Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
File: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json)
Hash identifier: kw2V10sV0FY13gYxQ2EMudY3/u9OeRf3tqkLUCY7YxA=
Subject key identifier: B3:B1:A3:BC:F4:F3:A2:14:FF:94:05:E8:F7:39:1F:03:4B:2C:53:C8
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 01A0C8FD9719B379A4F5A9A9F31DCBADA1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
Manifest number: 0F20
Signing time: Tue 22 Sep 2026 12:00:57 +0000
Manifest this update: Tue 22 Sep 2026 12:00:57 +0000
Manifest next update: Wed 23 Sep 2026 12:00:57 +0000
Files and hashes: 1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: xFJc3tZ3wbnUy66LvSOm0d4zAAHpiUHtspd1ZfFXB6Q=)
2: x_ow3qxhfOMLBRjgBidD1PQTkzs.roa (hash: tTO9VSPgrTRCs8qsXCJT8F1FGJbKaVUFEepw4YEza7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:97:19:b3:79:a4:f5:a9:a9:f3:1d:cb:ad:a1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Sep 22 12:00:57 2026 GMT
Not After : Sep 23 12:00:57 2026 GMT
Subject: CN=b3b1a3bcf4f3a214ff9405e8f7391f034b2c53c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:fe:c1:04:65:e5:a9:e5:6f:95:0b:30:10:
4b:ae:90:22:10:ed:03:9c:59:f3:77:2c:be:03:9b:
f2:dd:32:07:3a:8a:3b:ee:52:b0:d9:d2:80:de:20:
fb:66:a5:8d:aa:7f:08:72:e6:b3:c1:94:95:ed:6f:
b5:12:0c:14:9b:75:af:a8:f3:90:c8:bf:12:ae:44:
47:d1:89:4f:07:38:c9:b2:ab:0a:51:f1:03:3a:59:
ad:6d:be:a9:05:3e:1a:fb:d2:2b:6b:9b:e8:51:c1:
06:c7:6a:25:b7:c2:30:17:64:f8:cc:f2:2b:dc:c2:
c1:c9:0d:dc:17:6a:8d:98:4f:1c:91:29:05:d6:58:
c3:1a:85:83:5c:6e:48:1f:e2:40:34:e7:06:77:d5:
7d:e0:d3:24:f7:97:3b:89:6d:ea:df:06:59:7b:00:
6d:7e:13:ab:c3:4d:ef:0c:8d:db:e3:a5:f0:bd:14:
68:ed:65:b0:6a:d7:6a:d0:cc:aa:25:21:36:26:18:
cd:b3:e8:17:64:a8:2b:f0:8f:72:d7:5d:83:98:9f:
2a:3b:08:49:07:7f:11:ea:31:22:e2:50:c8:99:c3:
d5:50:9e:7c:76:f8:3d:36:06:37:9a:ea:04:0f:e8:
58:5f:dd:47:2a:5f:2c:fa:d4:80:46:bc:4d:22:f9:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B1:A3:BC:F4:F3:A2:14:FF:94:05:E8:F7:39:1F:03:4B:2C:53:C8
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a8:1b:8c:71:a9:18:16:00:df:65:99:81:74:41:ef:9b:1b:
fc:7f:58:8f:2b:14:ec:b1:08:28:bb:7f:4d:b9:cf:c8:6e:f6:
e7:1a:60:11:63:71:03:8e:6a:90:c6:ed:01:fa:6a:10:1e:78:
7e:32:7c:0e:ce:c4:a4:c4:92:3b:d6:d2:da:68:7c:e2:a6:f3:
0a:9d:fe:e5:5c:4d:0c:db:2c:87:86:e8:ae:f3:3b:2b:4b:45:
42:37:94:da:da:70:1e:da:f4:09:ab:56:83:78:29:59:f8:79:
1a:ba:7c:a1:ac:b2:d0:08:df:f5:3f:ce:53:64:e7:1e:b0:c7:
3e:32:81:79:ec:a2:7e:35:5d:5e:82:56:62:b8:ad:39:9b:d1:
57:c5:82:7e:84:97:6d:9b:5a:5e:02:0c:39:37:79:73:ba:e7:
93:bb:c2:8b:99:87:c5:1f:65:4f:c1:28:b1:e6:dc:1b:9d:f8:
0f:34:8b:c2:c8:ff:58:4b:7f:84:d2:a5:d2:21:ff:14:56:14:
ea:07:0d:1b:9f:6f:49:e0:e4:81:28:f2:01:63:fe:2f:10:e5:
e3:c2:89:6c:2c:70:18:19:48:9b:17:9e:63:fa:14:bd:2d:a2:
98:c5:bb:39:c0:3f:cb:e8:bc:0f:ea:6c:f0:ca:95:f5:77:c8:
18:2b:ae:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:56:20 2026 by rpki-client