Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.mft
File: 6hSsfDQ-ywYpYcpi3-zMk2mPSSk.mft (raw, json)
Hash identifier: MKM+tYVwLwPFjIHjwqJywXv40DizXMRgQ44O73bLG+Y=
Subject key identifier: 96:10:BC:4C:36:6B:94:86:11:D7:A7:07:84:66:E9:11:CB:FF:F2:FB
Authority key identifier: EA:14:AC:7C:34:3E:CB:06:29:61:CA:62:DF:EC:CC:93:69:8F:49:29
Certificate issuer: /CN=ea14ac7c343ecb062961ca62dfeccc93698f4929
Certificate serial: 01A0CE91C89204F9C481163644D053B56AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.mft
Manifest number: 014D
Signing time: Wed 23 Sep 2026 14:00:55 +0000
Manifest this update: Wed 23 Sep 2026 14:00:55 +0000
Manifest next update: Thu 24 Sep 2026 14:00:55 +0000
Files and hashes: 1: 6hSsfDQ-ywYpYcpi3-zMk2mPSSk.crl (hash: m2hIMLHhIqGTLc8KJUEKbULLNk+s4Jeb2ItIp/zxMXo=)
2: s2QI6eE_fwfGrHoEVQhmnpik7pc.roa (hash: kZgESYCe8va+U+MzknhpISTNKl7kvl3ZrJbSLuaX9CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:c8:92:04:f9:c4:81:16:36:44:d0:53:b5:6a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea14ac7c343ecb062961ca62dfeccc93698f4929
Validity
Not Before: Sep 23 14:00:55 2026 GMT
Not After : Sep 24 14:00:55 2026 GMT
Subject: CN=9610bc4c366b948611d7a7078466e911cbfff2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:1a:70:22:da:98:3e:95:b2:50:12:e8:f3:
57:a2:d5:f8:f2:d7:34:89:87:fc:6e:69:ae:03:e8:
3b:1d:6f:db:f5:a2:52:5c:fd:f5:41:6c:ee:2b:67:
ba:4c:68:0f:e3:d7:51:cd:86:cc:74:67:81:5d:a0:
47:89:2b:85:e6:e9:13:62:70:8f:ba:e7:87:51:19:
95:66:2a:a9:ad:93:fb:ae:1f:be:49:22:c7:d0:0e:
dd:32:7e:4f:e8:ca:d6:62:e1:ea:d4:c2:bf:4f:86:
27:70:3b:cb:be:5c:45:91:ff:6d:05:f0:63:5c:d5:
a9:b3:1a:ef:1f:99:7c:7f:dd:e9:0d:37:13:cd:d8:
93:89:5a:6c:ce:1d:22:94:1d:d4:24:66:21:ba:a3:
48:4f:0b:df:c8:0a:7d:30:9a:a0:22:fc:d4:19:a1:
00:2f:b0:ee:97:71:39:cb:16:10:38:da:ca:e5:86:
fd:91:ac:a5:67:ed:36:e8:66:4c:a9:77:80:21:0e:
e4:4f:0d:f0:8a:d4:cc:d4:81:e8:a8:be:f1:0a:5e:
51:8f:29:06:60:fe:50:62:0c:31:b8:64:4a:b4:94:
09:75:37:87:5f:a0:ed:65:ac:1a:97:f5:90:3d:51:
19:ba:1a:b8:cc:1e:7e:5c:e9:de:b1:88:58:7b:d3:
14:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:10:BC:4C:36:6B:94:86:11:D7:A7:07:84:66:E9:11:CB:FF:F2:FB
X509v3 Authority Key Identifier:
keyid:EA:14:AC:7C:34:3E:CB:06:29:61:CA:62:DF:EC:CC:93:69:8F:49:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3f8542-2d0b-4682-aca0-dcde956c5590/1/6hSsfDQ-ywYpYcpi3-zMk2mPSSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:50:eb:88:58:1e:75:07:f0:59:1c:02:2a:28:73:0e:26:e8:
60:c8:07:f5:2d:c3:dd:02:23:14:13:ce:c3:7b:a5:6f:b8:22:
19:50:88:ad:e4:f5:5a:17:81:69:40:87:9c:d0:f5:63:c2:7b:
29:d3:20:8d:55:84:df:3c:c1:09:f8:e9:d9:70:3e:ef:39:96:
17:3d:e5:c6:65:16:98:b4:b7:e9:6e:7c:ff:08:dc:5e:3d:8d:
a2:1d:e8:20:a4:b7:dc:63:4c:23:90:dc:ed:1a:6c:82:83:b0:
7d:0c:81:11:55:d9:04:c2:0c:aa:dc:58:7d:17:ce:25:c9:d3:
97:19:14:2f:97:5d:b2:30:62:6b:39:31:ee:66:52:0d:5a:b7:
fb:c4:4e:5b:d5:7a:c3:88:a5:2a:d3:0f:d8:90:f1:3d:a0:33:
b7:66:45:96:dc:d0:85:a2:28:dd:0d:ef:55:63:68:99:99:ba:
90:c7:c2:36:c8:a1:d4:60:bc:cf:d5:38:20:0d:15:72:d2:10:
04:94:c0:86:c5:73:9a:b7:8b:c1:94:c9:94:5e:6c:ca:d3:3f:
ad:d2:34:f9:24:bf:9c:b6:e0:60:d7:b0:7f:f8:87:28:19:cd:
47:35:22:73:df:7b:c4:f7:e2:5d:7a:76:8e:12:c6:6f:9c:10:
82:9e:cf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:06:59 2026 by rpki-client