Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: niyEMo0z3TOo1FtuwyRHETZAH/bUeI35OznEMkBTfDQ=
Subject key identifier: 0E:0D:83:B3:CD:16:68:03:B0:3E:2B:BF:76:DF:9C:EA:D9:F0:D0:09
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 01A0CB59FB0A8F8FF640C590A8C401F6D392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 1A90
Signing time: Tue 22 Sep 2026 23:01:06 +0000
Manifest this update: Tue 22 Sep 2026 23:01:06 +0000
Manifest next update: Wed 23 Sep 2026 23:01:06 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: 58nURLYhQq2zxL0kcE1B+M4eVMU7bHeYulkKCMhxzYc=)
2: 6rSLyo-Yx0l7a6a5zPlB1ZN9rnE.roa (hash: zpc8LUDJlLZtd+b87lBPPtArtCBV13J0qSxfK4BT774=)
3: I_3jehdl5ph6naOcsERKtRM4rOg.roa (hash: 67rWYEzucKkbcxuazVYk/T4DnXTcgL86L7mCqKUkfKQ=)
4: Q185qBCTAslf97Rog3SUyG95EBo.roa (hash: +jTEwCGDvqQHKcWHrPwBJB6gQVTArNQuwOaaAn3R7Fw=)
5: oen-QFfHBmIEOP5ttsAYHQc7OEM.roa (hash: M8LjK98wamn1Bf61XvL6iwM/2t8o+aYURFWF4088u4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:fb:0a:8f:8f:f6:40:c5:90:a8:c4:01:f6:d3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Sep 22 23:01:06 2026 GMT
Not After : Sep 23 23:01:06 2026 GMT
Subject: CN=0e0d83b3cd166803b03e2bbf76df9cead9f0d009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8f:72:2a:3e:46:33:ab:90:08:4a:35:32:bc:
11:62:a4:00:f1:57:07:15:40:a3:c4:69:57:55:8d:
85:c6:c4:60:d9:08:27:84:cd:d3:55:fe:8e:3b:cf:
db:11:86:de:58:75:bf:b6:1f:32:ba:af:46:bf:61:
00:72:84:6d:f2:90:44:83:1f:6f:2b:58:81:a4:73:
e9:77:4d:75:03:6b:f7:40:03:8a:55:3b:52:e4:43:
1b:23:0b:d6:32:3e:c1:08:71:06:4d:92:1a:ba:01:
07:c5:f0:90:37:f1:d3:c2:04:e4:e7:65:50:51:dc:
29:32:05:6f:36:e7:92:28:b8:9c:23:09:4d:28:c4:
20:73:bc:b9:8c:09:84:45:99:98:ef:08:1d:38:3c:
e5:14:dd:eb:92:68:0b:91:e4:57:69:fb:82:f2:0d:
b7:96:9a:1a:e8:27:d5:89:ec:68:e2:82:9f:5d:4c:
84:6a:e3:27:3c:52:bc:41:4d:96:4f:3a:74:bb:f8:
a5:23:e6:44:e5:6d:19:57:0d:61:7a:42:01:c9:b4:
c6:27:b5:43:9d:b7:f2:c2:7e:ab:ac:2d:8d:3a:a9:
db:58:ad:b0:79:da:12:98:e8:ee:5c:56:ec:79:8f:
f5:84:d3:6e:60:cf:86:a6:41:68:06:5e:25:5f:17:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0D:83:B3:CD:16:68:03:B0:3E:2B:BF:76:DF:9C:EA:D9:F0:D0:09
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:22:ce:ec:82:98:4d:9b:85:d5:cc:2d:f1:33:88:85:83:ea:
12:b7:66:63:58:17:db:38:5a:79:8a:c6:b7:42:88:0a:88:3b:
1f:83:6c:c9:98:2e:cc:f7:3b:78:e9:fc:4b:ac:ea:38:75:79:
52:c0:9d:3b:96:9d:f2:e2:0d:5e:a4:e9:25:3f:75:aa:b8:b5:
3a:a7:33:10:79:7f:13:a1:e9:21:a0:5c:5b:3e:50:53:bd:00:
d9:3a:81:59:c1:76:e7:74:da:45:fa:09:c7:92:ec:e2:96:ec:
9e:4d:c0:bc:58:f5:b2:22:95:57:ab:9b:e8:61:1a:bd:33:55:
25:ff:66:fe:e8:1b:90:fd:2e:f8:19:98:7c:5a:57:3a:a6:e9:
71:a2:7b:0b:12:43:83:a5:b1:17:06:b1:64:85:c6:7a:7c:1f:
30:ef:6a:b5:47:30:0e:fa:4d:d5:ed:98:32:0e:fa:68:5f:53:
1c:bf:86:d1:6c:9e:39:7a:b2:52:94:7f:d4:aa:24:05:37:ae:
e4:b2:d2:20:b6:ee:db:1b:39:ad:c9:bf:4b:5c:67:34:54:58:
92:d9:96:0b:13:0c:78:3d:1a:f9:ba:92:c9:c5:a7:ed:54:f7:
dd:a5:92:10:d4:43:d2:87:49:d3:b2:eb:70:5a:5f:af:54:36:
f3:ea:e2:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWfsKj4/2QMWQqMQB9tOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTg1MWRkYWU1YTY0Y2MzODgyNTM5NWJlOWE1MDdkYTk1
YWI3Y2YwHhcNMjYwOTIyMjMwMTA2WhcNMjYwOTIzMjMwMTA2WjAzMTEwLwYDVQQD
EygwZTBkODNiM2NkMTY2ODAzYjAzZTJiYmY3NmRmOWNlYWQ5ZjBkMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I9yKj5GM6uQCEo1MrwRYqQA8VcH
FUCjxGlXVY2FxsRg2QgnhM3TVf6OO8/bEYbeWHW/th8yuq9Gv2EAcoRt8pBEgx9v
K1iBpHPpd011A2v3QAOKVTtS5EMbIwvWMj7BCHEGTZIaugEHxfCQN/HTwgTk52VQ
UdwpMgVvNueSKLicIwlNKMQgc7y5jAmERZmY7wgdODzlFN3rkmgLkeRXafuC8g23
lpoa6CfViexo4oKfXUyEauMnPFK8QU2WTzp0u/ilI+ZE5W0ZVw1hekIBybTGJ7VD
nbfywn6rrC2NOqnbWK2wedoSmOjuXFbseY/1hNNuYM+GpkFoBl4lXxfJZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4Ng7PNFmgDsD4rv3bfnOrZ8NAJMB8GA1UdIwQY
MBaAFOioUd2uWmTMOIJTlb6aUH2pWrfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEt
MTEwYzg3OGRjZDI5LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEtMTEwYzg3OGRjZDI5
LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSLO7IKY
TZuF1cwt8TOIhYPqErdmY1gX2zhaeYrGt0KICog7H4NsyZguzPc7eOn8S6zqOHV5
UsCdO5ad8uINXqTpJT91qri1OqczEHl/E6HpIaBcWz5QU70A2TqBWcF253TaRfoJ
x5Ls4pbsnk3AvFj1siKVV6ub6GEavTNVJf9m/ugbkP0u+BmYfFpXOqbpcaJ7CxJD
g6WxFwaxZIXGenwfMO9qtUcwDvpN1e2YMg76aF9THL+G0WyeOXqyUpR/1KokBTeu
5LLSILbu2xs5rcm/S1xnNFRYktmWCxMMeD0a+bqSycWn7VT33aWSENRD0odJ07Lr
cFpfr1Q28+riGg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:16:43 2026 by rpki-client