Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.mft
File: j6VObsfsEXOqJ66PZpoFuPEgti8.mft (raw, json)
Hash identifier: 64K0pgxRi6k8QetF6RmySOIfvXVjFxBeen/aEzQQFuE=
Subject key identifier: 16:8D:EF:72:5F:9F:53:17:00:CE:C0:6B:06:EC:12:DF:E3:DD:4A:D1
Authority key identifier: 8F:A5:4E:6E:C7:EC:11:73:AA:27:AE:8F:66:9A:05:B8:F1:20:B6:2F
Certificate issuer: /CN=8fa54e6ec7ec1173aa27ae8f669a05b8f120b62f
Certificate serial: 01A0E92D76C7DC31D8787BB71E1F68C09DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6VObsfsEXOqJ66PZpoFuPEgti8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:01:05 +0000
Manifest this update: Mon 28 Sep 2026 18:01:05 +0000
Manifest next update: Tue 29 Sep 2026 18:01:05 +0000
Files and hashes: 1: HpSNuerWy6MFY6ulRBojWGdkNVY.roa (hash: PEL0oIsbOyso4/AT0pd3UuuxgjMRhI8GJOSmJ1Ns31Y=)
2: j6VObsfsEXOqJ66PZpoFuPEgti8.crl (hash: 0QTXBFLVw3umei8z3vXVY0LyWRI7uiaQlh8tGXwZvL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6VObsfsEXOqJ66PZpoFuPEgti8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:76:c7:dc:31:d8:78:7b:b7:1e:1f:68:c0:9d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa54e6ec7ec1173aa27ae8f669a05b8f120b62f
Validity
Not Before: Sep 28 18:01:05 2026 GMT
Not After : Sep 29 18:01:05 2026 GMT
Subject: CN=168def725f9f531700cec06b06ec12dfe3dd4ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:7f:9f:4e:a3:c9:e9:f0:9e:5e:82:f0:80:
94:6e:cb:af:fb:26:43:b9:85:f8:0a:a6:ee:25:91:
8e:e7:fe:b2:63:3c:55:b3:71:52:a5:41:ab:00:eb:
4b:e1:d4:3e:3f:c8:9c:0e:de:3b:1c:93:4c:e0:6f:
75:7d:cf:16:74:5d:26:76:02:ab:f6:29:fa:a1:80:
a1:4e:14:1d:9b:e1:19:a3:ac:3a:91:8d:51:77:cf:
94:49:6d:71:09:fb:80:dc:be:c5:cf:01:3c:89:02:
7d:46:29:38:e7:b3:7d:f0:60:21:18:35:ed:31:8a:
1d:ef:4f:9b:dc:c7:8a:68:f5:35:17:c6:a6:e4:e3:
7a:e8:cf:a7:f9:8d:f0:85:5b:06:65:69:86:a3:89:
a8:34:f4:10:d0:57:f0:fe:1f:6e:6a:35:98:0e:9a:
65:4f:34:ee:89:f1:ac:0a:76:94:bf:2e:40:e7:86:
2f:84:00:b8:44:41:e8:84:3e:bc:ab:26:37:1e:5b:
9e:5b:b4:71:f6:25:3e:45:99:ba:a3:06:9e:0d:e7:
c1:92:0a:4a:b2:49:e9:af:0c:16:9e:cb:fb:bf:ad:
ab:c5:67:93:c4:a6:26:fb:65:9d:4e:cf:17:34:2e:
e0:8b:ae:88:07:a0:bd:ed:09:6f:fd:f7:7d:9a:f5:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8D:EF:72:5F:9F:53:17:00:CE:C0:6B:06:EC:12:DF:E3:DD:4A:D1
X509v3 Authority Key Identifier:
keyid:8F:A5:4E:6E:C7:EC:11:73:AA:27:AE:8F:66:9A:05:B8:F1:20:B6:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6VObsfsEXOqJ66PZpoFuPEgti8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1a:bd:a7:ee:0d:22:1d:74:67:79:b7:8e:51:2e:6a:1d:63:
fa:a2:2b:20:9f:ad:31:7c:42:a7:6f:c4:34:2c:19:d2:0d:f3:
ab:6b:44:d9:78:b5:42:37:55:6e:b2:44:62:76:bc:93:ea:bb:
41:a3:7a:0d:9b:70:2f:ea:23:5d:ba:6d:67:2c:85:b4:cc:8b:
85:cd:42:cc:2b:68:d5:60:98:a5:7b:72:46:97:24:aa:d5:64:
74:ac:ec:f5:af:1d:06:73:00:2a:cc:b8:0a:1f:bd:01:19:30:
13:d1:07:65:53:c6:ac:8d:b2:eb:70:06:88:f7:89:17:c1:0a:
97:ae:a8:d9:2d:20:14:37:cd:f8:d5:4e:e6:8d:84:2c:65:fb:
b4:73:d8:8a:c3:95:98:81:c1:dd:5d:e7:58:15:36:f8:5c:43:
f7:75:ac:48:ed:0b:43:b8:a5:3d:9f:97:c4:6f:54:c8:0f:6e:
a3:00:4d:42:fd:ac:c9:6c:00:aa:b5:57:75:2f:67:13:36:64:
39:dd:48:78:c2:7b:07:d3:b6:6a:be:3f:30:4e:9f:5a:fa:5c:
c2:38:b5:33:eb:32:bc:63:03:97:3c:9e:17:3f:b3:c9:7a:ea:
61:1b:bc:dc:00:e2:0c:da:a6:e7:bb:0a:7d:cb:8a:b2:6b:5c:
5b:e7:54:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:45:05 2026 by rpki-client