Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: 92zhZ4C1LvQGWDFfbeGKM9gwmFbX5wgTiY1kXvBCrnw=
Subject key identifier: C0:1D:19:5F:8E:66:5A:46:6B:C9:7B:7F:69:FB:F7:F3:7B:51:F6:74
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 01A0E777A2DB2DA1EE4FFAC9D53DD9758099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 18BC
Signing time: Mon 28 Sep 2026 10:02:52 +0000
Manifest this update: Mon 28 Sep 2026 10:02:52 +0000
Manifest next update: Tue 29 Sep 2026 10:02:52 +0000
Files and hashes: 1: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: IfXNLI/G+c/kK4xdjkzB51SsAanJTVPFlbv/rpAce68=)
2: d4ZsetDOK1N8Oc6-p-HftKevwhU.roa (hash: 0L55RAM7hPd5rdjKfZF2PwQWl976vJkt47d6mV+kYso=)
3: jwNcE1s-makAFRG_Z0YpC8tgTEA.roa (hash: UWEBlXajJs0PyfeEOQvBkjJjVBwaTr2pthi+ykCI4sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:77:a2:db:2d:a1:ee:4f:fa:c9:d5:3d:d9:75:80:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Sep 28 10:02:52 2026 GMT
Not After : Sep 29 10:02:52 2026 GMT
Subject: CN=c01d195f8e665a466bc97b7f69fbf7f37b51f674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:59:7e:43:f7:0b:77:09:ff:d2:b5:9a:21:
29:33:f1:b7:b4:1a:9b:8a:94:96:24:6e:44:f2:1a:
b3:9c:14:be:65:49:6d:da:7e:fe:3a:56:c5:da:12:
13:32:5a:17:8f:c5:2c:c4:69:d4:e7:87:36:74:57:
a8:e4:b7:fa:1d:3e:bb:d5:15:37:f4:17:43:b2:67:
93:f1:43:d3:0d:fc:3d:d3:f0:08:0e:8f:ca:2f:89:
20:a5:da:de:a2:de:d8:01:75:26:57:c6:ad:b5:75:
bb:8b:e0:d8:27:17:ee:b3:55:f3:98:54:2d:08:ac:
3d:46:78:1f:6d:f9:ee:49:7d:9b:f5:be:a7:1b:1c:
2b:d5:f0:5a:cd:72:33:57:48:d9:08:f9:15:a5:b4:
15:48:f6:d8:55:fa:44:aa:6a:be:59:9a:be:d3:21:
d6:fb:fa:05:f8:1f:a7:68:a6:9b:0c:fd:9e:20:25:
c0:95:c1:f9:33:f8:7b:ed:5d:82:72:ce:8a:71:bc:
26:35:9f:4e:8d:6b:10:d7:e4:99:09:c1:d4:14:90:
f4:68:5b:f2:c1:9c:b1:7d:b9:15:df:72:cf:24:d6:
2a:1d:df:72:32:a4:98:e9:d0:79:a9:62:e6:a7:fa:
b3:b8:e6:54:5e:cd:6a:5c:e5:4c:1e:42:8b:0a:a5:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1D:19:5F:8E:66:5A:46:6B:C9:7B:7F:69:FB:F7:F3:7B:51:F6:74
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:21:bd:17:32:7c:17:01:1a:0f:1b:f3:c6:5c:d9:1f:85:7c:
6d:e8:b9:88:29:d6:6a:fd:cc:3c:d0:58:7d:81:9d:84:4d:12:
8b:50:ca:5b:6e:ba:b9:65:08:9c:b2:ae:3a:92:2d:ff:b1:16:
30:ad:72:1a:e2:b1:ef:c0:04:23:5c:3d:d8:85:0c:36:d4:da:
c0:50:d6:47:55:05:05:75:cf:d5:d8:04:56:c0:71:87:70:7a:
8b:d6:64:34:0f:43:5f:d1:c2:46:92:80:d3:7a:fd:6a:93:e7:
23:f6:fc:06:39:ea:60:3d:7b:9f:4f:af:46:70:b0:b6:63:e4:
7a:5e:13:92:d4:23:4e:cb:26:89:69:1a:8b:85:b5:4a:39:01:
09:68:48:e9:36:fc:98:2e:ee:d0:44:44:fe:dd:0a:84:5c:2d:
ba:6d:e9:c9:8b:76:ff:15:a0:9e:d3:79:b4:f0:28:9a:65:0c:
2f:75:28:0b:ad:8d:66:f3:32:b5:65:ad:4b:db:7f:54:ee:44:
8d:b6:92:e3:f2:77:03:e2:71:0b:3b:0c:87:93:b2:d3:24:48:
fd:b3:f1:b9:9d:8e:a4:7b:bb:bf:dd:53:60:27:b2:b8:71:a5:
42:05:a1:80:b9:06:0d:73:67:07:c8:3f:9c:11:25:3d:c4:84:
10:ba:4c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:25:06 2026 by rpki-client