Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier: mjWh6qkKCx0ZxR/c+a66mjOEgA1BEbIxvVKM1M//K1Q=
Subject key identifier: 75:60:F4:64:69:6E:C0:63:54:3E:D6:CD:03:5F:63:42:46:2E:B8:99
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial: 01A0C4E9E2A5230D801F4F56EEBC93F8E323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 17:00:57 +0000
Manifest this update: Mon 21 Sep 2026 17:00:57 +0000
Manifest next update: Tue 22 Sep 2026 17:00:57 +0000
Files and hashes: 1: Nq9p6JOG9d1MPZ5qd-sAijdFSJ0.roa (hash: yO2lwMxsUQ5IOFH/LC6sgXWOkjPeUa5h0hHMk+SpB7A=)
2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: E+JWJQDSUDDuc/7aPWTN548rlt6bWljDyeOCgBOVbyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:e2:a5:23:0d:80:1f:4f:56:ee:bc:93:f8:e3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Validity
Not Before: Sep 21 17:00:57 2026 GMT
Not After : Sep 22 17:00:57 2026 GMT
Subject: CN=7560f464696ec063543ed6cd035f6342462eb899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:39:68:50:62:4e:44:39:e8:60:77:3f:c1:
d5:6b:24:8d:5f:e6:eb:59:df:9f:7b:9b:34:c5:65:
79:1f:78:d2:9e:b3:52:2b:55:0f:b8:6c:44:b6:27:
5e:8e:06:26:9f:76:49:2f:54:ea:b8:56:03:01:f7:
31:0e:24:3b:73:fb:26:f2:8d:97:56:fd:04:52:b9:
fd:da:5c:cd:4a:b7:7f:6e:20:26:57:44:b5:19:5f:
47:e9:df:fd:8b:c7:54:18:8d:77:7b:af:fc:c1:3f:
de:14:a9:56:59:33:b7:5b:cc:6a:97:72:b2:f1:8e:
56:65:7d:9a:2d:4b:99:2a:4e:ad:98:7b:58:29:b9:
3f:c5:f7:ed:e1:c7:a3:4b:b9:ec:f9:00:85:09:4a:
65:3f:2d:eb:68:41:29:47:ec:ff:99:2d:0f:84:d6:
a9:9f:96:36:54:27:de:ce:85:53:59:8b:a8:57:4d:
b9:4d:f4:57:31:5a:94:ac:bf:a1:f8:1b:e0:a4:ca:
a4:75:0a:b0:bb:67:cb:7a:10:d9:51:73:f6:3e:22:
c3:95:9c:00:e2:df:52:2f:b5:0f:0c:90:54:47:ab:
30:af:36:b1:3c:fd:ce:6d:c7:9e:e3:e6:90:b6:92:
77:0d:60:ff:67:a1:1d:23:a2:0e:99:ce:d8:a3:17:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:60:F4:64:69:6E:C0:63:54:3E:D6:CD:03:5F:63:42:46:2E:B8:99
X509v3 Authority Key Identifier:
keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0f:13:76:e7:34:c7:3f:75:02:54:d9:70:90:ca:32:9c:00:
21:09:a5:de:85:3a:67:1e:bd:eb:1e:bd:c8:5a:6f:38:86:75:
41:6e:21:97:0a:0d:bc:08:11:5e:fd:16:e5:88:e3:78:7f:90:
fd:c0:f7:87:7b:92:55:c9:ba:4b:61:9e:af:0b:7d:87:48:65:
cc:7b:f3:27:6e:38:80:c0:7f:2e:9a:30:b0:45:cc:a2:62:54:
55:fc:10:7a:dc:42:a7:96:90:4f:9b:13:72:f5:51:84:05:50:
8b:cd:9a:4f:a1:7f:f8:6e:f9:03:b1:f4:8a:6d:4f:56:50:56:
75:6f:9a:b4:06:06:20:a3:fc:d2:5c:e7:2b:6d:54:2e:56:a1:
06:4c:4c:0d:03:70:10:7c:c9:92:8f:da:b1:e4:af:f2:49:8c:
c8:e3:a3:60:9a:f5:62:e4:a0:ce:ef:c0:51:2c:3d:cf:5f:bb:
97:00:b3:9b:cd:73:24:14:1f:5a:9e:7f:ba:11:ef:60:1a:84:
4f:73:d4:6a:b3:f6:ed:d9:b0:4a:c4:81:5f:b7:d3:e8:d0:30:
71:29:bb:08:b7:1c:50:60:6d:f7:73:d3:eb:63:65:5e:c6:d9:
02:6a:91:33:75:46:e7:fe:4f:24:ec:e5:45:bf:b1:03:8c:f9:
21:f6:df:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:12:21 2026 by rpki-client