Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
File: 6W790RLajZdctZOq0f6IQNbwiuM.mft (raw, json)
Hash identifier: fpnurQestZlkk/tQFreZNJUz09RfPwCnsjk8miAqTd8=
Subject key identifier: 8E:C1:BC:6A:8B:CF:69:73:A1:F8:39:3E:A5:33:D1:5F:5E:E9:3F:3F
Authority key identifier: E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3
Certificate issuer: /CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
Certificate serial: 01A0CD10C830A14CB4871824C9C168B85867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
Manifest number: 0632
Signing time: Wed 23 Sep 2026 07:00:24 +0000
Manifest this update: Wed 23 Sep 2026 07:00:24 +0000
Manifest next update: Thu 24 Sep 2026 07:00:24 +0000
Files and hashes: 1: 6W790RLajZdctZOq0f6IQNbwiuM.crl (hash: XnWPOisxmfcSQW2VoxWVSk3kNVdvKyj6CoKHpCEZhJk=)
2: RXuM8IAV9dKlB2EmQJTkf2N4B2Y.roa (hash: WD8pAbNOanv690TfIXURotgNnDP3a1P1ohNJm3tKlWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:c8:30:a1:4c:b4:87:18:24:c9:c1:68:b8:58:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
Validity
Not Before: Sep 23 07:00:24 2026 GMT
Not After : Sep 24 07:00:24 2026 GMT
Subject: CN=8ec1bc6a8bcf6973a1f8393ea533d15f5ee93f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:71:2e:d0:59:06:89:c3:c3:51:29:57:58:f2:
17:94:f9:bd:24:96:9d:1f:e6:50:24:c8:22:ab:1a:
84:a9:20:a2:2d:8c:47:13:7b:00:9e:fc:d3:14:8d:
1a:30:59:b3:a8:49:5f:95:68:82:f5:e8:b2:d8:2a:
50:c2:c7:77:c2:bf:2c:d1:06:a7:57:13:5e:0b:60:
9b:e1:74:66:09:3c:55:d0:85:b8:4c:a6:b5:1f:16:
70:6b:6f:ab:e4:17:ef:32:a1:92:39:0d:ae:90:35:
58:00:8e:d4:a0:8f:54:44:bc:a3:f8:4d:cd:d7:02:
16:5f:cc:8a:cf:9f:b4:9b:80:76:bb:d1:34:ac:cc:
7f:21:af:e4:bd:08:d3:bb:cd:1e:70:49:c1:28:de:
64:50:15:a5:00:ea:e7:21:64:cc:ab:90:03:f6:29:
ba:8c:fc:69:14:bc:c4:fd:30:59:6f:1f:ed:f1:cf:
12:03:2f:26:f6:51:f1:29:b3:8d:01:04:c6:67:6e:
7e:bb:98:3b:5d:c0:56:eb:56:c7:1f:90:de:13:af:
cc:58:9c:ce:21:63:39:f2:67:f8:f0:1d:37:09:68:
b9:39:8e:5a:27:9b:4d:73:ea:4b:27:8d:43:fa:1a:
be:61:25:db:37:dd:20:7e:81:8b:1f:74:32:3e:bd:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C1:BC:6A:8B:CF:69:73:A1:F8:39:3E:A5:33:D1:5F:5E:E9:3F:3F
X509v3 Authority Key Identifier:
keyid:E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9e:01:e6:fa:fc:ea:63:3f:f6:11:8c:47:fe:28:85:97:27:
45:1e:30:87:5f:0d:4c:e2:a6:90:e0:0f:ae:58:9a:13:41:a2:
f5:73:ee:2a:ca:19:04:b3:09:14:c9:a1:60:c9:71:6c:bd:72:
16:c3:1d:45:b8:a3:66:29:e6:75:7b:e1:e8:12:03:6e:cf:47:
2b:9b:6d:9b:26:f7:b8:08:65:2c:21:4e:e0:fd:90:89:3f:52:
40:14:9f:df:93:fc:44:03:12:8c:1b:57:6f:4b:68:8a:28:a4:
7f:0a:2a:ea:ed:c7:df:3c:f6:74:fa:df:0d:d4:62:7f:40:43:
31:71:84:92:6c:44:58:83:f5:3a:a8:8a:f0:f8:60:44:1a:a5:
6c:00:d6:0b:d9:1a:b5:b6:88:09:36:f7:e0:94:74:c5:68:72:
c9:f3:55:ee:aa:61:e3:ec:7d:39:6a:11:a6:d4:08:5d:45:ce:
28:0f:94:de:5c:4a:ba:7f:b4:bd:90:89:24:27:69:19:c2:2f:
f5:8f:ba:c6:47:b5:ad:c1:c2:ba:e7:f4:1c:e1:0d:2c:ea:f2:
2d:e3:b3:06:17:c3:9b:75:ca:d0:85:9c:8a:03:2e:7e:5e:08:
df:00:ec:ee:9e:17:cb:9d:5d:fb:0d:69:b4:63:d9:e7:10:37:
bd:77:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:04:22 2026 by rpki-client