13:81:1f:60:46:
92:20:40:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:36:29 2026 by rpki-client