Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
File: 6w649Uh9dBqMxtbfOzkhke0-7T8.mft (raw, json)
Hash identifier: YISWu9fPaflBAKA8f2YzbKq6BIqjm480tUuMR9urZVs=
Subject key identifier: 13:82:EB:80:69:5A:8B:0C:B2:B4:F1:3F:9C:9D:36:B6:09:F8:70:2F
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Certificate issuer: /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial: 01A0C8C643FCB537758A2C99B7F540CB2870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
Manifest number: 1017
Signing time: Tue 22 Sep 2026 11:00:31 +0000
Manifest this update: Tue 22 Sep 2026 11:00:31 +0000
Manifest next update: Wed 23 Sep 2026 11:00:31 +0000
Files and hashes: 1: 6w649Uh9dBqMxtbfOzkhke0-7T8.crl (hash: eOSJhR8jvP8VsGX6URLpC2nkaB2bORfrQc4LXapV5ss=)
2: BKV_fu3YFOoxYmo6YqQLV_km-4E.roa (hash: ifeOZt3xfJQ0veX8MeURu5Xl/bcGWTOWIc6ZubLu+6U=)
3: T6kejoeO8STRz12YhgigU3Mw9pU.asa (hash: mBj2WlGYT5rOFIrcWZaLOEyCZhQV1mqT63bqRW1cB5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:43:fc:b5:37:75:8a:2c:99:b7:f5:40:cb:28:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Validity
Not Before: Sep 22 11:00:31 2026 GMT
Not After : Sep 23 11:00:31 2026 GMT
Subject: CN=1382eb80695a8b0cb2b4f13f9c9d36b609f8702f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:db:40:82:df:0a:2a:6f:38:ca:a7:c9:cc:
35:af:4c:66:71:fe:d0:a0:bc:25:7b:aa:cf:58:92:
af:96:a6:3e:f5:fa:9c:e3:30:0d:d4:b2:48:22:03:
42:c9:4e:6a:61:49:23:56:93:0e:46:68:e1:45:02:
1f:c7:47:e7:67:3e:fd:2d:83:cd:87:fc:03:f3:07:
da:c6:79:fd:9d:f0:6d:47:19:73:a0:37:c4:1a:37:
30:0b:2a:a2:29:7e:44:55:17:f3:35:70:8e:b2:21:
36:47:f9:52:d1:b9:ec:8a:15:70:f4:a2:53:42:2b:
d2:9f:f3:b1:18:ec:94:37:f5:3d:5d:d4:c4:4e:ad:
bd:a8:a3:c3:2d:b6:f9:e3:8b:da:cd:c4:16:37:ef:
8c:ad:2f:31:06:bb:32:04:79:04:c9:ba:9c:b9:46:
c8:2b:23:da:c1:8e:9b:86:c2:90:6b:14:91:db:bc:
54:21:77:da:f7:21:28:a5:e4:04:ee:b4:5d:ef:c3:
33:c1:7f:92:f1:d9:c2:42:11:2b:b1:72:2e:59:f8:
42:2a:56:e4:1b:bc:0e:5f:20:2a:17:af:4f:e2:2a:
9c:db:29:50:ed:36:1f:b0:f1:bb:66:04:28:36:9f:
00:c1:e0:20:25:16:b1:9b:45:ba:83:13:a6:d5:80:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:82:EB:80:69:5A:8B:0C:B2:B4:F1:3F:9C:9D:36:B6:09:F8:70:2F
X509v3 Authority Key Identifier:
keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7d:fc:d1:8b:c0:07:6f:c9:01:b7:83:9f:bc:99:70:5a:5d:
c7:f4:d8:86:39:7c:86:bf:0c:65:68:eb:ff:a4:1a:8d:1b:38:
90:b9:5b:4f:e5:52:d3:35:45:1d:91:90:7c:20:fb:a3:5a:7b:
6f:81:ef:94:72:40:dd:f3:de:18:2c:55:5b:f4:0a:6f:82:e5:
4d:78:da:6d:50:c9:53:44:ca:5e:70:47:af:67:10:15:72:1c:
f3:54:b1:e8:c8:1f:69:c0:9b:db:6c:d6:f3:01:df:cc:8f:f7:
f7:b7:54:6c:7c:b3:3a:38:d4:c7:45:86:76:17:09:cb:2a:fe:
60:59:b1:1f:15:9c:1f:5a:f4:3f:24:81:85:c1:88:48:34:b9:
4c:04:80:23:ae:4e:9c:9e:c1:57:3d:67:9e:b3:13:0e:06:d5:
c7:46:dd:f1:7c:4b:c8:e6:4a:6b:13:95:f8:a7:ec:28:d8:42:
12:32:99:a1:07:62:b6:6b:b0:22:fe:6c:b0:8c:29:89:08:ce:
af:28:6b:f1:0d:94:15:c2:74:77:cc:3f:2c:75:d7:48:90:c1:
e6:fe:b8:64:a8:8b:29:5b:ce:19:7d:73:43:72:fa:52:3e:1c:
a0:90:1b:fc:a2:54:55:af:d1:3c:72:97:c2:b3:26:93:73:8e:
e5:09:d2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:03:45 2026 by rpki-client