Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File: s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier: F1pUbrHWD3G2I2mj9StYlxIJhX+TToUV3+4gyOELnWo=
Subject key identifier: 57:C6:07:71:9C:CF:D0:A1:76:74:1F:76:66:F5:35:94:4D:4A:63:8D
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial: 01A0D2DEA0DBCA9771E785F2B3D09C97D5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number: 17D9
Signing time: Thu 24 Sep 2026 10:03:20 +0000
Manifest this update: Thu 24 Sep 2026 10:03:20 +0000
Manifest next update: Fri 25 Sep 2026 10:03:20 +0000
Files and hashes: 1: IdBqw0A4TK6uyYCMeFPtnqsmeRc.roa (hash: 5nFwsjED/xvOkZjCNJO1OpoEyT7doRuSAQWm9AMMmaE=)
2: hxTWlwt6XxySSXQcOC1UwXbMwbk.roa (hash: aX7p2s147zlrrkvvAok2NDrpVfnLraj+bgXnwC8UznU=)
3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: Zgo8s6icM5UGzyNWrBm+yGHVgY9IF6nVYhww+zQpj0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:a0:db:ca:97:71:e7:85:f2:b3:d0:9c:97:d5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Validity
Not Before: Sep 24 10:03:20 2026 GMT
Not After : Sep 25 10:03:20 2026 GMT
Subject: CN=57c607719ccfd0a176741f7666f535944d4a638d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:1c:0a:f4:92:2b:1c:59:aa:58:41:88:c9:
1b:cf:30:de:34:5c:5b:1a:18:f2:f7:8a:63:56:11:
e3:c7:dd:aa:06:8f:06:26:c7:8c:91:da:5c:e1:1d:
b6:19:6d:04:9e:40:de:ff:00:e5:0b:86:41:2a:8b:
9c:23:37:7a:84:ac:79:0f:8f:e2:1c:96:9c:8d:4e:
b5:7e:05:c5:7f:54:2f:08:20:0e:9f:07:78:49:09:
7b:a8:47:5b:43:07:7a:01:45:63:93:a5:80:9d:c3:
03:89:83:41:0e:e5:13:8c:12:4b:b3:cb:aa:84:a0:
d6:e6:35:07:00:45:bb:74:37:c5:9c:bf:fc:3a:0e:
3a:88:45:fc:74:65:ea:ee:d0:dd:0e:4a:cc:04:32:
46:31:92:a6:4c:f2:64:b7:41:a4:be:94:31:3e:35:
a6:e0:20:76:b9:2c:8f:82:1a:f2:f5:8b:af:d8:cd:
bd:aa:c0:a8:b9:f0:36:dd:82:35:5d:c3:db:b5:9a:
f4:0e:15:56:24:75:5f:c2:28:9e:dd:29:eb:79:a2:
b5:11:c0:fe:6b:eb:dc:be:c3:1a:15:d0:84:25:04:
e3:af:6c:41:0f:7f:db:03:74:80:a1:d3:d5:b0:00:
55:e2:fd:57:41:10:ff:07:96:b8:7c:bf:96:15:a4:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C6:07:71:9C:CF:D0:A1:76:74:1F:76:66:F5:35:94:4D:4A:63:8D
X509v3 Authority Key Identifier:
keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:08:8d:8e:cb:b9:00:40:fd:0c:87:31:5e:48:fa:36:29:a6:
53:ed:3c:a8:57:78:9d:8e:ad:c4:d8:07:30:8b:74:40:9e:d1:
db:63:a9:0a:f5:27:63:f3:ec:1b:f4:31:b8:18:64:4e:cf:b5:
c1:37:e9:08:97:9d:62:21:18:9c:62:fe:42:c7:cd:1e:c1:ce:
1c:c3:26:fb:d6:f1:e2:0c:8e:a1:42:b3:82:93:92:6b:ac:27:
8f:83:8b:35:c9:33:5c:e6:6a:18:d3:c5:ff:9a:04:24:f2:82:
02:6b:d8:8e:8f:02:a2:d4:19:4a:76:5b:c5:9d:e2:30:d4:98:
8a:a2:11:51:97:03:fc:63:1b:cb:e5:44:7f:08:57:1a:eb:f0:
2b:de:da:05:73:42:fd:de:71:b2:6e:73:84:ce:ac:d3:10:3d:
a9:b9:b6:31:01:ef:43:70:97:d6:f0:22:eb:b3:1d:19:e0:1c:
a3:21:0e:0e:07:4a:ae:01:72:59:2a:d5:da:31:ea:eb:9b:8c:
42:7c:a4:0e:5a:5f:dc:b2:63:6a:46:81:44:cd:17:ab:24:38:
b2:e6:6d:9f:3c:bb:90:87:03:85:57:6c:d3:72:aa:7f:5f:5d:
87:20:46:36:1e:02:68:2d:29:42:91:d2:5a:c0:77:af:a9:df:
a5:3e:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:52:21 2026 by rpki-client