Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier: p9UWchUQi5naDNcGpxoebCMzPyJEDz8RVjxOzcaPAPw=
Subject key identifier: 71:20:D1:84:9E:87:4E:0F:87:5D:78:FB:9F:E6:17:A4:C3:96:3C:14
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer: /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial: 01A0DC171F7E96AC36A2E1357C5F2E91CF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 05:01:37 +0000
Manifest this update: Sat 26 Sep 2026 05:01:37 +0000
Manifest next update: Sun 27 Sep 2026 05:01:37 +0000
Files and hashes: 1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: B78JlXHkDne3etTJ/vPNdUIESj6C7JlTKtNEMskw714=)
2: yhCwjfMZQm7fd9jkt80pOtuEFGo.roa (hash: hs2p0KXq3AByfrOTWurPjFi6ySD7XrB1GNNKZ5BnbRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:1f:7e:96:ac:36:a2:e1:35:7c:5f:2e:91:cf:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Validity
Not Before: Sep 26 05:01:37 2026 GMT
Not After : Sep 27 05:01:37 2026 GMT
Subject: CN=7120d1849e874e0f875d78fb9fe617a4c3963c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:c3:16:a8:ae:a3:f1:da:7a:eb:cd:41:31:
50:e0:6a:47:93:1d:4f:14:5a:d2:29:87:03:58:ab:
b4:b5:53:c1:02:f3:7e:1f:14:dc:20:06:e6:42:c9:
76:71:ee:c8:fa:08:9d:19:59:fa:2f:75:d4:90:00:
97:03:bc:76:fa:f2:4d:c6:7c:ee:ae:76:95:b8:69:
51:6b:6b:0d:50:59:20:93:f4:63:d6:c5:63:4b:22:
0a:63:0b:17:c0:e2:bd:82:73:bd:3c:35:cb:f6:4a:
88:88:3e:9f:5f:7d:98:cd:97:d6:d6:21:c3:e3:3b:
e9:3e:a1:be:37:6e:5a:b5:fc:88:db:e3:fc:24:59:
3b:bb:a4:27:a1:f6:47:75:02:d2:58:8e:62:6a:5d:
28:a3:42:ae:be:97:be:4e:a2:9a:86:cf:fb:c2:b2:
17:bd:57:b5:05:43:79:7e:79:a5:28:48:53:79:f4:
9f:59:dd:d7:dd:4d:f4:77:51:de:52:c9:18:61:cc:
2c:ee:89:98:39:9c:34:9f:0c:b0:69:ff:ce:d4:6a:
14:72:84:9b:5a:7f:25:a9:a9:db:b9:b0:64:78:84:
e5:20:a7:59:ce:75:a2:a4:f7:47:1a:68:db:a1:79:
95:c2:ea:8b:59:26:2e:2c:4d:37:74:f3:ee:a2:67:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:20:D1:84:9E:87:4E:0F:87:5D:78:FB:9F:E6:17:A4:C3:96:3C:14
X509v3 Authority Key Identifier:
keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:32:28:b5:d5:2b:84:3b:b9:d9:7a:e8:19:f9:6d:b6:c9:ec:
53:66:1e:42:98:da:01:8d:5b:c7:cf:9b:0b:43:34:e7:0b:9b:
58:81:2a:8b:65:8c:51:c9:4f:fb:be:8a:cc:3a:54:f1:ef:0e:
9b:69:9b:a7:6a:30:7c:51:db:84:48:38:55:47:07:b8:21:44:
d7:4a:22:62:2f:50:5c:a9:54:0b:5b:9d:60:4c:e7:11:35:04:
fd:ee:61:a0:e1:e4:9d:a9:c1:3d:c1:c1:28:e6:8b:77:c7:75:
da:69:7e:68:a7:61:ac:2a:ec:a1:cd:61:d8:a8:b8:4b:45:f5:
3a:dd:ad:50:35:eb:91:c5:70:5a:34:e4:de:95:69:60:c6:07:
52:ae:48:47:8b:64:83:68:23:c1:ed:23:8d:09:69:3b:a0:6e:
28:b0:94:e1:dd:63:4f:e0:4b:48:ff:07:c0:6b:c9:92:59:88:
d0:b7:dd:91:d1:ef:85:f6:6e:98:aa:9e:03:2d:2f:eb:be:db:
92:bb:80:26:96:61:a0:5a:af:f6:d8:14:81:c1:61:cf:6d:16:
c7:ea:03:01:72:98:ce:b1:49:1f:60:1a:8f:97:06:3d:2a:25:
96:f5:d6:b0:e9:c1:d5:02:43:6b:af:4b:65:25:f1:95:c8:ba:
03:f1:76:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcFx9+lqw2ouE1fF8ukc95MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYWNkMmI3Yjc0NzNhZjQzNTBlYTFhYmE4M2QxNzc1ODVj
ZWVkYWQwHhcNMjYwOTI2MDUwMTM3WhcNMjYwOTI3MDUwMTM3WjAzMTEwLwYDVQQD
Eyg3MTIwZDE4NDllODc0ZTBmODc1ZDc4ZmI5ZmU2MTdhNGMzOTYzYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uTDFqiuo/HaeuvNQTFQ4GpHkx1P
FFrSKYcDWKu0tVPBAvN+HxTcIAbmQsl2ce7I+gidGVn6L3XUkACXA7x2+vJNxnzu
rnaVuGlRa2sNUFkgk/Rj1sVjSyIKYwsXwOK9gnO9PDXL9kqIiD6fX32YzZfW1iHD
4zvpPqG+N25atfyI2+P8JFk7u6QnofZHdQLSWI5ial0oo0Kuvpe+TqKahs/7wrIX
vVe1BUN5fnmlKEhTefSfWd3X3U30d1HeUskYYcws7omYOZw0nwywaf/O1GoUcoSb
Wn8lqanbubBkeITlIKdZznWipPdHGmjboXmVwuqLWSYuLE03dPPuomcJ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEg0YSeh04Ph114+5/mF6TDljwUMB8GA1UdIwQY
MBaAFNOs0re3Rzr0NQ6hq6g9F3WFzu2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZ6U3Q3ZEhPdlExRHFHcnFEMFhkWVhPN2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80NmMyMGMtZjE2Ni00MDQxLWEwMWIt
MGVmZWM2ZWE3N2M2LzEvMDZ6U3Q3ZEhPdlExRHFHcnFEMFhkWVhPN2EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80NmMyMGMtZjE2Ni00MDQxLWEwMWItMGVmZWM2ZWE3N2M2
LzEvMDZ6U3Q3ZEhPdlExRHFHcnFEMFhkWVhPN2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjIotdUr
hDu52XroGflttsnsU2YeQpjaAY1bx8+bC0M05wubWIEqi2WMUclP+76KzDpU8e8O
m2mbp2owfFHbhEg4VUcHuCFE10oiYi9QXKlUC1udYEznETUE/e5hoOHknanBPcHB
KOaLd8d12ml+aKdhrCrsoc1h2Ki4S0X1Ot2tUDXrkcVwWjTk3pVpYMYHUq5IR4tk
g2gjwe0jjQlpO6BuKLCU4d1jT+BLSP8HwGvJklmI0LfdkdHvhfZumKqeAy0v677b
kruAJpZhoFqv9tgUgcFhz20Wx+oDAXKYzrFJH2Aaj5cGPSollvXWsOnB1QJDa69L
ZSXxlci6A/F2ow==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:59:11 2026 by rpki-client