
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/786d4c-ff95-4ef4-ba12-6843265887ce/1/6wNf2684zEZvMWegDZo4sY0pGVI.mft
File: 6wNf2684zEZvMWegDZo4sY0pGVI.mft (raw, json)
Hash identifier: Hn6EqsvOMhDt9vCtbz9Fj+4LlN8kUaUSW34HCjAqyD0=
Subject key identifier: F7:4B:93:EE:DA:6E:B6:49:FC:EF:F3:70:8D:B3:3F:C2:D7:AA:5A:01
Authority key identifier: EB:03:5F:DB:AF:38:CC:46:6F:31:67:A0:0D:9A:38:B1:8D:29:19:52
Certificate issuer: /CN=eb035fdbaf38cc466f3167a00d9a38b18d291952
Certificate serial: 01A0EAE56ED2BE32FA5F43F2AA4E03B27920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6wNf2684zEZvMWegDZo4sY0pGVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/786d4c-ff95-4ef4-ba12-6843265887ce/1/6wNf2684zEZvMWegDZo4sY0pGVI.mft
Manifest number: 0187
Signing time: Tue 29 Sep 2026 02:01:39 +0000
Manifest this update: Tue 29 Sep 2026 02:01:39 +0000
Manifest next update: Wed 30 Sep 2026 02:01:39 +0000
Files and hashes: 1: 6wNf2684zEZvMWegDZo4sY0pGVI.crl (hash: /BjRa3sUgfhMJmHVyXUFj2NdTKiFjo6ZfXnOtZIjjKI=)
2: n8S8bVaGcAN3VgdpkFafYARJWFg.roa (hash: +lLrY2ENdazX4r0ywKff6R/dv1MoLjZqWxtS/7RQhF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/786d4c-ff95-4ef4-ba12-6843265887ce/1/6wNf2684zEZvMWegDZo4sY0pGVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/786d4c-ff95-4ef4-ba12-6843265887ce/1/6wNf2684zEZvMWegDZo4sY0pGVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6wNf2684zEZvMWegDZo4sY0pGVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:6e:d2:be:32:fa:5f:43:f2:aa:4e:03:b2:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb035fdbaf38cc466f3167a00d9a38b18d291952
Validity
Not Before: Sep 29 02:01:39 2026 GMT
Not After : Sep 30 02:01:39 2026 GMT
Subject: CN=f74b93eeda6eb649fceff3708db33fc2d7aa5a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:32:a2:96:a1:a8:45:c0:15:3b:e2:45:a7:
f6:88:81:7c:f0:92:f9:67:2b:09:e1:ca:30:cc:7b:
50:1b:08:b2:8b:d0:80:40:c1:3d:4a:c3:e9:8f:df:
36:cb:07:e6:b2:9e:5a:8d:05:18:b7:41:98:b6:bf:
e6:24:65:53:fe:76:e2:ca:97:7f:9e:a9:bd:3b:a9:
88:5e:9b:cc:e5:23:f8:93:6e:0c:1f:da:85:a9:0d:
0c:70:28:e8:01:42:81:20:24:bb:0e:6e:a0:aa:c3:
63:92:14:cd:af:73:53:6f:64:ed:6e:68:94:13:24:
c9:c6:ff:fe:38:ac:b7:37:ac:d5:ad:ea:51:4c:11:
8f:e3:f3:91:88:af:cd:f4:53:f2:cb:9a:cd:df:d4:
91:7b:76:3c:a4:62:55:d7:79:9c:23:6f:67:ab:ca:
3c:4c:d5:41:f3:a0:31:57:e8:89:b8:6a:00:5a:20:
bc:41:a5:3e:a3:a6:1d:1d:2f:21:d5:37:46:f7:d1:
d9:13:ee:cf:ff:3c:7f:91:70:8f:5a:6b:25:88:65:
b9:b7:45:dc:30:39:66:2f:9e:36:25:70:43:6b:cd:
5a:5d:c5:79:28:2b:30:2e:1a:87:2a:25:a3:bf:82:
ad:a1:78:5e:ea:00:59:1d:b3:0b:19:b9:40:19:4f:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4B:93:EE:DA:6E:B6:49:FC:EF:F3:70:8D:B3:3F:C2:D7:AA:5A:01
X509v3 Authority Key Identifier:
keyid:EB:03:5F:DB:AF:38:CC:46:6F:31:67:A0:0D:9A:38:B1:8D:29:19:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wNf2684zEZvMWegDZo4sY0pGVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/786d4c-ff95-4ef4-ba12-6843265887ce/1/6wNf2684zEZvMWegDZo4sY0pGVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/786d4c-ff95-4ef4-ba12-6843265887ce/1/6wNf2684zEZvMWegDZo4sY0pGVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ba:85:bd:a1:4c:0a:f9:36:27:13:9f:d6:4a:c0:e1:a3:be:
61:c8:fe:f1:97:cb:85:97:10:f6:4b:9c:4b:35:04:ae:68:4f:
d5:6b:c9:11:22:ad:cc:4e:e9:4b:15:9e:b9:1e:4f:2e:a2:78:
a2:6c:7b:25:60:7b:67:04:84:d7:35:23:28:12:e9:a0:33:a7:
eb:9a:48:36:5d:a0:a4:71:50:42:a6:d9:0f:d5:b4:5a:30:8c:
41:48:ec:d3:44:36:75:13:18:7e:fe:e6:03:de:69:3c:62:13:
66:be:7c:ab:6c:bd:23:5c:ea:64:09:f0:5c:88:d1:7e:d7:9d:
29:0c:64:d2:e6:8e:89:17:59:ca:fb:5f:45:0d:5b:f7:ef:70:
ad:22:5f:42:47:63:94:2d:95:25:22:cf:92:fa:9d:76:df:68:
49:7b:16:d3:5d:71:63:d5:f7:47:e6:55:1f:6e:55:e2:e9:c6:
4e:e0:a8:d8:61:7a:e0:e9:47:c9:78:1e:c8:fa:2e:52:ad:17:
a1:66:e4:fa:d3:2c:2d:34:4a:be:d2:34:68:82:b1:5b:d3:70:
4f:fa:18:f9:d1:41:ac:cc:d0:78:3a:8d:2d:5a:66:3f:bc:fc:
eb:f5:56:07:a1:d1:f9:e0:14:47:f8:ad:8f:59:11:92:40:71:
56:01:fa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:00:23 2026 by rpki-client