Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: VOqi/rN7tAVv65xKWZ7UxGH2mIhXnkL04w4RXAmsN38=
Subject key identifier: B4:A0:EA:20:D7:20:E3:EC:AB:59:6A:09:8D:80:52:27:0A:D5:A3:97
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 01A1DEDED44E993A6B01F7AFA0604578148F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 1B1F
Signing time: Sun 15 Nov 2026 11:01:47 +0000
Manifest this update: Sun 15 Nov 2026 11:01:47 +0000
Manifest next update: Mon 16 Nov 2026 11:01:47 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: 2Fml0wRJhAXgYDnoT4EJgTLm+c5f3Oy2KCeKCFo1uqQ=)
2: 6rSLyo-Yx0l7a6a5zPlB1ZN9rnE.roa (hash: zpc8LUDJlLZtd+b87lBPPtArtCBV13J0qSxfK4BT774=)
3: I_3jehdl5ph6naOcsERKtRM4rOg.roa (hash: 67rWYEzucKkbcxuazVYk/T4DnXTcgL86L7mCqKUkfKQ=)
4: PcJaeOG-uGKtG5b_kjWoBunlXlw.roa (hash: GYy5GGBSXi+sKLhB7SDIbBsijnRxO4DSOY03MGL5Ta4=)
5: Q185qBCTAslf97Rog3SUyG95EBo.roa (hash: +jTEwCGDvqQHKcWHrPwBJB6gQVTArNQuwOaaAn3R7Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:d4:4e:99:3a:6b:01:f7:af:a0:60:45:78:14:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Nov 15 11:01:47 2026 GMT
Not After : Nov 16 11:01:47 2026 GMT
Subject: CN=b4a0ea20d720e3ecab596a098d8052270ad5a397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:34:86:96:02:48:4c:6d:62:6e:e6:9f:4a:
5f:28:fa:10:05:fb:51:78:50:df:e9:54:b1:16:1a:
f0:b1:9c:26:f7:5c:3c:5d:4e:43:a4:d1:c9:22:36:
1d:2d:46:98:e8:b2:35:77:03:82:68:19:f2:46:f2:
b8:96:20:eb:0b:62:02:30:22:2b:7a:68:2e:57:e3:
6d:ae:c5:dc:be:3b:29:bb:18:db:64:2b:26:87:1d:
e1:fa:3a:7e:cd:16:35:56:64:05:12:ac:d5:22:7e:
3d:f9:9f:9b:3a:d3:6e:4b:ed:9d:c7:31:39:b2:e8:
ad:07:1f:28:0c:f5:cf:13:6e:2c:2e:81:10:5a:b8:
2b:30:9d:8c:6c:b8:6d:bd:2d:fe:25:ab:90:1f:e8:
c2:28:90:10:47:94:37:9b:80:c3:ce:15:81:98:58:
7f:14:e6:16:b8:10:fd:fb:1a:1e:59:ba:4d:8a:db:
e7:ac:dc:12:3d:c5:f7:f0:77:c7:60:17:9a:55:2c:
a2:38:45:f4:bc:de:d5:a6:f8:70:75:17:b3:8c:dc:
fd:3f:38:39:3c:f2:bd:2a:f2:25:28:5c:c4:c5:61:
8b:8b:79:8b:86:ba:2c:ec:8c:d2:6b:75:69:f2:4c:
eb:3b:12:6c:d5:ff:f0:75:48:90:7f:53:54:c7:2d:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A0:EA:20:D7:20:E3:EC:AB:59:6A:09:8D:80:52:27:0A:D5:A3:97
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a7:34:17:b1:5f:17:64:44:42:cc:48:24:40:b0:d1:0e:57:
d0:5c:36:af:5a:43:ad:0b:bf:2c:b7:9c:15:dd:be:71:5d:11:
45:b2:3e:cc:00:96:9e:48:be:77:c5:d7:85:2e:a3:28:b2:fc:
02:50:ae:49:38:bc:88:d6:7e:c8:2d:97:70:a3:f2:5f:e1:9e:
ab:71:a8:ed:97:31:d7:15:c7:4e:73:d9:59:3a:2f:71:91:4b:
0a:ac:a7:45:f7:d0:62:a2:05:71:fc:8c:13:6f:0e:e5:cb:85:
18:a8:e7:24:b3:6a:c7:b6:8e:2c:fb:37:40:77:ec:f8:6c:b8:
e9:93:7f:2c:b2:a4:86:2c:f6:f0:3f:cb:2e:cd:70:74:da:f0:
90:b6:47:a8:c8:99:da:ec:47:5c:b6:cd:e4:2b:7f:fc:bd:56:
9a:39:67:08:b1:da:da:7f:53:a8:c2:a9:12:2b:88:6b:c4:f1:
67:13:f1:83:6a:5c:fa:99:c1:d7:3e:e7:e1:b5:e6:7a:60:61:
22:35:70:46:28:bf:64:f8:7b:ba:f8:b8:84:b3:cc:df:a9:45:
35:f0:37:76:58:10:90:ba:74:da:50:a2:7d:52:cb:88:80:1f:
90:55:59:57:59:0e:5f:d6:f7:9f:6a:3f:25:22:ec:b5:ab:89:
a2:d2:f9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:57:47 2026 by rpki-client