Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier: mf3jbhOaCKeEcJ4Mv8C3eg+6nyEWnkLHbtjQBgySh80=
Subject key identifier: 2B:B7:D4:6F:7C:EE:7F:C9:7C:8B:A9:85:31:5A:B5:C4:E6:F0:82:B0
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 01A0D38366E4040DE74DDB0F449F441B4738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number: 0FCD
Signing time: Thu 24 Sep 2026 13:03:19 +0000
Manifest this update: Thu 24 Sep 2026 13:03:19 +0000
Manifest next update: Fri 25 Sep 2026 13:03:19 +0000
Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: oubZwB2Pbr3p9EwLoHwFh+o3OQhaO/GRBpfeBb5etsY=)
2: m26SchsQ_1UhkfbeCxw77FeJXCA.roa (hash: mdGSAQzmIJX1JB/CEMcZP3KjJ01KoAYsX4zgkL5y148=)
3: q_u69U7c2vxaq4Nl1v5Yc1MyuWg.roa (hash: 5dnA+LcITpNkdUu4xKxisyKSU227fPcdS2OGxJGeL28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:66:e4:04:0d:e7:4d:db:0f:44:9f:44:1b:47:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: Sep 24 13:03:19 2026 GMT
Not After : Sep 25 13:03:19 2026 GMT
Subject: CN=2bb7d46f7cee7fc97c8ba985315ab5c4e6f082b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:5a:a6:7c:14:a0:d6:2f:a0:fb:a7:ac:3d:
07:c3:ad:34:c0:f6:99:9d:0c:cb:1f:e6:9e:22:bd:
a4:5d:d4:d5:74:46:64:61:c5:40:cf:d8:d5:71:04:
7b:bc:21:d8:ef:a7:c8:31:31:2d:ef:f8:c9:12:9f:
44:4c:f8:d8:32:23:99:35:ae:38:73:d3:8a:d5:c3:
35:0c:69:f6:99:4d:7f:74:e8:39:fd:6a:51:ef:23:
6a:46:c0:6d:59:61:0e:39:e1:78:d7:1a:3e:68:5c:
44:47:5f:91:ce:05:be:d5:de:4e:df:6e:1a:21:46:
c2:19:bc:85:c1:3a:7e:27:ce:64:0e:68:dd:f8:1e:
b7:53:eb:ed:32:e6:e6:d5:33:df:8d:05:30:62:03:
9a:cf:5b:e9:14:e0:ef:aa:d9:26:6f:66:4f:75:06:
c7:97:61:de:b4:0f:71:a8:26:1d:ec:7f:23:10:cf:
34:c6:4f:36:68:dc:11:9b:76:1a:37:2e:e1:d1:f2:
74:2a:34:31:8c:fc:93:44:48:72:08:2c:5a:b1:66:
fe:85:d3:2d:a6:c6:f3:7e:93:ef:6c:8b:3f:76:78:
58:81:70:f3:91:45:b7:ed:aa:88:e7:60:80:84:b9:
f3:43:35:f8:95:92:6a:5d:96:0b:c3:ae:02:c9:36:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B7:D4:6F:7C:EE:7F:C9:7C:8B:A9:85:31:5A:B5:C4:E6:F0:82:B0
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:38:10:4b:60:47:7b:63:ee:69:04:1b:a3:b8:ea:ab:6a:f5:
5e:c6:64:17:2a:12:83:72:36:b7:4a:dd:28:1d:ac:b9:b0:00:
d3:c6:b8:e5:76:fa:a4:3c:b1:83:5e:5d:a2:38:8d:7d:19:bd:
01:57:18:78:9b:54:d6:74:9b:68:02:64:20:de:ad:46:e2:ff:
6e:65:2b:d1:3c:43:0e:57:57:22:8b:c5:3c:cf:de:93:54:ff:
ad:12:d4:76:69:1a:b6:ae:91:a2:29:4a:49:15:3a:de:f5:c9:
11:87:d9:4e:fe:47:91:23:c8:37:59:37:02:35:0d:1f:db:74:
61:fa:5b:c0:32:03:01:8b:b1:9f:d2:91:d9:14:fa:0c:42:aa:
ff:9f:cd:f9:6a:0a:cb:1c:7d:11:01:f9:28:91:1f:90:fe:48:
d0:89:ad:18:90:e9:e2:ee:b3:68:de:93:f0:49:3f:3a:52:33:
e5:5c:c0:38:58:a0:eb:8b:de:2c:28:23:d3:1c:1d:8a:13:14:
de:c4:b7:70:62:e1:b4:19:24:39:17:e0:12:4b:e9:6e:d1:d8:
e2:b1:3b:bd:ab:6a:f6:39:25:12:eb:8b:d1:c9:63:e5:8d:94:
50:05:7d:74:b7:1e:78:f9:13:d7:d8:33:21:91:ac:f4:97:2f:
72:6e:95:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:31:58 2026 by rpki-client