Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: RMBeNK9aXFIXA9P1katPfaK7V6YDXzC5VqOjnOo6V8E=
Subject key identifier: 78:E7:A8:33:8A:22:8B:DA:5F:C1:3B:96:D9:FB:04:84:0C:F5:C1:46
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 01A0CCA3056094489E776F111EEBC27559E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 188A
Signing time: Wed 23 Sep 2026 05:00:30 +0000
Manifest this update: Wed 23 Sep 2026 05:00:30 +0000
Manifest next update: Thu 24 Sep 2026 05:00:30 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: P3+sx5K2x2Wtq1LdI6XXgow5LxXR+kh9APhWryYHZRs=)
2: 5EAz5dndjgfQfjMqO-fDSjEIW8A.roa (hash: G2Rnah1hR8UxH5++PW3B2fPR5YMOIykQT7T/Zz40bFo=)
3: GWAM8LaGeLrYT15NSq3dJ5pRlCE.roa (hash: lAj5QKk8rG4fdrfzMU388++vVHlAtgmU+Tql0pzD1s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:05:60:94:48:9e:77:6f:11:1e:eb:c2:75:59:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Sep 23 05:00:30 2026 GMT
Not After : Sep 24 05:00:30 2026 GMT
Subject: CN=78e7a8338a228bda5fc13b96d9fb04840cf5c146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:a0:0a:9b:d9:ea:a0:ce:5b:59:75:37:39:
db:61:0a:4b:c7:d2:7d:7b:b6:24:c1:4d:f6:ac:6a:
a5:b1:57:83:64:1a:ec:3a:9e:35:22:0f:9f:97:f5:
ab:c6:00:8d:bf:8d:19:15:4d:ea:91:ae:68:c2:0b:
40:34:3a:89:a6:bc:ce:ed:64:3c:57:48:96:38:01:
ed:59:41:af:af:76:6e:00:be:ee:2a:41:b9:0f:14:
c9:10:80:9f:10:cf:5b:b3:3a:af:2f:fc:d7:cb:d4:
73:1b:14:c7:f2:e0:d6:a3:9f:e5:1b:19:b7:8e:7c:
5a:55:8e:ea:06:b6:6c:54:f5:6a:7b:96:6c:a9:b4:
4a:18:76:1c:b8:8d:b3:08:80:53:36:00:a0:10:0b:
70:31:50:65:0a:ed:67:14:6e:60:b3:92:b5:30:ad:
e3:ab:5e:05:bc:2b:75:8a:3a:29:21:a2:f6:1f:18:
f8:bb:f7:d7:5f:7e:e6:fc:6c:f4:e3:4c:98:f2:6c:
f4:8d:5c:3d:bb:d3:91:e6:f6:44:a5:5b:82:26:0a:
a2:cb:f1:66:17:01:41:eb:d8:5f:9a:5e:43:0d:25:
9c:96:ce:0e:4a:a0:5a:b1:8b:f8:38:dd:92:c4:b4:
df:dc:22:1a:8f:3a:07:2a:99:21:d3:35:5b:37:37:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E7:A8:33:8A:22:8B:DA:5F:C1:3B:96:D9:FB:04:84:0C:F5:C1:46
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ab:f0:d2:30:48:eb:24:ba:1c:80:32:b3:ba:d0:77:87:49:
ad:37:72:db:4e:f1:bb:83:85:1f:a8:3c:0b:3f:3f:94:a3:ac:
78:07:30:47:1c:d9:8a:85:ca:cb:b8:c8:1d:71:62:5f:9c:a1:
ab:6f:6d:7a:5b:fd:eb:47:d2:aa:4a:3b:c2:e0:bf:9f:94:c4:
67:a3:6d:b7:05:b0:8d:5a:9d:85:dc:f8:09:b4:42:5e:68:b3:
d3:eb:55:87:18:61:bb:db:ba:c4:7a:40:a6:7d:51:1b:2f:d3:
ad:3a:d6:b2:20:5d:92:bc:5e:62:cb:82:cc:f7:fc:3c:83:b0:
c3:46:a0:d0:77:4b:34:17:7c:36:4d:4b:3c:26:ea:07:d3:24:
fb:0a:6c:73:c2:d5:b7:d6:f4:67:dd:9a:4c:90:15:84:99:d0:
e9:dd:fb:44:09:08:54:2c:ca:6a:3e:6b:d4:63:b1:2d:c3:d6:
b0:15:3f:a6:8e:88:3a:46:95:ce:fa:d6:22:8b:a0:7d:1d:16:
9d:8a:5d:f7:26:8c:62:a4:2f:9b:48:f1:7b:2f:86:ee:3d:d7:
6c:f6:81:8f:43:54:77:9f:47:8f:7a:e1:bc:9a:21:00:e6:fa:
b8:c1:dc:29:63:58:2a:7f:bb:8d:29:55:18:fc:f2:6a:7e:65:
f7:15:48:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:43:40 2026 by rpki-client