Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier: Ik6j1aRKbYfNkAgk/aEXDJaDPzhTw1j0tZsFxeJIa3c=
Subject key identifier: B8:87:06:2D:68:0D:F6:AD:08:52:B6:81:D5:62:F1:CF:D6:B6:F6:0A
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 01A0D237929BCD8CFCE4088D00A31D9569B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number: 04D7
Signing time: Thu 24 Sep 2026 07:00:52 +0000
Manifest this update: Thu 24 Sep 2026 07:00:52 +0000
Manifest next update: Fri 25 Sep 2026 07:00:52 +0000
Files and hashes: 1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: mN4I3yq5MjFTknwUjHSDVG0YKfIryu6XnSvgZ17Tgo8=)
2: H8hy3M-dZbF5LF-bLNKLGkSAiM8.roa (hash: QhTyNMDXFYnK58Oe3Oi5QvMxyGR5QCyt3DqruWhYNhc=)
3: HCRPp5sqGGtIFHlFpCyszLUz01k.roa (hash: cvHb6PDwmvy9cnfO0m3z8Rn9MwuFaJOfZKh3d+uRF+I=)
4: dfuGHC5y6Cs6OtKLWfnDqLIypp8.roa (hash: FQBN+1FQkvOKlz8zc9u6RmD3hivGzzNsAeQ1Z6/0iFk=)
5: fPuins3lFUZ1jY8d9PDJqkylDns.roa (hash: AByQCiojVMPZv7xB+mvq4iwdIkbNNsl1NPcp0f8rA/A=)
6: jLnRiuqaeMjm778rNoTsOOpbmqk.roa (hash: O+LqSjIvdiGCJU85S8encdf0tP/8HNlkHBkVyyeQEYw=)
7: nky6VY8kQKqSy_Jo_ry1YB-6XXk.roa (hash: YIoLB/kdYI0wpUMtQO8K9AaO+DoKlWfs1MurD/HYA/k=)
8: yWPqOgOBvju_AqBpcll2n69Siyg.roa (hash: r7Vqk0QTVCvbIxJGhQ/NDTG06WGq4j4lpvgrIiORKak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:92:9b:cd:8c:fc:e4:08:8d:00:a3:1d:95:69:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Sep 24 07:00:52 2026 GMT
Not After : Sep 25 07:00:52 2026 GMT
Subject: CN=b887062d680df6ad0852b681d562f1cfd6b6f60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:b7:cd:d8:41:92:cf:6a:1c:eb:16:e9:53:
e6:49:81:e0:13:ad:8f:be:ad:2c:e8:58:1c:b2:73:
0a:02:42:5b:91:15:59:19:0f:08:52:5d:56:a8:bd:
58:44:50:c6:af:78:38:10:70:7f:86:16:58:5a:87:
0f:72:c9:5a:dc:7b:87:f1:f2:c0:a2:95:be:54:2e:
cb:a6:2b:f9:2f:ad:e6:3b:3a:6b:6a:51:c0:7a:6e:
34:12:68:3e:7c:8c:91:b2:f8:3d:ff:22:69:7a:b5:
40:4c:66:c2:86:bc:8a:a0:68:77:26:4f:38:ba:bd:
33:68:ab:ac:b6:e6:23:fd:cc:51:c5:b0:77:38:84:
c6:0a:5a:4c:fb:b0:f7:60:9d:75:73:5c:3e:fb:3e:
9d:6e:84:48:64:f4:93:18:a0:a1:01:e6:9d:de:34:
e0:1c:aa:ba:4a:ba:18:83:bb:9f:1a:fe:dc:7c:19:
bf:a5:57:0c:4c:3e:4e:59:fa:2e:2f:68:41:65:da:
3a:8f:40:42:dc:a7:b8:ba:ea:8a:99:e1:dd:f0:b3:
31:cd:3c:b5:8f:fc:b5:7a:07:77:f4:3d:13:2d:4a:
0f:57:51:22:cc:f2:a7:13:7c:43:2a:12:c3:95:d5:
eb:92:93:15:19:6e:64:62:07:7f:3a:67:11:d1:e2:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:87:06:2D:68:0D:F6:AD:08:52:B6:81:D5:62:F1:CF:D6:B6:F6:0A
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:06:93:05:87:3e:6c:53:b2:05:a3:8e:23:6c:af:c2:e8:ff:
24:03:aa:e3:1d:ac:79:52:ae:fa:7a:71:dc:b4:9c:a5:64:0c:
9c:95:da:76:d8:1f:e4:0b:a9:4f:f2:73:cd:d3:57:55:36:6c:
82:da:23:64:69:c1:19:16:b7:00:64:c1:6e:83:9f:71:04:c4:
38:36:f9:43:b4:52:c8:e3:d4:b1:90:ab:97:4f:65:12:f8:7f:
a4:b3:4e:55:5f:45:f6:99:bb:13:4b:03:53:9a:86:37:62:7e:
f0:f8:5a:a3:40:d0:bf:c6:5d:83:25:7f:f7:e7:b3:87:36:30:
52:09:02:44:7e:51:f4:f4:a0:d0:34:9d:60:5a:5b:95:bc:c4:
c0:d5:87:db:24:19:db:d6:0a:0d:a8:08:fc:31:bb:c9:25:8d:
43:25:ef:a3:4d:b0:db:0c:6a:76:64:a2:1e:20:d5:36:05:88:
48:a2:26:95:bd:eb:ee:57:02:ef:56:e5:15:ba:77:73:36:d3:
80:a2:37:87:38:99:d6:e0:16:00:c1:2b:53:42:32:ea:36:c1:
03:f9:b4:ea:f1:d8:94:ee:0d:6b:bd:88:47:17:2a:d1:79:e9:
e6:f3:29:ae:63:5c:26:81:86:d9:bb:0c:c9:c1:0b:4c:c2:6f:
79:c4:9d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:20:12 2026 by rpki-client