Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File: bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier: cWsyNUUU8GvaX4ay9ap94XrfQLgXOiogiKe270kULIs=
Subject key identifier: 28:3F:77:92:0B:C7:FE:33:A1:93:F2:0C:3B:5A:AD:D3:96:F2:64:82
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial: 01A0CDB6948E0FEC21419072207F37AC2905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number: 04D6
Signing time: Wed 23 Sep 2026 10:01:29 +0000
Manifest this update: Wed 23 Sep 2026 10:01:29 +0000
Manifest next update: Thu 24 Sep 2026 10:01:29 +0000
Files and hashes: 1: 5keHs3ZF32HHKjKjaH3sZPymTNw.roa (hash: gQldWta3BCOowcdKdH4KVhP0tTXoPexAJ5F4Iq4GDNs=)
2: 9KcLH-08xp9bTu3iU1LcZBGH8Qo.asa (hash: 3lMyXLFpUnbxFEEAepRspDKIQvKIBFYX/ZM2xRZKoIs=)
3: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: TYmTIFCsbh8AQ8T8CcXrI24dJzZ4zD6mWW9O1fUkpMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:94:8e:0f:ec:21:41:90:72:20:7f:37:ac:29:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Validity
Not Before: Sep 23 10:01:29 2026 GMT
Not After : Sep 24 10:01:29 2026 GMT
Subject: CN=283f77920bc7fe33a193f20c3b5aadd396f26482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:8b:2b:0a:e8:30:e5:52:eb:db:84:a4:61:
78:c7:99:56:ad:f3:bd:fe:e0:c0:e5:86:e4:11:90:
23:8c:af:9d:91:59:bb:bb:6d:6f:04:b9:e4:4c:b6:
d5:47:fb:42:5a:6c:95:2b:e7:87:1c:d6:2c:94:c4:
57:84:34:95:0d:61:e1:0b:c7:57:d7:d4:c0:43:cc:
69:46:06:fe:fb:ed:bb:7a:7c:5b:2e:e2:d0:5d:87:
e5:4d:ff:18:d9:d7:4a:fa:6d:ab:93:d9:ce:48:f7:
01:c8:4f:97:1c:9b:0d:bd:85:a5:d1:a8:16:00:11:
4c:97:1d:e6:33:45:52:b4:21:04:dc:f6:a5:e8:1b:
50:e2:f9:29:ea:15:b4:20:11:d3:30:5a:e5:b2:ae:
b0:08:84:80:4a:65:d6:b4:c7:c2:57:6d:1f:52:dc:
00:5c:52:16:bd:45:35:51:61:95:5c:12:0d:2a:bd:
0d:4a:43:8f:3e:ab:5f:08:0d:3e:e5:05:8b:0d:11:
af:b7:e8:eb:5c:b6:47:88:17:96:99:b9:a7:86:fb:
04:1a:0c:de:f0:79:ea:65:90:3c:15:05:42:1f:ae:
5a:da:4c:7e:69:35:33:fc:a9:f6:a7:db:d4:7c:04:
53:14:8d:47:41:9f:80:d2:43:5e:aa:fd:f3:45:6e:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3F:77:92:0B:C7:FE:33:A1:93:F2:0C:3B:5A:AD:D3:96:F2:64:82
X509v3 Authority Key Identifier:
keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:77:72:fd:f1:6c:65:9c:4b:3c:28:0b:d6:2e:54:71:28:74:
43:96:6b:72:80:3c:3e:2b:5c:2f:aa:57:51:e7:92:ce:6b:27:
5f:0e:cc:7f:2f:2b:b3:8c:cf:e0:42:4d:1a:54:15:8e:29:a1:
c3:f0:26:73:18:f5:23:e9:45:1c:82:fa:60:a4:c7:01:43:5c:
19:a6:d1:c7:34:24:be:b6:47:02:e4:3b:e9:84:e3:54:a5:6f:
a8:36:5f:01:0b:20:31:18:1d:0a:dd:b7:5a:63:fb:08:a3:a7:
bc:95:42:11:d9:1d:2d:2b:1a:75:14:7b:7a:fb:d7:79:3f:3c:
2c:eb:e7:88:93:03:63:9b:e8:85:df:22:f9:2d:a1:a5:59:cd:
8c:83:e6:32:68:5f:2c:cd:ca:0b:7a:e6:28:b7:a1:3a:a2:9a:
e9:86:0e:76:47:68:55:8d:c1:05:c9:b5:62:d5:96:4e:f6:4c:
fa:3d:4f:5a:f5:d0:e5:12:a7:3c:37:5d:eb:6e:ca:32:ac:83:
0d:50:e8:78:b1:10:02:c1:8c:f6:55:e3:67:24:33:f0:2a:dd:
c0:a3:d0:ed:5a:7e:65:ba:24:95:55:52:7b:c6:03:bd:94:6a:
ad:e1:33:25:0b:c6:33:33:c7:1e:68:12:50:cc:6f:01:2d:bd:
dc:fe:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:02:27 2026 by rpki-client