Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: n1JNhLyEhLGqX5G0EdxSp/ay8oq21mPkLzu8jIMBkuk=
Subject key identifier: C2:31:84:D8:C3:31:B5:ED:EC:39:B4:5F:FB:47:5D:40:D9:EB:B1:D2
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 01A1DF4BE5856D5F0BA26B8D5AEA6B2B64AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 13:00:55 +0000
Manifest this update: Sun 15 Nov 2026 13:00:55 +0000
Manifest next update: Mon 16 Nov 2026 13:00:55 +0000
Files and hashes: 1: HZ8AlFPzeSKwnlXCV6rGz71Kb2g.roa (hash: cBgiVMyfZ1wPdRLeBDUH3L49HCW6dnbKeTA2KaOoCyo=)
2: k9Qt8bd5mtUe8WkBxy0-PnZZYDQ.roa (hash: 4cUGdQJG54wz4ImSZGhzke5tGudVY4frq/07PWJo/ug=)
3: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: 6OiunDUgEWgb9DL2W2SDCo834byJOfoBXfkOLVy87lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4b:e5:85:6d:5f:0b:a2:6b:8d:5a:ea:6b:2b:64:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Nov 15 13:00:55 2026 GMT
Not After : Nov 16 13:00:55 2026 GMT
Subject: CN=c23184d8c331b5edec39b45ffb475d40d9ebb1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:fc:3c:c9:48:61:3e:ad:78:03:47:da:a8:
38:45:24:bb:83:d4:ab:3f:bb:6f:bd:c4:95:4b:5e:
ea:74:86:9e:9b:0b:8f:9e:d3:86:4d:c7:e4:96:e1:
b3:5e:13:3b:f1:d6:44:02:54:3e:a8:3e:32:6c:86:
16:3b:ab:3e:2f:c6:85:ef:df:cd:6c:22:8e:35:9a:
ba:53:12:a2:ee:11:cd:87:52:6d:ae:8b:6b:25:4f:
21:d4:c4:bc:d1:7f:27:ce:b9:ca:76:9b:1c:37:c4:
f9:77:6d:41:5a:41:31:5a:b0:4f:ea:14:21:f0:05:
dd:08:0e:94:40:4d:37:db:72:34:54:d8:08:e1:0d:
2e:0c:db:d5:22:0f:d6:a3:d9:d1:12:8c:5a:4d:cd:
47:e4:27:fb:3b:57:4d:81:4c:c6:fb:54:2c:63:7a:
05:84:1e:5b:b5:89:15:f9:b8:7d:bc:14:63:06:f0:
f8:68:77:e7:6b:55:be:b6:ef:f7:50:ae:b3:a3:3a:
ff:83:61:50:45:33:67:71:f2:f3:b4:26:66:81:06:
f3:d7:b5:a7:09:3e:3d:1c:17:36:82:82:a9:23:a0:
e9:8e:0f:08:b1:a4:9e:ac:8b:d3:d5:45:3c:1e:2c:
86:e1:f8:f8:92:f2:39:5c:e0:7d:da:92:b5:ad:3c:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:31:84:D8:C3:31:B5:ED:EC:39:B4:5F:FB:47:5D:40:D9:EB:B1:D2
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fb:b4:ed:33:12:82:81:0a:86:fd:79:22:1e:ea:35:cb:21:
04:c4:b8:23:65:44:73:4b:ef:ad:82:86:48:83:68:51:6d:1d:
92:c9:e5:81:e3:76:ed:58:1a:4d:42:b6:dd:c8:13:31:60:e4:
fc:17:0c:b4:8b:b0:f9:79:80:8f:d6:fd:7e:37:b0:18:f4:6f:
ef:32:cc:9e:90:97:31:fd:a4:fa:9c:7f:09:0b:92:b3:e2:cb:
0a:ec:1d:9e:40:28:f5:26:e8:bc:a0:a4:25:5c:f0:f9:fb:b2:
7e:c8:fd:a3:b9:db:b2:3c:0e:af:e8:c4:bc:62:c5:a7:77:bf:
a4:55:79:6b:0c:bf:1e:9c:0c:c4:0a:e7:a3:03:2e:6b:ba:84:
ab:ec:f0:74:a6:21:f4:b5:ff:b7:8f:3a:24:2c:90:36:f4:28:
c5:8d:4b:18:b2:ad:14:c6:77:3b:b5:36:82:f6:47:fc:45:8d:
47:94:1d:33:18:dd:32:1f:6b:78:59:b8:01:9e:52:07:df:17:
48:cb:2b:a5:a3:29:13:52:e9:d8:9b:1c:83:f9:07:6d:75:4b:
74:a7:98:df:54:cf:2a:fd:ea:a1:f0:c9:a2:cb:67:9e:c5:67:
bf:e8:6a:ee:0b:78:4d:d9:f5:f5:e9:95:fc:38:1b:12:65:76:
d5:ef:ac:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:25:23 2026 by rpki-client