Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/6NyFGY531Ua0Oz-sTj23jd8aFmI.mft
File: 6NyFGY531Ua0Oz-sTj23jd8aFmI.mft (raw, json)
Hash identifier: kT6yDMEx14lwYnorVaAadrQJ3A2gxM+f6KQ6mPAfHpc=
Subject key identifier: 3B:4F:8A:10:63:F7:E6:44:35:2A:E5:B3:40:D0:97:A0:0E:70:8F:E0
Authority key identifier: E8:DC:85:19:8E:77:D5:46:B4:3B:3F:AC:4E:3D:B7:8D:DF:1A:16:62
Certificate issuer: /CN=e8dc85198e77d546b43b3fac4e3db78ddf1a1662
Certificate serial: 01A0C40D917C4C5D4DC8661160A7AD3D5D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NyFGY531Ua0Oz-sTj23jd8aFmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/6NyFGY531Ua0Oz-sTj23jd8aFmI.mft
Manifest number: 43
Signing time: Mon 21 Sep 2026 13:00:18 +0000
Manifest this update: Mon 21 Sep 2026 13:00:18 +0000
Manifest next update: Tue 22 Sep 2026 13:00:18 +0000
Files and hashes: 1: 6NyFGY531Ua0Oz-sTj23jd8aFmI.crl (hash: NJSoCne7wodu014v14v90UDz8B0n/YPortt5IPSHVps=)
2: aseE5UIOOZOvLgAVf4y5hg945mg.asa (hash: tmvDLWOr5CBzaWnct6BrvCud5sVjpJmKB5Z2axelgEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/6NyFGY531Ua0Oz-sTj23jd8aFmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/6NyFGY531Ua0Oz-sTj23jd8aFmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NyFGY531Ua0Oz-sTj23jd8aFmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:91:7c:4c:5d:4d:c8:66:11:60:a7:ad:3d:5d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8dc85198e77d546b43b3fac4e3db78ddf1a1662
Validity
Not Before: Sep 21 13:00:18 2026 GMT
Not After : Sep 22 13:00:18 2026 GMT
Subject: CN=3b4f8a1063f7e644352ae5b340d097a00e708fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:37:1b:6a:61:3c:d8:aa:54:09:b1:cd:20:
b3:6a:62:23:af:4e:44:64:8a:c8:36:4d:b9:f3:12:
d3:7e:55:46:77:0b:bb:0a:72:a3:6a:14:cf:5d:bb:
a6:c1:ff:b5:e4:c2:d4:1d:72:b7:8e:a9:bc:69:1c:
d7:77:ff:16:54:ad:d3:4d:43:c7:bc:82:98:61:37:
a4:d0:cc:30:3a:e5:d6:31:90:58:7f:9c:f7:e4:24:
40:45:1e:6e:40:ee:ed:23:a3:f8:f0:ff:64:c5:15:
0b:60:04:dc:d4:9e:ed:df:22:6e:27:27:a4:f6:cc:
4f:6d:68:4c:37:79:3c:59:b2:dc:99:95:de:8e:59:
2f:f4:12:f9:b1:f1:b7:36:4c:d7:33:91:f6:2e:72:
9c:34:e7:33:86:41:a5:36:e9:34:5d:b7:f3:2b:97:
39:81:41:7e:7b:7c:c7:1b:71:ac:8b:37:51:2a:31:
b8:f4:ef:43:11:3e:76:9e:e3:99:24:4e:61:fe:63:
15:aa:b7:7f:66:12:df:88:f7:fe:8b:de:7e:c5:f0:
4b:06:ff:0e:14:6d:78:69:a5:3e:03:16:c2:40:76:
ad:46:55:ee:03:86:92:fc:7c:d0:7a:7b:11:56:5e:
4d:15:54:32:09:60:0e:30:29:f4:d3:08:8b:0c:08:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4F:8A:10:63:F7:E6:44:35:2A:E5:B3:40:D0:97:A0:0E:70:8F:E0
X509v3 Authority Key Identifier:
keyid:E8:DC:85:19:8E:77:D5:46:B4:3B:3F:AC:4E:3D:B7:8D:DF:1A:16:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NyFGY531Ua0Oz-sTj23jd8aFmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/6NyFGY531Ua0Oz-sTj23jd8aFmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ace190-5ffd-4bb5-ba5e-66ee4578f934/1/6NyFGY531Ua0Oz-sTj23jd8aFmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:12:c9:ef:a1:7c:1f:fd:67:ae:9e:a4:6c:5c:b9:fb:75:65:
f5:68:60:04:bf:ee:cf:f0:f6:73:84:8a:56:59:a3:4a:c3:a2:
ae:d9:95:1f:69:d9:6b:e1:43:5c:2d:eb:e2:b8:ce:1d:2f:1a:
20:e3:f7:fb:bc:6e:86:5a:41:51:09:42:da:00:cb:f0:3b:06:
53:19:a7:85:05:12:1c:56:a5:76:50:56:42:ab:0a:b8:90:1d:
ae:84:8e:44:ce:42:42:13:4c:d6:01:5c:5d:8e:05:a7:90:4c:
1a:71:d7:08:e3:ca:45:e4:c4:56:1e:2d:ff:a7:68:1c:4c:15:
ae:39:04:0e:e1:07:e4:e8:8c:d7:e9:fa:e6:ca:d4:bb:78:dd:
e0:f7:32:02:29:cd:91:b7:8f:4f:25:21:c6:f1:09:8f:38:76:
d4:96:17:8e:d0:be:1d:0e:43:8c:7a:6c:bc:69:2a:64:24:bb:
4f:80:d1:91:4f:8f:5e:8d:1c:88:f2:f1:84:f8:7d:f8:4c:e5:
ec:7e:4c:bc:e5:8f:15:0d:f4:f0:4e:18:d6:e1:a7:9d:9f:e1:
27:bb:2c:27:92:48:87:1b:b6:85:67:a1:ee:47:2e:63:ec:a8:
0b:08:c8:7b:de:40:87:6f:66:e1:a0:ce:4f:14:7e:d3:e8:b5:
8b:85:67:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:00 2026 by rpki-client