Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
File: 6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json)
Hash identifier: maZB6LktGAednbx9AKvvXBRXHhguT+juM7cyyccH1dc=
Subject key identifier: 2E:E9:B6:60:4B:97:D5:ED:78:17:1E:BB:61:72:A6:32:0E:24:E9:99
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Certificate issuer: /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial: 01A0CD10A64C1F7D944EF10B6F7B343651C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
Manifest number: 1208
Signing time: Wed 23 Sep 2026 07:00:15 +0000
Manifest this update: Wed 23 Sep 2026 07:00:15 +0000
Manifest next update: Thu 24 Sep 2026 07:00:15 +0000
Files and hashes: 1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: XWFCu10ByTvtF5XVoXJ5tFf+XOBU6ZS5mWw7plV0xLQ=)
2: vGQ0FlfBg9HurxXzBHSCF8IWFRQ.roa (hash: vG2KyLa3eKD4ni6LSYbmZcxZgH0oTjxPgZTSDvuGGJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:a6:4c:1f:7d:94:4e:f1:0b:6f:7b:34:36:51:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Validity
Not Before: Sep 23 07:00:15 2026 GMT
Not After : Sep 24 07:00:15 2026 GMT
Subject: CN=2ee9b6604b97d5ed78171ebb6172a6320e24e999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:1a:f7:b4:bf:4e:41:6a:e0:fe:d6:9b:eb:
fd:06:e4:c5:04:22:ba:4e:b6:e1:f8:4e:84:78:95:
8c:e3:cc:80:9a:cb:eb:f5:02:10:61:41:5b:a7:65:
8a:8a:0a:47:ba:f0:d0:08:be:ac:a9:8e:d4:5c:89:
59:24:44:18:2a:3a:1a:92:13:77:fb:1c:3c:d7:41:
47:f0:4e:b5:76:53:74:85:54:b5:b1:c1:a7:11:7f:
8d:cb:c9:fc:8a:91:fd:b9:13:ab:d6:35:b7:15:66:
be:a8:82:ae:0a:09:fb:a5:74:1f:8d:12:f4:48:93:
34:85:81:b7:38:72:ca:a2:55:d9:3b:5e:1d:7f:6b:
30:76:0e:ac:58:68:44:72:0c:eb:2c:6c:b4:96:4b:
0c:1a:f5:e1:6f:5b:15:45:17:dd:7a:04:5f:60:40:
77:35:5b:be:48:4d:c7:7b:7e:d9:c7:41:89:df:c5:
2b:3f:7c:df:5f:b0:8b:08:09:cf:9b:7b:41:48:77:
b7:d4:68:a5:9f:c4:b2:c6:bd:d1:18:be:c6:bc:6d:
83:fa:fe:70:65:fa:8c:aa:b2:a6:83:f9:fb:c4:0a:
0a:3b:32:08:f0:05:60:92:7e:9d:97:7c:c8:5e:c1:
f4:14:04:49:13:5b:94:5c:80:0e:73:16:9e:90:1d:
ab:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:B6:60:4B:97:D5:ED:78:17:1E:BB:61:72:A6:32:0E:24:E9:99
X509v3 Authority Key Identifier:
keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e2:48:77:59:54:eb:29:4e:a8:83:e9:36:0d:b6:1a:08:b1:
64:01:35:3d:04:b0:8d:0b:2e:ef:09:46:4b:55:cb:c9:b1:73:
54:b8:41:08:ac:5d:07:b4:e4:bb:34:04:0b:19:ea:3b:3a:41:
ae:d6:b1:4a:b3:79:10:93:b6:4b:82:b6:6a:8d:bf:9e:87:26:
f6:d7:53:39:d3:95:db:43:b1:86:0f:8f:25:ac:fd:37:8d:41:
6d:e8:7e:ad:20:35:6b:a2:a9:f7:61:e4:06:46:34:0e:b0:fc:
82:34:43:62:e1:37:70:31:4e:b9:cc:f4:00:ee:64:d0:b4:26:
cc:77:8d:7c:b7:f4:35:4c:1a:4d:af:63:8e:02:79:aa:a2:8f:
fb:5b:0a:38:21:33:49:59:3a:46:69:0b:e3:79:d4:9a:8e:9e:
0e:82:ab:08:56:16:41:d3:0c:a6:82:a8:36:e2:3f:9f:24:21:
db:0c:42:52:4e:7c:f0:31:d4:d0:20:4f:ae:ad:ea:59:db:de:
30:08:bf:36:e6:79:9d:e6:90:48:a1:63:57:15:52:72:49:fe:
fb:f4:a2:0d:b0:74:a5:e0:2f:d2:96:01:37:8d:b2:81:5d:18:
34:95:56:98:c9:19:30:63:96:aa:2d:4b:7d:6d:a7:9c:3a:e5:
cd:74:69:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:41:30 2026 by rpki-client