Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
File: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft (raw, json)
Hash identifier: uHnoYRjBnyv1Nf1VM11uxxMyvY331eMwS9xVGJ+IcmQ=
Subject key identifier: BD:02:B2:F4:B4:57:04:F4:89:19:D6:A8:D5:3B:66:3D:0F:14:EE:30
Authority key identifier: E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
Certificate issuer: /CN=e920237e725cf0a53ef43a74b5569551aff74e04
Certificate serial: 01A0CE91F1F60BC757F316EBB26C3551D627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
Manifest number: 0CA3
Signing time: Wed 23 Sep 2026 14:01:06 +0000
Manifest this update: Wed 23 Sep 2026 14:01:06 +0000
Manifest next update: Thu 24 Sep 2026 14:01:06 +0000
Files and hashes: 1: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl (hash: LbEsxX4nV37TbqTbSBZ8YlcKReQ50Q3fkM0Jq727Tnk=)
2: cmKY5ceisIdSEDxZAHQoFXS37F0.roa (hash: sNf/iuxeatsIfNnR4y3DdWxX9LCuZ9ar0ao5hSS62EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:f1:f6:0b:c7:57:f3:16:eb:b2:6c:35:51:d6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e920237e725cf0a53ef43a74b5569551aff74e04
Validity
Not Before: Sep 23 14:01:06 2026 GMT
Not After : Sep 24 14:01:06 2026 GMT
Subject: CN=bd02b2f4b45704f48919d6a8d53b663d0f14ee30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:b9:b2:1e:c3:cb:0d:9e:7d:40:60:39:cd:
7c:ad:fc:ae:6b:d5:17:74:ea:b2:e0:36:a2:fb:61:
bd:87:f3:e5:d3:59:1c:fe:3a:01:49:ce:fa:56:70:
e2:53:5f:df:10:06:0c:b8:65:66:b3:80:f8:04:4c:
b2:e6:81:39:a4:63:19:67:ba:fe:bf:6b:0d:62:83:
d8:f2:9b:af:21:9a:5f:ea:d5:2d:73:f0:60:45:e8:
47:a3:54:64:50:8d:ab:84:e7:d2:66:7a:e1:e5:5b:
50:42:9e:37:6f:29:b8:f6:01:06:fa:29:43:c9:66:
82:0a:08:db:b0:f0:e8:46:db:17:f3:0d:ab:6a:6c:
d1:92:e2:eb:a1:6a:70:b0:09:df:8e:4d:ab:3f:3d:
f7:9e:f2:c4:19:e7:a8:87:2e:a4:2d:06:26:bc:24:
b3:ff:c1:b0:8c:9a:22:67:32:1e:78:95:87:87:54:
84:4a:f6:79:c8:16:78:4a:85:e9:06:0e:29:7b:0e:
21:d1:1f:93:a1:f6:b5:26:5b:a4:d3:26:a4:38:3d:
af:25:c8:b9:1d:5c:60:7f:f0:84:ba:67:3d:b1:b7:
83:0d:57:f4:c3:84:da:c5:b0:87:1d:4b:d7:d6:6d:
28:9f:bb:ce:ce:e1:b6:ea:32:a0:c7:27:4d:fa:1b:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:02:B2:F4:B4:57:04:F4:89:19:D6:A8:D5:3B:66:3D:0F:14:EE:30
X509v3 Authority Key Identifier:
keyid:E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:df:fa:98:88:9d:58:27:4c:fc:6f:cc:c1:08:a0:0a:fd:81:
b6:ce:27:9b:6d:49:04:78:05:bf:b0:12:bc:f2:91:cb:06:d3:
fa:84:45:c6:86:04:b8:e1:57:97:85:92:31:6a:b9:3b:23:3d:
3d:b3:a9:dc:2d:83:53:79:19:e7:04:96:ae:3d:61:aa:98:5c:
e5:43:51:75:a1:7c:fe:5c:3f:2d:e1:dd:a6:ea:96:b8:57:6d:
7b:04:a2:89:5b:63:0f:40:4a:90:5f:c5:fc:27:80:a6:b5:61:
e4:23:0b:52:9a:aa:ee:95:2d:c4:db:3a:e2:a0:04:08:99:73:
fa:c4:d6:6d:84:dd:c6:f4:1b:e3:ce:e7:00:9d:f6:04:29:0f:
b4:2c:a6:65:87:59:0b:77:17:36:98:b5:19:1d:6e:1c:09:cb:
59:f2:32:52:9b:8b:03:3a:df:9c:1a:63:8d:60:9a:0f:3a:d5:
e9:2e:c6:9c:20:d4:d7:09:36:23:5e:7d:a5:01:95:ed:84:9a:
d4:9d:af:c0:04:10:f4:18:50:f7:55:06:40:a9:e1:0c:9c:84:
08:22:ea:e3:a5:36:53:e8:93:ed:c8:bd:36:f0:b2:e8:9e:f1:
df:80:cf:c3:88:5f:45:57:49:ef:9f:05:dc:e9:9b:4c:06:65:
8c:5b:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:06:18 2026 by rpki-client