Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft
File: 6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft (raw, json)
Hash identifier: n7C3o/5JxA919OCsrZ48/HFfqR+H4Jcz4gdGMqSTfU4=
Subject key identifier: 11:1D:0E:36:21:74:48:FE:84:4C:11:D7:3B:32:CE:63:7E:D6:6F:C3
Authority key identifier: EB:F3:71:E5:09:73:59:90:94:3B:73:A8:5E:47:0F:3E:A0:A4:1D:B4
Certificate issuer: /CN=ebf371e509735990943b73a85e470f3ea0a41db4
Certificate serial: 01A0D9BA7D285D45EA67BF04D508DB9803CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:12 +0000
Manifest this update: Fri 25 Sep 2026 18:01:12 +0000
Manifest next update: Sat 26 Sep 2026 18:01:12 +0000
Files and hashes: 1: 6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.crl (hash: vMXPyyUqALCfhM0jKJN+hd9/cp3jIC4Dyse8LgNZQY8=)
2: ZLkUyts_ik035FHPNwJmjLRIrPI.asa (hash: SPbBsWohroURBEl28DxtmNiba7IFZbUfgRRzWaEzxEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:7d:28:5d:45:ea:67:bf:04:d5:08:db:98:03:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf371e509735990943b73a85e470f3ea0a41db4
Validity
Not Before: Sep 25 18:01:12 2026 GMT
Not After : Sep 26 18:01:12 2026 GMT
Subject: CN=111d0e36217448fe844c11d73b32ce637ed66fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:07:50:c2:ec:dd:db:82:5d:32:0d:56:4a:f1:
08:01:b7:ff:01:a7:af:80:52:cb:82:f5:06:f0:a9:
cb:87:a9:57:d9:1c:5b:81:a6:59:fe:3c:56:01:f5:
7a:a1:13:42:69:4a:98:57:bb:a7:05:3a:1e:9d:68:
fa:cc:f0:da:f3:bf:ef:93:bd:70:92:2a:ee:d9:2a:
92:c3:1d:96:af:82:37:b2:02:22:c2:6e:7a:2c:59:
bb:68:2a:be:42:79:47:71:7f:ef:ba:54:1b:b9:75:
61:97:b8:f2:8a:0a:a6:5e:15:f9:d1:a6:12:85:48:
b0:b3:77:ee:f1:0c:96:41:15:54:76:cb:2c:50:a3:
f5:63:b9:88:f1:4c:a2:a9:be:f2:80:e9:b7:27:14:
a7:91:4f:b6:da:33:21:f6:73:1b:d7:6f:17:f4:16:
64:26:2f:5a:1a:d6:4d:86:9a:ae:4c:09:4a:54:04:
3d:2a:ac:ed:fe:20:3c:91:a7:b4:f2:9d:98:4b:48:
2b:da:0a:28:c0:c8:2c:f8:28:92:84:a9:ef:8d:4e:
03:e3:93:42:89:a0:d0:80:8e:b7:37:a7:72:2b:92:
bc:67:68:63:ae:36:c6:9c:fa:61:8d:95:91:88:c4:
1a:e4:c2:ac:2a:46:bf:05:b8:19:14:6d:d3:62:28:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1D:0E:36:21:74:48:FE:84:4C:11:D7:3B:32:CE:63:7E:D6:6F:C3
X509v3 Authority Key Identifier:
keyid:EB:F3:71:E5:09:73:59:90:94:3B:73:A8:5E:47:0F:3E:A0:A4:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9c:d9:c3:d1:24:2b:6e:ab:f9:e6:27:54:f3:cf:26:ec:0e:
34:4b:a3:99:31:47:aa:15:13:b7:aa:61:df:16:5b:8c:e2:bd:
8b:22:85:da:e3:21:6c:80:15:a8:54:05:5f:b6:cd:8c:17:90:
31:d2:37:12:e0:5d:69:4d:69:62:fb:f6:b3:5c:94:da:a4:72:
d8:14:90:44:92:7b:bb:f9:85:08:9c:7c:a7:6c:c4:d5:27:82:
e3:dc:3f:c2:8b:c0:28:32:71:8e:47:7b:93:48:d9:81:f0:26:
c0:ca:88:c2:cd:83:cb:a8:c5:06:99:fc:da:80:37:82:f5:76:
b6:13:62:3f:c6:eb:dc:9a:9e:13:87:4d:4c:75:95:e3:9b:1f:
5f:03:bf:a7:ed:50:15:0d:33:e0:4d:e2:31:83:d1:73:97:6a:
a4:46:8e:03:ca:6e:82:ec:c6:ab:ff:08:2d:3e:41:d2:03:c6:
58:0c:c6:2c:e8:24:09:2b:1f:0c:2a:65:44:2c:7e:7d:3d:df:
68:b8:be:e9:5b:ea:bf:b8:9c:45:91:e1:90:3a:a5:17:38:78:
2d:3b:83:80:36:f9:f9:b5:34:ec:f5:26:ce:65:aa:96:da:26:
a1:0b:e6:b9:b9:2b:15:69:6b:5d:b4:3f:04:a1:b3:49:14:e6:
14:58:de:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:12:55 2026 by rpki-client