Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.mft
File: X6D0liYE-a0a0Yitw92fxcGS4ko.mft (raw, json)
Hash identifier: OdNTZrWdbmxL+1NWdWihbyKaycxDOL4A4pX6Rf1KqfQ=
Subject key identifier: 7E:C9:B4:15:A6:40:B5:00:E6:8F:E9:11:8A:A4:37:AC:EE:8C:81:79
Authority key identifier: 5F:A0:F4:96:26:04:F9:AD:1A:D1:88:AD:C3:DD:9F:C5:C1:92:E2:4A
Certificate issuer: /CN=5fa0f4962604f9ad1ad188adc3dd9fc5c192e24a
Certificate serial: 01A0DDCE44A8AA8AB52E1BACC8D94DFD8F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6D0liYE-a0a0Yitw92fxcGS4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.mft
Manifest number: 68
Signing time: Sat 26 Sep 2026 13:01:17 +0000
Manifest this update: Sat 26 Sep 2026 13:01:17 +0000
Manifest next update: Sun 27 Sep 2026 13:01:17 +0000
Files and hashes: 1: 3zNJZY1mynaOMt0PR_6OOhCID_k.roa (hash: eVoFznym7O4+TfKPzoOO9hJbiKl608aCcwNQSwV6jhY=)
2: X6D0liYE-a0a0Yitw92fxcGS4ko.crl (hash: mvQAXbeRP0xVshFbt1HxrMkNRPNZqcdYUy8BHpFOPEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6D0liYE-a0a0Yitw92fxcGS4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:44:a8:aa:8a:b5:2e:1b:ac:c8:d9:4d:fd:8f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa0f4962604f9ad1ad188adc3dd9fc5c192e24a
Validity
Not Before: Sep 26 13:01:17 2026 GMT
Not After : Sep 27 13:01:17 2026 GMT
Subject: CN=7ec9b415a640b500e68fe9118aa437acee8c8179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:63:35:64:4e:0b:5c:b0:18:43:13:4f:00:
ac:d8:1b:07:23:c2:e5:dc:a1:6d:09:7f:70:b9:cb:
b3:35:b6:c4:f9:e1:75:11:ff:bb:de:b4:0b:3b:f7:
db:c1:76:d1:c4:63:ab:26:2f:c3:ae:2c:04:67:eb:
8c:c5:96:1e:be:0b:38:83:7b:25:5f:1c:5c:27:f8:
cf:ca:75:b7:3d:cb:93:c2:6c:dc:c5:86:bc:e4:a2:
0b:3a:7e:ae:f0:c4:c3:ae:e6:8b:9d:55:6f:a7:a7:
b4:da:e2:02:aa:e2:94:68:d3:fb:81:05:b8:7d:b3:
1e:f7:1d:42:97:d6:da:43:d2:02:cc:4a:40:bf:63:
b2:3b:2e:60:a5:e7:eb:06:e1:9d:00:ab:1a:91:8e:
4f:e2:49:1d:04:2d:1c:46:6e:e2:1a:67:66:02:b9:
08:cd:6d:0b:21:7e:94:1a:58:3d:77:a2:5d:21:22:
2d:e3:bf:42:22:0c:a6:46:6b:11:74:04:ca:c2:68:
19:16:a6:2f:a7:03:93:82:d8:2c:9b:70:f4:b5:8e:
11:24:f2:48:a1:b4:2e:ca:fa:96:1d:1f:b2:ae:06:
4a:a8:ef:34:3f:cb:ee:db:25:f1:95:30:d4:0e:6d:
f2:28:52:3f:6e:f7:41:62:71:4e:ec:dc:22:d3:5a:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C9:B4:15:A6:40:B5:00:E6:8F:E9:11:8A:A4:37:AC:EE:8C:81:79
X509v3 Authority Key Identifier:
keyid:5F:A0:F4:96:26:04:F9:AD:1A:D1:88:AD:C3:DD:9F:C5:C1:92:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6D0liYE-a0a0Yitw92fxcGS4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:10:56:d3:91:99:7d:bb:0a:3c:36:df:ef:50:11:a9:d9:50:
81:99:98:44:3c:1b:35:ff:9a:3f:70:dd:62:ad:b2:e5:45:63:
5c:ac:15:20:39:16:59:72:e9:5f:c7:0f:6d:f0:6e:c5:f7:d4:
6f:e0:fc:e1:5d:85:cc:5d:c5:b9:ba:3d:d7:56:c2:6a:34:8d:
73:46:6f:6f:a8:45:4c:43:6e:67:53:bb:94:ce:b4:f5:99:8c:
8d:09:8c:f4:3a:79:b8:6a:4e:24:b8:01:0b:1c:51:c3:7c:99:
dd:78:d9:48:dc:da:ec:b8:f3:29:4b:ca:45:32:b4:4e:ae:fb:
89:a3:ce:aa:08:c8:56:35:57:00:7a:0e:2e:12:83:83:80:81:
68:75:ff:33:05:9a:1f:ee:90:6a:f9:e6:80:3f:2c:1c:85:0f:
af:0e:d9:5e:27:27:07:c5:d6:b7:6f:7d:5a:e5:1c:4e:67:d1:
29:de:9e:b7:12:e6:66:f3:13:e6:37:c7:5d:b2:bd:45:05:9b:
f3:09:ef:c6:6d:53:3a:e2:ce:ad:a1:52:85:7d:a2:59:80:a1:
9e:68:d8:11:8c:be:3c:49:fc:f0:5f:4c:90:31:50:0d:d3:ac:
fe:42:6f:99:82:2a:f3:2e:d5:97:2b:7d:f7:6c:a6:f4:1b:fa:
b1:68:89:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:51:57 2026 by rpki-client