
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
File: 6rQDOf6nhnTLY0k0UbHTGhazOOg.mft (raw, json)
Hash identifier: l7uLBEHANcVCGlSzemtIm6Iriw6cHJUgu45YiTwi9vo=
Subject key identifier: 38:7E:E8:B2:DA:DF:CC:5C:4E:93:F1:09:11:13:DE:E7:3C:E4:FA:9A
Authority key identifier: EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
Certificate issuer: /CN=eab40339fea78674cb63493451b1d31a16b338e8
Certificate serial: 01A0D012993C20014A804E2F5C4F7FF7958B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:14 +0000
Manifest this update: Wed 23 Sep 2026 21:01:14 +0000
Manifest next update: Thu 24 Sep 2026 21:01:14 +0000
Files and hashes: 1: 6KqPxwz5HN8tB4czCK5TC9aRWjk.roa (hash: LIe7on9yf/qyzu9vp2pTn8miDNvuDmAxNQ8IOORYtdA=)
2: 6rQDOf6nhnTLY0k0UbHTGhazOOg.crl (hash: 9vhOGHl+ZxqzlWN1NangMyK9rDm68sjWPj1i1E7jp5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:99:3c:20:01:4a:80:4e:2f:5c:4f:7f:f7:95:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab40339fea78674cb63493451b1d31a16b338e8
Validity
Not Before: Sep 23 21:01:14 2026 GMT
Not After : Sep 24 21:01:14 2026 GMT
Subject: CN=387ee8b2dadfcc5c4e93f1091113dee73ce4fa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:19:5d:e0:55:f6:bb:69:b2:a6:3f:83:c9:
70:fc:4c:2d:87:c8:c8:48:f6:dd:25:c5:c8:42:79:
d9:6f:29:29:ef:07:ea:13:ce:21:93:74:f4:a0:42:
ab:b0:47:cc:03:69:3d:d4:6c:1c:9e:51:b2:a8:54:
27:74:2a:26:86:89:79:44:2a:69:21:39:7e:91:62:
b2:65:38:0d:ab:f3:6a:65:06:ce:f7:4c:0c:1e:5c:
ba:5d:61:aa:0c:6b:b5:dd:f7:63:d6:59:3b:b7:d3:
7e:a5:ec:07:45:e4:96:dd:28:6c:4e:82:38:71:57:
65:e5:f5:4b:d3:dc:71:9f:91:54:f3:89:25:64:7a:
10:fe:04:ab:eb:a4:8e:67:1d:9a:12:66:9c:65:67:
22:7f:61:0a:0d:d4:c9:ce:96:bc:6c:b8:71:26:55:
a3:ca:22:f1:24:fd:3d:c9:de:02:94:06:a2:e1:32:
b7:63:cd:76:7b:1f:6e:40:ca:d1:c8:c8:03:f1:e8:
fe:5b:52:8f:94:37:cc:97:4a:0b:37:6f:8c:09:7a:
ba:36:40:de:48:ed:cb:ba:8e:f9:de:cd:63:d9:01:
8e:cc:a6:fa:79:2b:23:81:a9:89:a0:a7:2e:d5:10:
c8:0b:64:dd:cf:c3:e1:ed:25:8d:ea:58:ff:3c:a4:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7E:E8:B2:DA:DF:CC:5C:4E:93:F1:09:11:13:DE:E7:3C:E4:FA:9A
X509v3 Authority Key Identifier:
keyid:EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:10:93:89:d0:f7:dc:fb:3c:28:21:f2:cd:37:1d:80:b5:be:
32:15:72:a1:96:e6:64:7f:0d:15:8e:8d:2a:3c:a5:ff:93:2b:
df:0a:05:cb:5c:9b:db:c3:56:77:ed:5e:bb:5c:81:df:47:08:
3e:19:04:b3:03:cb:2c:0c:23:27:14:6c:e7:f5:15:39:f0:1e:
48:2e:a3:33:39:bd:9f:55:63:2d:8d:3c:e9:9c:fc:91:16:f2:
86:f1:ba:39:8a:da:b2:94:c0:79:88:37:50:f2:5e:64:c7:0c:
09:6d:a2:e2:f9:91:f0:b6:e0:e4:5c:7f:c7:87:fb:ed:47:58:
41:a9:1b:a0:40:ae:1a:3f:cf:d5:17:c5:71:77:b5:ab:7e:c4:
1a:5b:04:7f:1b:e9:03:7b:50:de:77:92:ea:9f:cc:16:95:66:
67:63:6e:ab:bd:2f:3a:92:d7:e7:b5:43:82:12:af:dc:85:56:
66:11:66:98:2c:3a:24:00:b4:94:43:ae:19:ba:10:da:4e:63:
e6:55:92:74:cb:b5:76:0f:ff:20:e7:c6:44:f0:b7:c2:48:21:
c1:78:ca:81:e7:a7:33:a6:ac:e3:4d:94:92:33:8c:11:8e:9d:
81:c7:6f:a6:a9:93:29:83:9c:6d:fb:b4:0d:83:9e:95:7e:c6:
af:a8:a4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:17:36 2026 by rpki-client