Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: tGYVUQ2+OOZ0GwCHr5eEBMv6SgDeu/drh4V7750kkh0=
Subject key identifier: 1E:E1:61:FE:18:BF:6E:7A:32:31:6E:CE:C4:30:6D:AC:50:58:6F:55
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 01A0DBDFEE1F082BF5E4BBE656F154F42FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 18B6
Signing time: Sat 26 Sep 2026 04:01:20 +0000
Manifest this update: Sat 26 Sep 2026 04:01:20 +0000
Manifest next update: Sun 27 Sep 2026 04:01:20 +0000
Files and hashes: 1: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: IcE+exgHkgdqMNbKcw+LOa9cudnp0IL7MsRRpsmJdds=)
2: d4ZsetDOK1N8Oc6-p-HftKevwhU.roa (hash: 0L55RAM7hPd5rdjKfZF2PwQWl976vJkt47d6mV+kYso=)
3: jwNcE1s-makAFRG_Z0YpC8tgTEA.roa (hash: UWEBlXajJs0PyfeEOQvBkjJjVBwaTr2pthi+ykCI4sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:ee:1f:08:2b:f5:e4:bb:e6:56:f1:54:f4:2f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Sep 26 04:01:20 2026 GMT
Not After : Sep 27 04:01:20 2026 GMT
Subject: CN=1ee161fe18bf6e7a32316ecec4306dac50586f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:6f:6c:ee:fa:17:09:ee:04:09:4f:0a:60:
b3:d3:d7:f0:c0:e4:93:4e:c2:3c:c7:4e:28:4b:6c:
c2:57:5a:6f:03:50:cf:27:49:b5:b1:5b:65:72:1e:
0a:06:a7:dc:b6:b9:5c:03:e9:bf:70:4a:d3:67:80:
ac:66:d0:d9:68:87:93:cc:4d:e7:39:65:10:23:71:
8e:13:e2:02:f3:0f:61:a6:d1:a9:ed:15:a5:77:fe:
a2:29:b4:ef:88:6c:c7:1a:54:46:9a:79:f8:5f:90:
37:1b:a2:a1:35:d8:8e:e5:c3:17:1f:c9:76:14:3c:
f5:e2:5e:57:26:c4:bc:18:4f:e8:c5:5d:37:54:9d:
e8:6c:e3:9c:c1:fa:da:76:e0:07:5b:45:bc:0b:14:
91:cc:67:7b:0f:a3:6e:6c:a1:8c:bd:05:83:e6:10:
54:e6:55:80:30:e9:c8:33:64:01:d0:f7:2a:91:6b:
fd:94:73:e9:21:e8:6c:03:9e:9c:7b:3a:47:22:38:
da:15:26:56:1f:32:5e:0a:3a:13:04:ef:30:e8:65:
ca:2d:ec:21:fe:2c:7e:71:d3:ad:3c:3b:a6:28:66:
16:2c:ca:ee:e5:ba:b6:90:93:51:18:6f:82:59:bd:
32:83:16:8b:31:e2:c9:60:73:74:97:bf:50:2f:30:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E1:61:FE:18:BF:6E:7A:32:31:6E:CE:C4:30:6D:AC:50:58:6F:55
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:45:18:b8:dd:42:5a:3b:b4:2e:3a:0a:43:a2:05:08:25:04:
8f:0b:d6:20:a4:ce:fb:df:a6:62:59:95:de:5a:97:29:1c:33:
b3:55:ec:34:cb:e7:ef:03:13:16:55:2a:e7:83:4c:4a:ff:4b:
a0:0e:b8:c0:0c:0b:cf:a3:fd:b2:91:e2:ac:10:fb:3c:d0:93:
c1:0c:21:1a:7c:d9:0c:7d:bd:4f:ca:a9:c1:b1:b1:e1:d8:19:
16:4b:f8:39:cd:4a:7e:47:e1:dd:1c:76:b4:92:60:fd:d5:08:
ca:fc:f6:4d:60:2e:72:9d:0e:1b:18:5f:c3:b5:8f:37:49:2d:
89:be:88:ed:63:35:81:44:00:20:e7:20:13:f5:a4:4c:11:aa:
87:fb:ac:2a:10:96:5a:52:56:5c:56:d2:bb:86:cd:36:2d:1c:
a7:b9:51:c6:6e:4b:c3:c6:5a:aa:f8:e5:f0:a2:28:71:b9:54:
a5:d1:da:4a:0a:df:7f:45:c1:05:18:c8:a7:9b:ec:d7:7f:c8:
cd:b2:98:3f:74:36:be:03:e8:b8:49:cb:4c:cc:91:ec:62:e7:
1f:d4:f6:55:39:7a:23:94:8f:6e:39:be:e3:59:2e:11:ee:e3:
6b:5a:46:92:f1:1b:39:92:ed:6e:81:9b:3e:1f:a3:d8:a5:85:
31:29:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:34:14 2026 by rpki-client