Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File: v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier: tzlq7Xl66p/nf8toRiUly/EnvVu02UwJiIaiZhIVGS8=
Subject key identifier: 07:1C:E3:1C:10:3B:D3:F0:D7:26:45:3F:03:E1:4E:81:E0:43:C1:E2
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 01A0D0487F7E8B4E21463BCBD14F64ABF777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 22:00:07 +0000
Manifest this update: Wed 23 Sep 2026 22:00:07 +0000
Manifest next update: Thu 24 Sep 2026 22:00:07 +0000
Files and hashes: 1: 5PEM24BMPrcvxY-cL8Z6QKGwr1U.roa (hash: 9iefR/dFPM3ozUCII4KvIo+RC9gYE16NJW6hpn8+KmU=)
2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: fq287ELaRfxlTl8ulc4paxMzobmJeODc4ru9FsMFo6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:7f:7e:8b:4e:21:46:3b:cb:d1:4f:64:ab:f7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: Sep 23 22:00:07 2026 GMT
Not After : Sep 24 22:00:07 2026 GMT
Subject: CN=071ce31c103bd3f0d726453f03e14e81e043c1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:67:36:94:31:21:16:79:97:97:54:2c:60:
31:ef:0c:83:7c:80:d9:37:28:28:3f:9a:19:7e:40:
f7:70:6f:67:4e:d2:77:2f:3a:26:1d:d2:38:a8:ae:
45:97:e6:7a:4f:77:61:b0:04:f6:1e:de:ae:e7:7d:
88:6a:96:ef:4e:88:09:0a:af:0d:9e:84:05:81:c7:
70:6b:fd:d5:d7:7d:ec:2b:e0:db:83:fb:98:7d:ed:
80:e8:4f:b5:e9:a3:6a:f3:a7:7a:4c:bb:c9:82:a6:
62:42:57:6b:22:e3:b2:d5:75:f7:82:4e:9d:c5:1d:
1c:2f:29:c3:b5:57:8a:f2:d9:e0:32:76:7d:a2:ad:
ff:f6:a4:94:2b:54:c3:7f:3c:ce:a9:8a:f9:e4:e2:
cb:c1:ec:fa:aa:45:f6:de:e6:ea:00:49:04:99:86:
1b:ab:63:17:33:28:35:b6:7d:34:ab:c7:69:55:6f:
c9:61:cc:e8:e2:dd:a7:c0:c7:54:60:48:c5:40:40:
72:4d:fe:38:ad:ef:33:9d:f9:58:af:82:15:d6:ca:
4e:f9:56:59:c4:e3:fa:79:af:71:4e:82:cc:ff:39:
79:fd:0f:41:b1:95:ce:7e:80:75:1c:83:8d:42:75:
33:09:00:41:1c:ca:bf:fe:77:ef:4b:20:b5:38:4a:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1C:E3:1C:10:3B:D3:F0:D7:26:45:3F:03:E1:4E:81:E0:43:C1:E2
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:95:d1:92:9c:64:62:3f:e8:16:4a:cb:60:c1:82:1f:7e:78:
68:87:df:8a:a6:57:30:48:2f:c3:d2:63:d8:cd:5e:ee:57:5d:
a2:e6:65:e8:34:95:61:b5:03:ce:db:68:ad:8e:54:04:9b:19:
e7:c7:56:10:2e:7d:39:d2:c3:97:6c:2f:a1:1a:86:fd:6d:2d:
33:57:81:6c:42:5b:f3:86:c2:4d:11:c4:db:91:3d:89:1d:ce:
e3:5d:a9:e2:07:c1:0b:d0:e3:23:09:9a:9e:28:c3:24:49:ca:
94:15:81:19:d6:1d:67:ce:d9:64:a0:04:cb:8e:d6:e4:7b:78:
0c:e0:c7:d6:be:da:ce:d7:c9:8b:59:dd:e2:45:e1:2c:2c:36:
87:72:a2:94:fc:2d:8d:74:74:41:0b:8e:83:c7:2c:35:ba:61:
21:b0:0e:4a:02:52:b5:aa:42:4b:53:5b:90:23:5d:fa:7c:2e:
1c:8c:9e:9c:35:5d:65:a1:23:a0:27:3b:4b:9c:97:ad:59:9d:
2f:a7:2e:fe:98:4c:92:8d:1e:c9:9f:f4:5a:82:fd:bb:ea:5e:
dd:56:8b:1f:e7:da:42:cc:d7:0b:7b:d9:84:c4:1f:24:82:42:
cd:12:fd:d4:05:a9:0c:4f:5d:ab:27:f1:54:18:71:67:ac:34:
cb:4a:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:11:02 2026 by rpki-client