Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
File: 1peKb6yHM4CG9TacW0AhsIBhHlc.mft (raw, json)
Hash identifier: GWjekM3hTwnm6bpC3CBn/PQCkIqFr2IBcxfeVjdoKYM=
Subject key identifier: ED:2B:8B:FE:20:BB:7D:48:DF:D7:62:41:A0:D4:31:9E:30:98:75:A1
Authority key identifier: D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
Certificate issuer: /CN=d6978a6fac87338086f5369c5b4021b080611e57
Certificate serial: 01A0D615373716E9CCF3AAB6D1562265C0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
Manifest number: 06A6
Signing time: Fri 25 Sep 2026 01:01:49 +0000
Manifest this update: Fri 25 Sep 2026 01:01:49 +0000
Manifest next update: Sat 26 Sep 2026 01:01:49 +0000
Files and hashes: 1: 1peKb6yHM4CG9TacW0AhsIBhHlc.crl (hash: nVry5zpnScqX0UUMuwC+PN7YU9P96GTlUeoaMiUNT0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:37:37:16:e9:cc:f3:aa:b6:d1:56:22:65:c0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6978a6fac87338086f5369c5b4021b080611e57
Validity
Not Before: Sep 25 01:01:49 2026 GMT
Not After : Sep 26 01:01:49 2026 GMT
Subject: CN=ed2b8bfe20bb7d48dfd76241a0d4319e309875a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:5f:cb:8e:bb:a0:f2:ca:90:b8:60:15:79:
0b:30:fd:8a:24:db:97:69:fc:03:e7:b8:87:80:1e:
68:4c:dd:4a:06:21:70:bd:5b:46:84:19:fd:26:bf:
4b:ac:38:a8:d6:8e:67:6a:c1:5e:84:e9:e3:68:70:
bd:b3:65:8f:62:fe:3d:38:be:eb:40:b7:af:15:68:
39:5f:e6:a8:61:cc:0e:be:28:b5:88:c0:0f:ec:30:
6e:97:e9:f4:1a:c9:7c:fd:c7:ee:6b:f3:32:af:ee:
a6:23:02:00:7c:e6:f9:0c:cf:93:0c:57:ea:53:93:
48:0d:83:d6:ff:2e:05:ad:95:27:4b:86:47:b3:34:
cf:a5:0a:76:96:a5:6e:19:5d:7f:80:34:9f:25:82:
e7:fc:25:84:35:3f:ff:01:4f:1b:fa:44:d0:73:fe:
da:0b:c7:55:4a:f4:2a:fc:06:ec:ad:fd:df:85:29:
ea:a6:93:90:ff:d0:86:cb:c2:8a:c3:d2:b7:1b:71:
dc:97:6a:37:d0:8d:9a:47:32:1e:0d:b9:2b:42:d2:
55:4c:9f:65:e6:6a:63:59:f9:df:4f:36:b4:e5:be:
b7:1d:11:9e:5f:c6:2b:02:d7:16:5d:75:83:78:7e:
38:5f:f8:06:f4:9a:78:2e:fc:f5:f1:50:44:ce:a8:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2B:8B:FE:20:BB:7D:48:DF:D7:62:41:A0:D4:31:9E:30:98:75:A1
X509v3 Authority Key Identifier:
keyid:D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ce:5d:27:a4:68:36:e7:13:1c:30:ca:9f:65:65:b7:92:21:
01:c6:97:f1:dc:d2:53:c6:a3:61:a3:a2:fe:ca:ca:25:23:b2:
5e:14:e3:ad:03:f5:16:3b:db:f8:43:bc:1c:23:b6:51:9a:20:
dc:18:f0:3e:91:76:a3:f5:42:49:d9:40:4f:21:40:33:73:e9:
8e:d5:e3:b5:2e:6e:e6:b7:ee:d3:40:d0:96:af:40:29:38:96:
e7:35:51:12:f4:f5:74:21:7d:33:33:0d:1d:8a:86:65:1a:0a:
fd:bd:ff:14:0d:36:21:05:55:4b:92:28:7c:cb:93:03:a3:82:
4d:80:5d:f9:50:32:98:e6:4a:29:ec:ac:c7:d4:4f:4a:9f:ab:
f1:7f:6f:0f:bd:3f:eb:25:f6:70:40:f2:a0:c3:83:78:5e:cc:
35:a4:e1:91:fb:f5:dc:ae:22:32:ff:94:de:78:86:e4:8a:6a:
b0:4e:2f:bb:a8:96:97:70:97:0a:92:f4:6d:20:ad:97:d9:de:
0c:72:17:e2:4d:f5:4a:af:dc:f5:e6:fb:d8:f9:00:4a:02:ad:
00:97:ec:ad:fc:7b:82:b6:b1:83:ed:54:45:3b:04:ae:f7:c9:
58:de:ec:43:86:6e:18:34:d1:f1:94:c4:de:e8:63:07:07:36:
54:14:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:22:46 2026 by rpki-client