Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: aKCnJJAvwhWVPhJIXpEWwVryeUpAyijkOMIV0pfB+O0=
Subject key identifier: 04:64:57:2D:CC:CA:4D:F4:E3:3D:84:40:AC:91:CF:6F:CB:E3:6D:C8
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 01A0C58E4500DDC94715AECE1E8AE2AB97DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 0657
Signing time: Mon 21 Sep 2026 20:00:30 +0000
Manifest this update: Mon 21 Sep 2026 20:00:30 +0000
Manifest next update: Tue 22 Sep 2026 20:00:30 +0000
Files and hashes: 1: B70dl_4-b5eVhvQvZuPSWgvFpmU.roa (hash: PEnqRbyIXEVxwwcn6v1NmFYPEb0k725A2k724/MK0vI=)
2: Ka34B6rBgIn3gd6cXePqD35HsVc.roa (hash: /Qd0BtNspWGLKcZicxcHQ+co2KBYSO2WlY4JEiRzWAo=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: 68tJP9JcOJoNbLUFGNZtH1iOj5ZWJl23l2xQRhyEhGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:45:00:dd:c9:47:15:ae:ce:1e:8a:e2:ab:97:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Sep 21 20:00:30 2026 GMT
Not After : Sep 22 20:00:30 2026 GMT
Subject: CN=0464572dccca4df4e33d8440ac91cf6fcbe36dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:64:2a:f1:2e:c4:25:40:75:6d:0b:8f:d7:
f7:73:c3:f9:9c:c4:8e:f3:b3:6e:2e:ec:90:a3:48:
9a:11:79:b9:94:f3:02:8b:49:77:e9:8a:71:26:07:
e8:5e:80:15:23:2c:67:a5:64:76:f8:d4:27:a7:7f:
f4:f4:ef:46:bf:5f:a8:be:e5:a5:15:86:7f:d3:e9:
dc:52:a5:44:3e:16:df:f7:aa:ac:24:61:06:34:9f:
58:b1:51:83:08:89:15:56:aa:eb:94:f2:83:ed:ff:
a7:ac:48:81:01:b3:fd:ca:a3:dc:83:10:bd:04:98:
13:ae:75:5e:20:4e:72:2e:c7:09:53:dd:e8:2c:52:
ca:13:bb:98:96:92:04:cf:ab:72:16:ef:36:4f:b3:
f1:18:26:d3:5a:ce:58:b5:d5:93:da:68:2f:53:4e:
fc:96:7c:9c:e0:fb:60:1c:3f:af:69:a9:65:44:8b:
30:1f:9d:d5:58:0d:93:a7:cf:9b:60:8e:4f:3c:d1:
12:51:70:96:0c:85:de:f1:00:56:eb:b8:9e:8d:4b:
82:f6:77:ab:9f:d7:c3:4f:7d:63:03:dc:09:53:0c:
26:18:9a:3b:da:c9:bd:d0:d3:2e:db:a3:04:82:43:
c3:f4:46:31:9f:84:c4:d8:16:0c:b2:f6:28:33:47:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:64:57:2D:CC:CA:4D:F4:E3:3D:84:40:AC:91:CF:6F:CB:E3:6D:C8
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3f:7a:39:b8:af:a7:a9:88:c3:db:8d:1d:b2:de:74:bb:dc:
29:df:62:ad:5c:99:c3:90:53:c6:81:1f:9a:9c:03:a2:dd:46:
df:78:48:ce:ad:a5:f6:b1:9d:54:36:6e:03:5c:93:b6:61:fe:
15:48:5e:f9:dc:71:d3:91:40:68:77:9d:94:df:4f:52:9a:ed:
ca:86:4c:7a:ac:50:26:f7:3d:c2:e3:0f:5c:0d:f9:e7:8a:85:
57:a8:0b:f3:81:02:a1:ca:a0:f9:5b:cb:da:8d:72:f4:b6:ca:
98:ea:aa:ba:14:33:40:ad:9e:77:e0:50:31:e9:3c:10:89:09:
2a:6a:3e:fb:a0:e3:61:9d:5d:b4:75:d4:51:e3:c6:b8:57:e1:
58:54:04:23:9e:70:36:07:6a:a5:6c:c7:39:6f:3d:2c:4d:33:
17:b0:81:db:a2:56:64:fd:02:f5:64:b8:f5:6c:18:7b:f2:b2:
5b:bd:72:c2:05:a1:2e:43:65:5e:f7:bd:80:8e:f6:2c:18:6b:
dc:98:7e:cb:bd:93:8c:e4:53:c8:3c:c2:7b:48:d9:a8:8b:d8:
7e:c8:ef:2c:54:2a:a5:b1:b3:37:65:11:f7:1a:57:18:24:7e:
bf:cc:08:21:d6:7e:de:76:75:2f:98:2f:4a:9e:1b:df:51:c4:
5b:bd:c9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:19:30 2026 by rpki-client