
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
File: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft (raw, json)
Hash identifier: 5XCtjrlKJvFD0UtN29qe0ELdLC2jnrLgP7O3o0P1e4A=
Subject key identifier: DC:50:D3:B3:4E:D5:12:26:6C:CE:39:B5:21:11:87:0C:CE:49:59:66
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Certificate issuer: /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial: 01A1DA2664008BD4FD8FF55322D4B4CB5FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
Manifest number: 1B05
Signing time: Sat 14 Nov 2026 13:01:51 +0000
Manifest this update: Sat 14 Nov 2026 13:01:51 +0000
Manifest next update: Sun 15 Nov 2026 13:01:51 +0000
Files and hashes: 1: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl (hash: DnwcgNfFKjGJv0n2pGNH398XbxWFTCEEbQ1lY0KEw28=)
2: PLU1scGCX_Z6EP8Hgyg69HPqQ9I.asa (hash: 9c59RiHmUg5m8lvioiUPAxpkste+ERLLAHwy/LfB1tc=)
3: h49K85L4UEyeEFjotSv0qoO9c5E.roa (hash: Om6LbPxllmjNlvNuigobtMNJ+3VA5Oexf50hnPEjfBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:26:64:00:8b:d4:fd:8f:f5:53:22:d4:b4:cb:5f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Validity
Not Before: Nov 14 13:01:51 2026 GMT
Not After : Nov 15 13:01:51 2026 GMT
Subject: CN=dc50d3b34ed512266cce39b52111870cce495966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:3c:07:03:39:2e:6d:ce:cb:fc:89:b7:62:
5a:f5:31:49:dd:48:0e:d6:ac:fc:5e:e2:50:fa:05:
df:c3:09:28:52:76:ac:42:6f:a0:c3:ba:06:b5:32:
35:a4:6b:74:23:29:ec:1d:67:9b:80:2f:02:34:5d:
77:3e:3c:23:de:41:f7:cd:33:fa:77:43:2d:02:e9:
75:fe:c1:00:6d:b7:5f:3f:aa:c8:80:f5:68:24:1f:
90:db:70:f5:c8:0c:82:90:51:72:05:e9:ec:90:64:
fc:48:8e:d3:44:00:d9:75:fb:5a:65:77:a1:ac:cc:
48:0e:a2:ea:d7:24:c5:98:44:e0:a1:62:ec:5c:11:
01:65:f6:61:e0:ee:8a:6e:71:88:82:bb:52:6e:eb:
c9:4c:fb:e0:8b:62:e8:61:71:3c:09:92:9e:0f:90:
84:e8:ee:07:19:15:16:ab:f6:f4:6c:2a:a2:17:57:
c6:ec:78:79:08:a1:40:04:db:11:1f:0e:85:37:df:
16:93:8d:13:f5:7d:ec:af:1b:e0:e6:5b:e5:d5:e2:
8d:ee:70:2c:20:f2:4c:42:64:39:ea:7b:49:69:f4:
f6:2d:a8:6e:90:4d:8e:6e:97:a3:f6:6b:8b:f8:b4:
fa:10:ab:b5:16:c3:9e:44:83:34:fe:16:35:af:d3:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:50:D3:B3:4E:D5:12:26:6C:CE:39:B5:21:11:87:0C:CE:49:59:66
X509v3 Authority Key Identifier:
keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:25:5e:83:4f:0e:28:6c:bf:f4:6b:36:55:00:dc:24:c6:36:
97:46:7e:1b:89:ca:56:a9:e4:32:32:71:68:91:97:4b:9d:79:
c3:c0:df:c9:bc:31:9c:c1:76:08:7d:9e:c4:7d:64:cd:b5:ee:
bb:31:a8:db:95:f1:a2:0a:f2:3c:57:e9:e5:1b:1d:89:bf:df:
e4:fb:92:48:36:12:53:6a:e5:0f:a1:5e:70:61:a5:50:ef:0e:
c6:13:0e:1d:62:96:c5:49:55:ce:f7:04:59:0d:2f:3b:57:fe:
25:17:a4:5d:dc:df:1b:9a:26:1c:85:2e:34:8c:53:19:17:23:
ad:24:b5:63:a6:a3:12:61:9a:35:b0:4d:5c:dd:d5:ec:13:60:
9a:5e:c5:d8:f9:80:b1:f4:a8:99:e1:04:cf:ba:6d:55:c8:b4:
75:a1:f0:32:7d:4b:34:11:52:cc:5a:ae:26:80:7e:60:8e:0f:
90:33:06:cb:00:91:69:62:05:d0:4f:7f:e1:5d:5f:80:41:5a:
1f:5a:ef:11:9f:a5:6e:1e:38:f2:85:02:3e:a8:c1:e0:b4:8c:
48:f1:06:ea:d3:85:3d:74:19:aa:c8:e6:1a:1c:ae:85:46:15:
2c:c4:2b:c9:14:ea:10:5b:47:44:c9:4c:2d:fc:f4:db:6c:7d:
6f:26:37:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:54:17 2026 by rpki-client