Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: rrKLM2WzAOrIbCf6lJsNJz7o0MoLPUT430/EENm+FiE=
Subject key identifier: 0B:6F:99:44:8A:D6:E9:34:D8:2F:EF:DE:29:7B:64:A5:F2:F8:11:8F
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 01A0D983C14B6024E66730D6D3B9C8A79504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 0863
Signing time: Fri 25 Sep 2026 17:01:25 +0000
Manifest this update: Fri 25 Sep 2026 17:01:25 +0000
Manifest next update: Sat 26 Sep 2026 17:01:25 +0000
Files and hashes: 1: KfWydckPfiqGOF337NlzjDPQl00.roa (hash: 4ha/Pfwft4tserJ5wBf8nDoQ8MRbjhW1BTAI762DC0o=)
2: T-fVHEDNZq7F9-utYfRKMAdoFhQ.roa (hash: yBrzfuoQ7PjM0FJTl5FcbusQvv4aZ8BnPQEBmHRMImE=)
3: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: 13jijtjTPOwQNxL219VxFQWWrvcQ9mZaWruDIroI/n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:c1:4b:60:24:e6:67:30:d6:d3:b9:c8:a7:95:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Sep 25 17:01:25 2026 GMT
Not After : Sep 26 17:01:25 2026 GMT
Subject: CN=0b6f99448ad6e934d82fefde297b64a5f2f8118f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:25:f8:18:35:f4:6f:76:a5:69:ad:2d:6e:aa:
7a:a4:f5:c6:a9:5b:40:a2:cc:4b:21:a6:55:4d:06:
c0:f9:4e:82:db:6c:6d:98:e4:2e:9f:5e:dc:9b:a0:
33:3b:0e:de:fc:8c:08:31:2a:35:e2:de:ef:f5:91:
20:07:3e:1a:a2:8f:3f:67:13:52:ba:b4:a9:09:6d:
e8:c9:28:4a:d5:0f:16:d4:e0:0f:3e:19:fc:e8:3e:
3a:a7:3e:a9:7b:81:24:57:51:36:62:4f:46:25:b5:
02:8b:83:97:0c:fb:df:b9:bc:48:ac:48:a8:03:c5:
6f:d8:9b:a4:07:29:dc:af:c8:db:f6:6d:b2:6e:fd:
5c:ae:49:08:41:54:ab:ce:99:d9:e9:2a:74:42:39:
0c:01:e2:61:e5:b7:4c:78:83:e9:9a:16:f0:b4:aa:
6a:2e:f0:cf:af:44:72:0f:60:84:d0:f9:48:d4:1a:
f8:ef:56:02:87:d3:17:59:1c:b7:20:1f:31:26:2f:
8f:6a:84:0e:0a:a4:29:c7:9f:b7:f7:61:7d:c5:f2:
1b:c8:44:e1:70:b4:8a:36:d8:55:fe:f0:df:3e:57:
83:56:08:66:c0:50:18:f2:94:2f:c6:a2:59:71:2a:
9d:c0:3b:cc:bf:24:36:e7:33:fa:fe:56:21:18:2e:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6F:99:44:8A:D6:E9:34:D8:2F:EF:DE:29:7B:64:A5:F2:F8:11:8F
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c3:9c:a7:65:fa:e2:6d:43:88:f3:91:8a:69:3d:3d:a7:f4:
78:bf:a8:c3:d5:83:ed:ea:f3:a9:90:d3:3e:be:82:b2:0b:fa:
82:1d:7c:37:f0:f6:42:de:92:a3:93:24:25:2d:80:11:57:1f:
82:c5:e1:17:98:b5:21:ec:43:f5:fa:3d:68:c6:db:f4:4d:0f:
26:62:39:c9:ae:b4:41:c7:c1:8f:fc:44:9b:2c:de:e7:c2:f5:
67:80:c9:5f:3b:72:e0:a1:5f:4d:ad:66:e9:55:c2:e1:d8:e8:
0f:c3:54:94:16:d1:6a:89:84:76:68:ce:c9:e8:d2:ae:f6:8b:
fd:f2:6e:de:13:04:8e:4a:46:47:db:ec:a6:1f:3d:6d:3d:67:
bf:f4:e7:8b:b7:f9:cb:39:f3:e3:39:d0:ff:da:b1:85:ec:0a:
f5:89:09:a0:d7:1e:ef:43:29:44:41:a2:eb:cb:a5:4e:4c:b7:
17:e8:e0:d0:2f:cf:10:ec:ac:97:ff:90:0e:93:08:87:cb:fd:
a8:2e:65:f5:96:2b:32:3b:6d:02:d9:8b:bb:6f:ef:75:f9:d8:
15:38:a0:9d:9c:3d:0c:a0:66:a7:3d:3b:84:f6:e9:67:fe:bf:
bc:cf:1e:59:06:22:0e:6c:96:78:2d:d1:79:7b:fe:b2:0f:d3:
e7:2b:07:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:09:07 2026 by rpki-client