Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: KNHBnMi99efJ1+HBBbp8n9F1ZNIPWCycsscBiH2ImNM=
Subject key identifier: D0:E5:DA:0B:D7:E2:92:36:C6:51:D0:5B:06:A2:A6:6E:1D:A4:B7:1F
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 01A0D04886BBEDF7BE65111F302A33D2F424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 22:00:09 +0000
Manifest this update: Wed 23 Sep 2026 22:00:09 +0000
Manifest next update: Thu 24 Sep 2026 22:00:09 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: MZFHKBLLIpShbUmRfOEOkiuOO3J5ZQVNon44MKo5/RM=)
2: C5_CXUA-hhdUx_k-OWHw-aFPQjg.roa (hash: 5m8YSeYQsWZWPbqEN+OxCEF2VsF88Ekcd12LgCTpyv8=)
3: N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa (hash: 5lDjmIb8YsbwWstNUGh9BH6bOqCQpiLvBcN69JYx3C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:86:bb:ed:f7:be:65:11:1f:30:2a:33:d2:f4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Sep 23 22:00:09 2026 GMT
Not After : Sep 24 22:00:09 2026 GMT
Subject: CN=d0e5da0bd7e29236c651d05b06a2a66e1da4b71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bf:b0:2a:5f:05:d8:45:04:10:5e:3c:34:3e:
8d:14:9d:81:48:a5:a1:18:a5:ba:20:ee:0d:1f:c7:
4c:cc:b2:63:92:a2:79:43:54:b8:b3:4c:6e:aa:fe:
1f:c5:a7:08:4c:39:e8:fc:6d:e1:0b:9f:a3:ff:50:
f5:7b:c3:04:c0:fb:f8:be:53:54:8e:b3:14:00:0b:
da:da:c5:c2:15:98:2d:82:14:ff:33:be:e1:b5:57:
d6:ae:d3:4f:97:3b:8f:cf:60:61:3a:a8:92:e3:7b:
dd:47:9b:93:fe:d5:09:5a:22:ba:63:c7:5f:2a:89:
c4:03:61:b5:fc:e3:d9:f2:fc:2f:d7:9b:ca:69:5e:
54:05:b7:7f:7c:fe:d7:bc:c7:29:67:52:91:ef:02:
f7:12:f4:3f:80:7c:09:7b:6a:45:e1:db:23:05:7a:
15:0a:39:91:6d:0d:52:bf:51:d3:95:3e:70:ed:31:
5d:2c:af:85:d8:e4:a8:f3:c8:de:9a:2d:3d:ce:39:
41:e1:23:ff:1c:00:8e:43:47:e6:ba:1c:0e:52:b9:
87:cc:15:9d:f5:6a:94:f2:97:ec:5f:e9:4f:b3:75:
41:9a:00:3c:71:af:9f:15:7f:22:e7:41:c1:c4:11:
3e:a3:8a:c7:ca:77:ac:de:aa:11:72:69:77:2d:7a:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E5:DA:0B:D7:E2:92:36:C6:51:D0:5B:06:A2:A6:6E:1D:A4:B7:1F
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b3:e7:87:40:9d:ee:0b:5b:50:c8:ee:92:97:88:88:f0:4c:
6d:53:76:d4:d3:0f:c0:b6:c9:85:c6:39:e7:72:e8:67:ec:79:
9e:b9:f6:9b:d3:5d:3a:3e:86:2e:89:72:2c:47:3e:80:77:60:
3e:20:30:c5:77:da:39:09:48:c4:ac:ba:fd:30:6b:c0:fb:c1:
27:8f:ca:83:68:9c:52:6c:ec:0d:a8:26:e4:37:ce:11:d5:41:
26:bb:6e:3f:71:5f:66:d7:85:4d:71:93:49:ab:a4:02:ca:b0:
ac:e9:bc:d7:1e:72:51:19:1b:08:d1:5b:9c:a3:86:fd:10:25:
e7:a1:f2:9b:8e:a6:6e:25:7c:57:a6:0c:ac:5d:23:63:6a:2f:
04:ab:6e:50:9c:c7:59:53:66:95:b1:6e:f2:e4:51:73:20:e6:
e9:ea:a0:6f:27:48:d0:80:f7:13:a2:5d:c0:08:93:cc:2b:05:
9d:33:30:cc:a6:e9:5e:91:53:42:f6:89:d5:4d:4a:aa:11:c4:
7e:86:92:4a:e3:3f:3e:5e:cd:9e:d5:46:f3:70:b9:8e:99:bc:
2d:ae:25:a4:08:84:46:1f:84:da:c3:0e:cf:8a:6a:f3:4f:ab:
f2:fc:7b:44:67:8f:dd:93:30:3e:37:c8:bd:7d:7e:e6:01:a3:
1e:8d:71:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:38:46 2026 by rpki-client