Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
File: bE6tk3_29mwLFfItDUn5N243154.mft (raw, json)
Hash identifier: GhqxxHJ8JaCnJHTT/PKIB3O6hePrV483n3ywTmg7CgE=
Subject key identifier: 93:22:64:9F:A4:42:83:42:0D:78:D7:1D:C1:1D:21:98:1D:13:19:1F
Authority key identifier: 6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
Certificate issuer: /CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Certificate serial: 01A0C1E8DACF40C96C82DB9F98E4E67F8C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
Manifest number: C8
Signing time: Mon 21 Sep 2026 03:00:57 +0000
Manifest this update: Mon 21 Sep 2026 03:00:57 +0000
Manifest next update: Tue 22 Sep 2026 03:00:57 +0000
Files and hashes: 1: HtXE6o5gyDE8p-LeGfVTGKS-HFg.roa (hash: TRqFmFDs3cFEdD+j1MIH3IwsMTCX5wrTHYLogmPYGvU=)
2: bE6tk3_29mwLFfItDUn5N243154.crl (hash: Kx5CnVEiXO0ph91FeY1FsWvwbyTC20jeir5NzbjHU+s=)
3: vTlhAenRPSZUNMMxyWS0DXwQ5N8.asa (hash: PklvSNrA+pjY5wXK2t56S6nxPO2i6UZMi9BUxQ6a3ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:da:cf:40:c9:6c:82:db:9f:98:e4:e6:7f:8c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Validity
Not Before: Sep 21 03:00:57 2026 GMT
Not After : Sep 22 03:00:57 2026 GMT
Subject: CN=9322649fa44283420d78d71dc11d21981d13191f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:a7:a0:04:7e:45:5c:cf:91:e3:41:04:7f:
b2:75:64:3c:33:21:e2:6a:b6:33:09:ad:59:f4:85:
3a:8c:75:52:de:9a:f7:1b:46:df:5a:c7:65:71:9b:
f2:d3:d3:81:d0:a0:5f:ac:ad:8c:e9:0b:f7:6f:ef:
34:e6:15:82:6b:17:2b:d7:05:16:37:d8:b6:68:4e:
c1:1d:e5:cd:37:1b:d6:82:61:a7:8e:32:23:7a:60:
5f:c5:eb:04:08:6d:bb:5a:7d:0e:0f:67:b4:d9:35:
49:b0:dc:a1:c2:6d:09:05:78:ce:e7:ad:fd:fe:99:
aa:d4:6a:5d:6c:23:c8:59:ca:87:e0:03:ae:d6:57:
bc:3b:60:d7:a7:9f:b5:bb:11:7d:55:a7:e6:49:af:
d3:fc:b5:ca:70:be:f0:60:fd:08:e6:29:cc:d7:39:
13:d8:97:b3:30:d4:6b:46:b7:9e:5f:61:ba:c4:29:
32:ea:c1:22:ab:1e:5b:f7:f0:e5:25:46:cd:47:a7:
04:b9:01:d2:65:af:46:5a:51:b3:de:73:a7:5c:b5:
3a:6d:2d:fe:fd:c0:9d:87:3a:81:7a:2e:cd:9b:b7:
8e:0e:c7:7f:36:43:cc:19:71:18:27:68:4e:68:0d:
7b:72:5a:01:4d:e6:9a:ee:b2:cf:14:31:59:d3:50:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:22:64:9F:A4:42:83:42:0D:78:D7:1D:C1:1D:21:98:1D:13:19:1F
X509v3 Authority Key Identifier:
keyid:6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ec:62:cb:ed:25:08:3d:cc:d2:30:d7:de:00:42:8c:88:47:
24:f6:fc:f9:26:b2:96:46:9c:fa:49:39:ec:c1:b4:80:bd:67:
bd:82:80:e7:e6:9c:4c:6c:00:3a:59:22:de:37:21:fd:a1:ce:
9d:c2:ef:ad:c0:41:cb:b5:4b:68:fc:c1:6f:7c:00:10:8d:d1:
a1:6f:12:95:b5:4e:8e:ab:9b:40:b7:7c:35:0c:de:c4:48:ae:
d5:40:0a:c3:5f:a4:91:34:45:8d:3c:b9:bc:72:00:59:ed:33:
0a:14:59:99:c9:bf:26:95:a2:e6:f4:27:dc:70:d2:84:0f:b7:
d3:64:08:95:9e:0f:ab:cc:35:9b:63:23:07:5a:34:ef:00:dd:
f5:e7:67:e9:e1:0c:7d:72:24:ee:77:7c:9b:c5:64:06:c9:6d:
76:cd:fd:bd:2e:1d:a9:72:96:0f:2d:a9:5d:53:72:00:74:e8:
a0:b3:e4:d6:ba:6d:66:da:8b:0d:ed:43:74:26:21:4b:59:85:
c7:8f:c7:94:8d:b1:30:fa:fd:00:f4:43:bf:35:f6:82:e5:93:
fb:c4:4d:87:db:93:4e:b4:93:37:7c:db:9e:a7:8a:d6:fa:c8:
9c:7f:b9:84:af:7c:81:64:18:4b:07:8f:03:af:27:e0:21:ba:
1b:71:4e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:45:35 2026 by rpki-client