Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
File: 6zlyC79FBhEPkD017RJJvUkeqLs.mft (raw, json)
Hash identifier: imxAWf7OWtFNI/t6sh++R70de9pG3pLvrDETW7Rlpd4=
Subject key identifier: CF:34:A1:BF:56:CD:2F:E7:E8:CE:39:12:D3:FF:77:EC:02:F5:CA:7D
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Certificate issuer: /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial: 01A0C332513CB1DA94EBB23A1C1623D14B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
Manifest number: 021D
Signing time: Mon 21 Sep 2026 09:00:49 +0000
Manifest this update: Mon 21 Sep 2026 09:00:49 +0000
Manifest next update: Tue 22 Sep 2026 09:00:49 +0000
Files and hashes: 1: 03p-Qz6XRyJNNeVn4ckBquqSilU.roa (hash: ysNzZw8fmnL30nJOwCbMlcySw0Zqlls7bKqqA6kBPb4=)
2: 6zlyC79FBhEPkD017RJJvUkeqLs.crl (hash: SBD4ypzbq0vTe1IhF39DaKaMwuM3vJ+OX1jUwZ8lx5k=)
3: mAUXHWg9xwo5F85IXm5SVffTuuA.roa (hash: GCJWVxe5b23c6JrLrMVtSOWuGjfgn1uA/TJ0/8z7eXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:51:3c:b1:da:94:eb:b2:3a:1c:16:23:d1:4b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Validity
Not Before: Sep 21 09:00:49 2026 GMT
Not After : Sep 22 09:00:49 2026 GMT
Subject: CN=cf34a1bf56cd2fe7e8ce3912d3ff77ec02f5ca7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:de:84:da:f2:ac:64:3b:7f:00:ff:e1:dc:
de:77:a4:71:3d:6f:23:8a:f6:38:9d:ba:60:f4:eb:
a5:50:2a:3a:27:0d:e5:71:4d:8f:c5:3a:11:07:ae:
f0:eb:65:d0:19:df:45:38:78:e7:43:ea:72:a2:37:
3a:d1:ed:c5:83:7c:3c:47:95:36:dc:f7:db:63:f1:
9d:6c:30:33:3f:e3:ea:27:3a:7a:14:7c:05:8b:b4:
ee:dc:09:64:1e:e1:99:26:73:4b:f3:d3:c5:74:31:
aa:05:c6:4f:54:99:45:61:c3:1a:48:0b:d4:d2:4d:
72:de:27:a5:c1:3b:3d:ae:1b:97:d0:0b:c0:f5:bb:
29:78:0c:08:a5:6e:9d:9f:9e:dc:d0:09:9b:ba:ce:
e5:91:14:e6:58:34:fa:76:a5:df:d1:ff:6e:ad:ee:
28:8d:3c:d4:f7:ac:33:76:3d:7a:f7:6d:77:78:3c:
11:9d:95:a2:69:8e:e0:29:7a:0a:9e:81:3a:f1:ef:
5b:de:a6:4a:7e:ac:00:b3:e1:f4:af:41:4a:7b:36:
af:4e:81:13:1b:cc:f4:8e:52:1c:12:04:46:8e:93:
ed:4c:7c:13:75:a3:6e:dc:18:9e:e6:0f:f5:93:85:
a3:a3:24:ee:99:f1:c3:33:19:b2:7e:b1:81:54:82:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:34:A1:BF:56:CD:2F:E7:E8:CE:39:12:D3:FF:77:EC:02:F5:CA:7D
X509v3 Authority Key Identifier:
keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:81:bd:db:ec:3b:e1:20:65:d5:0e:0c:04:14:78:56:c0:1e:
2c:0c:2d:2f:1a:19:cb:1f:2a:b7:48:4e:c2:15:61:46:fc:92:
e4:c1:93:6e:56:8d:46:d6:af:5b:42:87:d9:e3:5a:6c:db:17:
f3:b8:92:98:13:d8:08:79:b8:c8:80:07:78:53:8a:3c:34:28:
b1:93:fa:b3:df:d4:30:50:8a:ac:fc:3e:40:c7:4c:4c:0c:51:
5e:d8:77:0c:d3:3c:c1:53:a4:d3:27:fd:61:8b:e3:25:8c:fd:
45:c8:44:f0:ea:a8:e3:a4:14:54:cb:ad:79:66:d4:74:a7:01:
b4:14:e6:dd:67:3c:8f:ce:13:43:fc:b5:3b:4a:d2:ab:0a:3a:
b9:f0:77:4f:f7:c5:fb:43:44:b4:24:6c:9a:6d:39:f0:f0:bb:
fb:af:32:88:80:60:39:27:6d:79:a1:dd:f6:bf:5b:aa:2d:fb:
f3:06:73:ef:f1:fa:14:1e:6d:9f:aa:db:0f:57:96:21:ab:3f:
4b:97:c9:39:41:39:7f:2a:84:59:61:60:9d:24:e7:74:78:26:
45:f2:a7:5e:b8:8e:70:64:17:7f:37:28:17:57:dc:cf:50:6f:
b9:af:55:ac:4c:26:74:5e:85:6a:b7:7d:d3:1e:96:ab:85:4a:
8d:36:9d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:34:29 2026 by rpki-client