Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: 15I968Uyc3/PzvEuKh3FR9VUFNPt9yiWXZG/OFT79yk=
Subject key identifier: 5F:20:EE:33:61:CA:D3:6D:51:45:82:23:3A:38:8E:57:E9:F0:03:31
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 01A0E219019BC22A37FF0B7DEB3702618BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 1A7D
Signing time: Sun 27 Sep 2026 09:01:24 +0000
Manifest this update: Sun 27 Sep 2026 09:01:24 +0000
Manifest next update: Mon 28 Sep 2026 09:01:24 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: t4BewdVuyfU/jrG2WPs9vCPMIvslBa5hPtH62x5oWsI=)
2: MoM66qQuhJcSL5w9TkLPi9sdoKs.roa (hash: /dt2y7/UKbT5EuF45pcmtQs53CRnIBBB6Rg/I22HBZM=)
3: rwInDctVSqf9bY5au3SgxXMR30k.roa (hash: HNhqme3U8E9COjNTzz0hBRfGIPWCZDCViGGXUd7ReyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:19:01:9b:c2:2a:37:ff:0b:7d:eb:37:02:61:8b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Sep 27 09:01:24 2026 GMT
Not After : Sep 28 09:01:24 2026 GMT
Subject: CN=5f20ee3361cad36d514582233a388e57e9f00331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:06:5e:75:7f:07:5e:86:5a:86:9b:41:38:9d:
32:91:7e:2e:a9:02:84:86:5b:94:c9:e0:f0:bf:56:
9a:26:fa:41:4d:ce:23:d4:98:98:70:84:de:8e:f1:
8d:f5:28:ac:11:0a:93:47:80:1c:7d:c1:2a:8e:e3:
5c:24:af:62:08:bb:f9:e0:02:58:04:84:e1:6f:9a:
59:f1:9b:2c:31:ab:36:5e:eb:00:ad:33:65:55:89:
d3:ad:16:eb:02:22:a8:17:b2:73:ce:ed:c7:b2:65:
04:3a:6b:b4:a2:db:a6:43:e7:71:aa:27:85:e5:57:
7b:c7:10:57:8f:12:52:66:96:58:3e:53:06:cd:19:
f0:62:fb:5c:c9:b7:d9:b8:ad:a7:b8:b6:f5:1a:09:
ff:05:a2:63:f0:08:32:27:d3:7b:d6:71:cb:04:a7:
1b:0e:91:43:d3:30:05:57:d1:31:b5:fa:fc:71:e4:
81:4e:0b:8a:7d:5c:0d:3b:d6:a7:56:b9:97:74:ca:
f9:93:6f:d1:f8:20:ca:ab:19:92:16:c8:8d:5b:f2:
69:5c:56:9a:80:9d:ea:6a:70:69:df:ed:03:53:d5:
0a:de:ce:35:3e:a4:bc:1a:83:8c:52:35:7c:f0:fc:
51:9c:4c:b7:62:51:4c:fe:5a:3d:1c:0d:bc:73:2d:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:EE:33:61:CA:D3:6D:51:45:82:23:3A:38:8E:57:E9:F0:03:31
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:93:1d:30:43:2a:86:5a:8b:be:15:df:ff:4c:ac:d0:68:6e:
57:57:0b:5b:7f:b7:44:87:73:51:24:fd:ab:2e:69:d3:a4:cd:
b0:7e:ae:e3:ff:e0:ee:bc:86:e5:a8:54:d3:cb:d8:51:bc:87:
0d:b5:fa:9d:3e:19:50:7a:a8:85:2e:41:e0:0f:b5:f8:d3:59:
82:d2:42:65:87:d4:21:f2:86:94:84:7f:40:01:d9:4e:25:4f:
4b:ae:3e:ce:a2:1c:50:af:b9:06:84:4a:6c:ef:e5:5f:e2:b1:
79:49:cc:cf:74:a3:04:da:1b:8a:05:ff:64:29:1a:1a:51:14:
96:fa:4d:de:82:9e:89:41:ff:8a:3e:cf:0e:4d:6c:3e:e0:77:
44:4a:3a:78:7d:3b:9d:a6:a3:ee:01:57:4f:b1:d4:32:74:52:
3c:0a:1c:a5:d3:8a:8f:bb:26:ef:bc:f9:cb:fb:93:32:21:a9:
f3:ba:a2:d3:3c:f0:56:91:38:1a:c3:2b:8a:c6:67:0a:b7:f4:
78:2e:6f:e9:88:0d:f0:88:8d:95:63:ea:9b:d0:e9:f2:30:44:
f8:94:70:ee:32:fc:c4:0e:03:17:69:99:67:dd:12:07:d3:29:
4d:6b:19:2e:21:37:3b:c9:70:3a:af:d2:be:f1:c1:2f:7e:db:
1c:3e:1a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:18:09 2026 by rpki-client