Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
File: 6f383DJhtXr63-1zD7Le2yhkn88.mft (raw, json)
Hash identifier: EeRyQBISxzeiiTTn3GHWRTEPZKr9xqAIkdAtEnTE120=
Subject key identifier: D3:A3:69:A2:0A:56:56:FB:C3:D6:8A:AE:CF:74:A7:9C:32:A2:24:D1
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 01A0E69A5DF7A1C5DCF322DEC823F160A2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
Manifest number: 1A7E
Signing time: Mon 28 Sep 2026 06:01:11 +0000
Manifest this update: Mon 28 Sep 2026 06:01:11 +0000
Manifest next update: Tue 29 Sep 2026 06:01:11 +0000
Files and hashes: 1: 6f383DJhtXr63-1zD7Le2yhkn88.crl (hash: pY1HPLCElm9Tu4reLKvXNX8TThMUHKZW0SPJ9NZMhKw=)
2: z8QPDmNfQ0U5nDiOWR6fhTlT5bY.roa (hash: JpJdMydt2d4jsczclhW+ZcOFIoTDZoU5V9xzlSAiVrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:9a:5d:f7:a1:c5:dc:f3:22:de:c8:23:f1:60:a2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Sep 28 06:01:11 2026 GMT
Not After : Sep 29 06:01:11 2026 GMT
Subject: CN=d3a369a20a5656fbc3d68aaecf74a79c32a224d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:e9:9b:2e:9a:d5:9d:1b:1b:0b:e4:b1:46:
ab:05:fa:6b:4a:8b:31:48:cf:5e:95:3c:af:53:63:
d4:d0:d6:2d:7d:33:0e:40:8a:15:05:7e:74:74:fb:
54:a5:9c:bf:c8:c2:2b:3c:52:0c:ce:39:8b:4f:75:
15:67:63:a0:57:1d:0f:c8:fb:30:6c:46:d7:90:88:
a0:0e:d3:53:bc:4f:f0:67:c3:d1:e4:70:8d:d5:74:
dd:10:c2:54:4a:7e:8c:4a:51:a2:aa:74:9e:6f:76:
0d:89:85:5f:f2:7a:26:77:fe:3d:e1:57:83:21:76:
89:cb:6a:0e:86:45:43:1f:09:a9:f3:20:93:f7:7f:
10:ac:8e:95:fb:89:d4:77:12:4d:8a:e1:6a:b9:22:
b1:f1:d5:66:ea:32:3f:21:c7:d7:b7:83:2d:3c:cc:
b8:f3:f8:dd:9e:6a:9b:d6:91:04:1a:78:42:a5:5a:
05:f3:4e:66:ef:ea:92:d8:2c:cb:69:d4:e2:0e:21:
cd:52:43:8c:49:52:6e:9d:e5:09:60:b0:58:3f:a8:
46:0f:b2:2d:71:27:0f:db:71:e8:a5:37:ae:b6:f1:
4c:9e:2b:19:d8:ae:24:70:21:bc:09:f3:93:b4:57:
56:2e:2a:b8:8b:4f:80:b5:6f:77:86:a7:fe:3c:89:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A3:69:A2:0A:56:56:FB:C3:D6:8A:AE:CF:74:A7:9C:32:A2:24:D1
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9b:47:40:ad:f3:82:c8:72:d1:56:4f:b4:6f:ac:4b:c6:f7:
b3:48:26:2e:b0:04:52:48:0f:d1:a8:c9:2e:28:78:2e:b9:77:
6b:f1:de:a2:4a:b1:76:d4:10:b4:70:4e:6e:b7:24:79:d5:be:
0a:fc:2d:8e:ad:02:22:82:e1:d7:e6:9e:3a:9f:ed:5c:a7:77:
ba:25:f5:3d:1f:70:ed:fb:c7:cb:6b:8c:4e:6f:1d:02:4c:0b:
ef:ec:e1:47:e7:e3:52:3c:9f:34:e4:96:18:3e:c3:67:30:12:
49:70:e7:58:ce:ca:96:57:fd:5f:39:6a:e9:2a:19:99:87:25:
8f:ca:68:3e:68:98:7f:f5:33:bf:30:4a:d4:dc:f5:3c:ed:0a:
67:50:55:12:dd:23:f1:6b:57:6e:a3:49:b1:a5:aa:40:71:e6:
08:d5:27:45:53:96:df:9a:a7:95:4e:1d:9a:af:53:35:46:8d:
d0:94:ad:6e:b0:88:f9:82:55:6a:52:45:61:7b:8e:41:b1:92:
dc:17:ca:63:7d:e6:4a:3b:fc:a5:70:01:8f:46:5c:b7:7f:1c:
58:bd:3f:59:ab:5a:fa:33:97:ca:c3:c5:d1:84:32:8e:56:e6:
c6:c2:b9:e3:6c:c9:f6:ba:ee:82:dd:68:86:24:57:0d:47:29:
16:51:cf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:43:57 2026 by rpki-client