Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: Aufi0HIrPVRmuEKTfdLMvDJz1P+S9kiiT8rXDx2fgME=
Subject key identifier: A4:E6:EA:10:60:BD:48:4D:BA:A6:66:31:D1:E2:2D:59:4E:A7:3B:47
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 01A134B4FDDECCAF319D8FD38F40318477F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 1AA6
Signing time: Tue 13 Oct 2026 10:00:38 +0000
Manifest this update: Tue 13 Oct 2026 10:00:38 +0000
Manifest next update: Wed 14 Oct 2026 10:00:38 +0000
Files and hashes: 1: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (hash: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A=)
2: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (hash: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI=)
3: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: bP5TRKptNORDWYt2T7k7YiLfmphb8awhIwaB1mM5vBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:b4:fd:de:cc:af:31:9d:8f:d3:8f:40:31:84:77:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Oct 13 10:00:38 2026 GMT
Not After : Oct 14 10:00:38 2026 GMT
Subject: CN=a4e6ea1060bd484dbaa66631d1e22d594ea73b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:80:93:9e:ef:a7:63:24:bf:a9:3e:87:d9:
ed:75:61:cb:c0:52:c3:48:b6:37:1f:01:31:3f:b5:
3e:a2:be:12:c5:24:95:9e:37:a8:8e:0b:c7:fb:f6:
32:5d:0d:bb:8d:a4:4b:7d:0f:1b:5d:96:eb:e8:12:
6c:d1:a9:ba:61:09:67:c8:5b:73:40:94:f2:d3:bc:
c3:f7:b0:4c:7c:f0:31:65:2b:f4:14:fa:3d:bb:bd:
fe:7b:59:67:90:1e:94:36:e2:28:b2:d0:06:ac:9f:
cf:d1:1b:94:d7:99:ec:b9:69:22:79:5b:0d:92:58:
61:e3:5b:69:ed:a7:0e:c7:c3:63:a2:8a:17:83:6e:
dd:04:b9:ca:87:c6:66:72:4f:6e:6e:e6:20:a5:21:
8d:7f:47:9e:e6:d3:3e:4b:1f:a4:16:17:33:c2:32:
d5:3a:8e:eb:53:f2:c8:b5:d1:92:ff:1b:ff:40:dd:
34:c5:ea:a5:95:79:ad:c9:a3:67:46:61:f8:35:c8:
61:cd:df:20:66:4a:43:63:89:50:8a:10:9b:43:66:
d2:4f:2a:8c:07:da:23:b2:66:0c:23:b8:a4:7d:8b:
cc:23:10:ff:d6:48:d4:9e:23:7e:35:e8:a1:65:78:
ef:1a:c7:18:92:af:27:90:c3:a7:78:e2:48:cb:ae:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E6:EA:10:60:BD:48:4D:BA:A6:66:31:D1:E2:2D:59:4E:A7:3B:47
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f4:01:3e:90:db:19:33:cb:1e:cd:d3:50:93:0b:4f:4e:1c:
b1:be:95:66:63:f5:5c:23:c0:00:f1:11:ef:a1:be:a4:4a:ed:
40:53:73:c4:2c:14:5b:7f:60:c1:01:56:6a:ab:a4:92:6d:f6:
5c:fa:7f:e3:1f:c9:70:3d:fa:9c:1b:ac:8a:0c:8d:5e:99:18:
78:79:1e:04:33:93:1f:2d:25:a1:0d:e2:ae:3f:16:f5:36:64:
70:61:23:04:f2:2b:53:f0:46:09:92:b3:38:32:be:3a:5e:81:
77:95:01:26:0e:57:10:bc:c4:89:9d:f8:5b:d3:61:47:04:93:
c5:bc:01:a8:d9:97:c1:2a:c9:55:bb:ee:0c:48:e2:28:68:c0:
ee:86:a4:83:e1:dd:d3:2e:65:bb:cc:20:d6:04:20:60:aa:1d:
df:d2:4e:6b:e5:84:ad:23:3b:c5:3b:3a:91:86:c6:d5:7d:ce:
28:31:2d:44:91:42:68:d3:19:73:2c:fc:d1:89:d0:02:74:90:
7b:bd:65:98:f9:f9:71:58:04:b5:5e:22:58:38:a2:c9:69:0e:
fa:b4:68:30:e7:70:28:61:df:72:d8:ea:ba:8b:aa:10:52:f6:
ed:bb:7b:1d:15:3f:23:a3:6c:89:06:e3:00:f9:33:8b:16:ef:
ab:9a:5b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:44:08 2026 by rpki-client