Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File: s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier: 7iIXiEvYEV1JPoUHOD70lhFk2ItodGRbjBBUNl9XuEI=
Subject key identifier: 8D:46:7E:4E:79:57:F0:D2:BC:D4:3D:62:63:8B:39:D1:45:33:CF:D2
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial: 01A0D0EE28E2145FAD6CA20552E7EA336EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 01:01:03 +0000
Manifest this update: Thu 24 Sep 2026 01:01:03 +0000
Manifest next update: Fri 25 Sep 2026 01:01:03 +0000
Files and hashes: 1: Av5bsVoq8UQGaosqV8V6-3ucUR4.roa (hash: QEALuD9emwTtaKDjepBpTR7X0rF/uZcvg9fbjrjCtSw=)
2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: yth/cn0bsqY+TqwYJp1i3f++QKtzx7IG1G/mOdAx1+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:28:e2:14:5f:ad:6c:a2:05:52:e7:ea:33:6e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Validity
Not Before: Sep 24 01:01:03 2026 GMT
Not After : Sep 25 01:01:03 2026 GMT
Subject: CN=8d467e4e7957f0d2bcd43d62638b39d14533cfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:44:60:e0:74:23:54:a5:97:d0:96:98:fe:
67:ee:a8:e5:e3:bb:b7:19:a1:40:6e:fd:d5:42:64:
4e:dd:34:67:8a:1b:12:bd:22:b4:fb:ad:7e:d5:ea:
64:a6:cd:94:39:a1:04:04:a9:ad:a1:4a:2f:3a:72:
b4:8b:24:ac:07:2b:ea:c4:84:c4:e0:12:7b:28:8b:
c3:54:e7:8e:cf:ee:67:b2:d8:8c:03:a6:52:42:68:
b8:33:c0:83:ad:30:02:c3:6a:c0:b8:ae:66:23:4d:
9b:5d:97:52:b3:0a:05:85:01:80:86:29:87:bc:04:
b6:81:9c:35:67:04:ba:1f:6b:fe:3f:65:de:d5:7d:
c1:3e:e0:eb:28:83:80:8b:78:48:fb:9d:99:80:cc:
2c:45:cc:25:7a:5b:cb:29:c8:8c:75:89:1d:41:8a:
4e:78:16:1e:d8:ac:c9:70:30:38:46:a2:29:82:5f:
b2:1d:b1:e6:82:af:f3:e5:73:77:ad:0a:2c:a9:10:
89:3f:e1:d1:22:e1:d0:e8:63:b7:fa:4d:3a:a4:b4:
52:95:ee:a2:c0:50:e2:0c:eb:d7:5e:14:8d:a5:d1:
79:37:db:d0:5d:c4:e4:82:48:a7:47:fb:c0:9b:6b:
2e:25:c5:f2:b7:a9:be:31:d4:87:f7:59:29:46:79:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:46:7E:4E:79:57:F0:D2:BC:D4:3D:62:63:8B:39:D1:45:33:CF:D2
X509v3 Authority Key Identifier:
keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:17:c4:4d:83:b6:0d:e7:14:08:a9:f5:e1:b0:12:fa:95:09:
c1:f1:21:f8:e2:ea:2d:40:73:f6:af:af:b0:19:98:84:95:67:
72:20:cb:be:27:7d:e2:e5:fc:03:8e:79:09:0b:e9:c1:9a:6d:
65:b1:82:c4:dc:94:33:4b:89:67:57:67:c9:cb:53:a3:3e:81:
c4:fd:f2:fe:63:ae:74:9e:39:17:c9:c4:12:01:c0:15:47:4b:
0d:ef:ee:8c:af:9a:90:91:66:22:b1:26:b5:44:3f:01:66:4d:
e7:c7:08:b6:54:4a:ed:5f:58:96:08:27:00:25:97:4f:cb:9a:
ac:10:c2:03:58:6d:9c:10:c8:e6:c8:8e:98:32:4e:04:91:d7:
16:8b:b7:ff:f9:3f:82:f6:5c:11:c7:fc:70:9b:34:64:1d:a8:
90:85:72:ba:bf:28:ab:22:02:ab:f3:28:57:e2:2e:37:d8:8b:
86:35:70:fc:56:25:d1:d7:ba:37:f4:4a:02:3e:a1:e3:ae:ac:
85:de:9a:57:b1:b2:49:15:eb:15:8c:e9:7e:fa:38:e3:a0:78:
9c:e0:02:75:7a:be:25:a6:2a:c6:3d:40:df:87:0e:47:0b:82:
41:fd:ee:5b:af:f2:b3:67:f6:bf:22:b6:f0:e1:38:ee:de:02:
a7:d0:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:10:58 2026 by rpki-client