Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.mft
File: b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.mft (raw, json)
Hash identifier: YI8h4WJMnLjxttE0laW7mmwmgU9qKU23lws5W35iqto=
Subject key identifier: BD:F7:48:59:98:59:E0:EC:71:6E:F2:E2:6F:AE:5B:D1:12:55:A7:7C
Authority key identifier: 6F:A7:2E:1F:D2:21:C6:77:35:FA:8D:11:F6:8F:2F:52:80:D7:C4:44
Certificate issuer: /CN=6fa72e1fd221c67735fa8d11f68f2f5280d7c444
Certificate serial: 01A0DD989307BA4CB9961D788254A2465379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:02:38 +0000
Manifest this update: Sat 26 Sep 2026 12:02:38 +0000
Manifest next update: Sun 27 Sep 2026 12:02:38 +0000
Files and hashes: 1: AOJWWRDy0nNR8JFkrrmMBV4f1SQ.roa (hash: lkx/0ZAIN+Tof0IXtGM9G76bJd4qUglgdd0G19sDUUw=)
2: b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.crl (hash: w4HjT0UK65VpZPFbBK4WYDtpmFschr0s4lREZazuAwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:93:07:ba:4c:b9:96:1d:78:82:54:a2:46:53:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa72e1fd221c67735fa8d11f68f2f5280d7c444
Validity
Not Before: Sep 26 12:02:38 2026 GMT
Not After : Sep 27 12:02:38 2026 GMT
Subject: CN=bdf748599859e0ec716ef2e26fae5bd11255a77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:51:36:59:99:6b:c4:58:8f:c0:bc:47:1c:
58:ab:dd:8c:f1:b9:07:5f:92:b0:25:6e:02:20:c0:
21:f7:a4:73:0d:19:c9:e6:23:3c:56:92:68:97:45:
f8:51:1b:76:2f:5c:e3:77:34:95:f0:e8:d0:98:57:
7a:1d:77:16:76:03:e9:62:25:91:e9:f2:87:fc:3e:
a5:d4:98:8b:5e:bf:8a:c8:ff:c5:68:ae:37:26:e0:
85:7c:1c:43:1c:ca:ef:fb:e5:33:81:24:62:e5:38:
4d:0c:33:9f:27:f4:49:e4:e0:95:93:84:e0:2a:63:
b7:ea:6b:5b:92:ae:55:e3:18:09:36:a4:47:ed:e7:
57:05:82:d1:cd:47:d8:12:63:b1:2c:fe:2d:d8:f9:
f6:0e:0b:ce:b9:69:40:3d:85:5b:bc:ec:72:e2:38:
c8:a4:3e:58:92:fd:ab:c3:1b:26:2e:29:24:25:db:
cf:c0:b1:13:f3:49:c5:cc:e0:b6:4c:38:c0:77:e5:
87:c9:78:be:6e:b8:fd:3d:8f:5a:bb:3a:5e:61:c2:
f7:d0:90:26:62:21:3d:75:80:14:51:13:00:9b:a5:
16:ed:76:44:c4:85:0c:25:cd:c2:c2:ff:bd:43:cf:
e4:9e:f2:e0:07:21:a4:c4:84:47:58:a4:3f:2f:10:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F7:48:59:98:59:E0:EC:71:6E:F2:E2:6F:AE:5B:D1:12:55:A7:7C
X509v3 Authority Key Identifier:
keyid:6F:A7:2E:1F:D2:21:C6:77:35:FA:8D:11:F6:8F:2F:52:80:D7:C4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ad:15:43:27:be:00:49:cd:e0:01:b1:34:00:ed:d2:2d:35:
f2:18:fd:70:ec:08:b7:16:7f:8a:53:6a:db:e7:8c:06:e3:f0:
20:97:06:c4:82:49:8f:11:06:d3:37:d3:51:b3:b6:24:32:30:
59:09:10:ef:19:09:96:d0:80:2f:62:0c:d3:a9:5b:6b:4f:17:
de:98:5f:3f:b3:b2:40:f2:8f:cc:76:20:04:6c:51:86:df:37:
95:0c:02:71:71:6d:7a:55:62:12:ad:1e:ad:c9:2a:42:ca:1a:
97:90:41:a8:ff:99:55:8b:c2:4b:6d:be:85:6a:8b:75:3b:e5:
71:de:4e:b9:85:ce:db:98:39:9c:13:68:51:f6:63:73:52:e7:
4c:54:34:e7:19:d9:b9:e0:8e:bc:7d:ad:59:a9:cd:ac:fd:99:
ce:b5:97:0f:e4:5a:9e:36:f2:90:fc:76:2b:ff:29:c3:73:c1:
3d:1a:44:ce:7c:73:42:e8:70:0e:90:a6:7f:ad:e8:f7:25:d3:
fe:59:fa:a7:aa:d5:28:e0:44:24:ab:d3:04:6a:03:1f:30:73:
32:d4:0c:21:67:06:f3:d1:6e:d1:52:83:8a:d4:53:de:97:0f:
cf:e4:d7:7d:aa:77:93:48:5b:b0:79:4e:7b:e1:da:71:ac:e2:
53:27:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 21:33:32 2026 by rpki-client