Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File: k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier: qN3lqxa6cUTB2k8GADcuAH83MnR10oWFa8gXrqsKhRQ=
Subject key identifier: 70:D6:BB:C9:07:54:70:2A:12:E0:24:9E:26:FA:95:F9:7D:7E:CD:D9
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer: /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial: 01A127676BF754064D676369E772FC49EA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number: 0A0E
Signing time: Sat 10 Oct 2026 20:00:51 +0000
Manifest this update: Sat 10 Oct 2026 20:00:51 +0000
Manifest next update: Sun 11 Oct 2026 20:00:51 +0000
Files and hashes: 1: Ke9JZJzAeU2y3MAj67Y-ezxLtDU.roa (hash: ol9IiLjFY9gZ/Hu0WdjazLtITNLeMCgHDACJrZ2QFng=)
2: SfyGLqqUmhSJdrvNRjgqa719X1o.roa (hash: W5M17NIRo4ubi5ZsSmZINBoyskG2lROrQJ2bZs1LviM=)
3: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: j+w9SMLkF6oi6B5PERQ5rWSoo+yXHIcQ6FO2eMw2Ohw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:6b:f7:54:06:4d:67:63:69:e7:72:fc:49:ea:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Validity
Not Before: Oct 10 20:00:51 2026 GMT
Not After : Oct 11 20:00:51 2026 GMT
Subject: CN=70d6bbc90754702a12e0249e26fa95f97d7ecdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:aa:4f:77:7a:bb:d6:aa:be:b3:03:e8:20:
9d:53:3e:3f:e4:15:f2:88:1a:ed:56:79:00:d8:bc:
05:0c:70:db:f7:c7:bb:5b:b0:1e:78:e0:9b:4b:9a:
91:1b:25:13:99:0a:85:3c:00:5f:00:f4:1d:49:d1:
95:6e:73:2b:29:72:da:4e:5c:66:d0:e3:f1:05:43:
02:69:03:a8:57:f6:8f:79:3b:b3:13:78:c6:e0:41:
3d:ea:7f:12:97:e8:f3:e6:a1:5e:31:95:c4:b1:04:
bb:d8:6a:35:b6:48:ef:c8:64:a3:a0:ea:94:80:a8:
63:4d:39:68:ab:38:fa:46:1a:db:d1:f9:5a:8d:19:
78:c4:8d:ff:34:a5:7e:cc:d0:3b:22:5e:5f:66:3a:
66:77:a2:1e:35:fa:da:0f:24:5f:9f:36:e0:bf:f6:
cb:93:07:75:75:56:50:1c:ed:b0:ab:5f:9f:c3:5d:
28:4c:4d:34:f7:a5:87:23:2a:79:18:ef:2d:f4:90:
90:46:83:be:cb:32:c5:a9:fc:ff:e0:1d:7f:d7:ad:
3b:39:1e:1a:86:9f:c9:9d:ec:d6:ed:e4:fd:f2:82:
5e:41:a5:f6:dc:e1:79:6a:4d:d0:46:76:15:e0:7b:
b9:1a:c6:e5:3b:37:c0:86:30:00:0a:ae:71:bb:83:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D6:BB:C9:07:54:70:2A:12:E0:24:9E:26:FA:95:F9:7D:7E:CD:D9
X509v3 Authority Key Identifier:
keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8e:57:06:08:c7:68:e9:cc:16:8a:26:07:77:be:1a:07:08:
df:bc:91:cb:98:06:be:73:94:2a:36:15:f8:c9:18:fd:92:76:
51:3e:91:79:81:79:23:f3:02:d7:64:02:65:fd:7f:92:20:f3:
ac:a8:cd:22:90:13:bb:26:a1:ae:24:52:51:b4:c4:dd:f7:41:
e7:cd:37:3c:77:ee:f3:e9:b1:58:af:3d:b5:e9:bd:a3:c9:f0:
8e:34:aa:33:4c:ad:64:3d:b5:82:45:cd:a9:a7:ee:f2:b5:f2:
8a:55:f5:4f:2c:ce:56:10:0e:45:01:f5:fc:d8:dd:4d:51:20:
3a:82:c9:72:c4:ed:cf:ff:fb:f2:95:20:db:ab:4d:56:04:18:
dd:83:7f:10:58:90:93:a9:2e:ad:9b:fe:6e:27:87:65:52:0a:
4a:e2:b3:08:15:17:e5:c0:bd:ed:66:67:e4:72:e9:65:2f:c7:
c5:b6:c8:70:7d:d3:37:b7:9e:3f:e8:53:53:8c:27:0b:f0:07:
76:5f:b5:b3:c1:48:d7:4c:1a:68:60:05:4b:9c:36:e9:43:b1:
22:57:8a:ed:dd:86:9e:3b:c8:ec:33:32:68:81:df:92:dd:67:
15:86:b0:91:7f:72:2b:b7:dd:41:ca:a3:9d:05:f1:6d:5f:9e:
d5:6b:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:05:14 2026 by rpki-client