Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft
File: 6h-diwo3ikLxlEBBkUVJTlRgQMc.mft (raw, json)
Hash identifier: 2FbD7SlKFekzSf/KlCLDl8T07yfYYh5jxMJREhp+dok=
Subject key identifier: 90:70:4B:06:A2:C3:D9:61:27:40:BD:29:61:A3:24:11:5F:1B:0E:4B
Authority key identifier: EA:1F:9D:8B:0A:37:8A:42:F1:94:40:41:91:45:49:4E:54:60:40:C7
Certificate issuer: /CN=ea1f9d8b0a378a42f19440419145494e546040c7
Certificate serial: 01A11A87948E46757F333B9E15AE5676C55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6h-diwo3ikLxlEBBkUVJTlRgQMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft
Manifest number: 010B
Signing time: Thu 08 Oct 2026 08:00:55 +0000
Manifest this update: Thu 08 Oct 2026 08:00:55 +0000
Manifest next update: Fri 09 Oct 2026 08:00:55 +0000
Files and hashes: 1: 6h-diwo3ikLxlEBBkUVJTlRgQMc.crl (hash: b5VemwyjSqrLoGIl6akKpvv58vr62hoiav+/iASOxis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6h-diwo3ikLxlEBBkUVJTlRgQMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:87:94:8e:46:75:7f:33:3b:9e:15:ae:56:76:c5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1f9d8b0a378a42f19440419145494e546040c7
Validity
Not Before: Oct 8 08:00:55 2026 GMT
Not After : Oct 9 08:00:55 2026 GMT
Subject: CN=90704b06a2c3d9612740bd2961a324115f1b0e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:05:00:29:cb:1e:dd:be:a0:32:4b:48:6d:
8f:a8:07:91:cb:bc:c8:74:75:cd:3b:87:d3:31:03:
3a:a3:f7:66:95:8c:f2:77:a8:0d:17:ca:f9:48:74:
c1:bd:91:f1:03:48:da:68:6a:86:c6:35:b5:1d:3b:
df:03:3b:38:3f:24:12:21:7f:29:bf:a7:dc:8b:fa:
8d:64:9c:55:51:bd:3e:3b:2b:34:ba:b8:03:8e:85:
d8:b6:90:9f:cd:63:25:6a:97:de:8e:e8:b3:69:a9:
74:17:76:a1:a5:82:8c:72:3a:cd:d4:52:a1:b5:cd:
83:4b:e6:f0:4e:4e:cc:53:3f:39:d8:32:a7:b5:12:
ef:ca:49:b0:82:af:08:c1:ee:a8:fe:f0:50:56:5c:
f7:19:b8:ba:9f:b7:80:e4:1a:5e:8e:ee:06:10:62:
b3:70:c4:14:c3:c6:bd:31:7b:d9:52:e2:2f:f0:2f:
af:41:4a:5d:ae:ff:86:ad:de:60:17:72:30:fa:70:
e7:fb:bb:06:92:c4:c3:33:32:68:4d:1e:d6:2f:b1:
37:e5:a2:30:0c:cf:fd:bf:a8:b0:fe:06:5b:1f:5f:
19:a1:62:d2:8b:7c:be:96:df:e9:53:8a:35:af:0e:
14:cc:86:cd:71:12:8d:99:8f:76:68:dd:61:29:40:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:70:4B:06:A2:C3:D9:61:27:40:BD:29:61:A3:24:11:5F:1B:0E:4B
X509v3 Authority Key Identifier:
keyid:EA:1F:9D:8B:0A:37:8A:42:F1:94:40:41:91:45:49:4E:54:60:40:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6h-diwo3ikLxlEBBkUVJTlRgQMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:27:3a:ba:d3:de:23:0b:21:10:9b:4e:32:69:dc:73:38:c2:
b1:67:1d:69:da:68:c2:94:17:b7:09:3f:f1:72:c5:ac:39:14:
fe:04:5d:ba:85:35:80:3d:81:83:d9:b3:79:86:3c:1c:02:03:
f3:b0:99:af:b3:3a:65:da:62:70:96:8f:47:a8:95:9d:f6:38:
98:7c:b9:ec:b9:29:38:c6:65:c6:0c:ee:38:da:79:3e:b3:df:
6f:f5:59:4c:66:df:e7:d6:3f:92:69:12:5d:c5:15:08:27:a8:
ca:04:e6:47:df:64:0c:d3:bd:07:08:4b:f1:b3:8e:14:e4:2a:
32:b6:1f:89:0f:7f:e5:b0:61:58:93:09:2f:86:cc:8e:51:34:
09:79:ed:f8:4c:dd:67:1b:20:cb:59:b1:4e:63:fc:64:3b:c0:
b7:54:f1:08:48:cc:02:e2:e4:09:c2:bd:94:33:0a:7e:29:1c:
e8:1c:23:3c:bd:ce:14:f1:d3:12:c4:22:3a:92:07:41:dc:85:
3d:91:bf:67:9c:8b:3c:5f:39:30:16:9e:cf:60:2a:40:72:20:
6c:e9:00:01:5d:5f:8a:b0:04:88:b5:ef:e3:6b:e7:47:ef:57:
14:f5:33:9a:b7:77:30:90:35:e1:de:0b:2b:e0:3f:a2:13:e4:
75:ff:1c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:25:26 2026 by rpki-client