Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
File: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json)
Hash identifier: YI1ACNBo5h/GMqLiJduBaeLG8ozt6+ERSXwXLxsb/vc=
Subject key identifier: EE:5F:EE:A5:2A:31:50:4D:C4:CB:83:9A:F9:1C:AD:1E:DC:E8:EE:30
Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
Certificate issuer: /CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Certificate serial: 01A0D917BF99CC323D4152DA5AB39F1F9CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
Manifest number: 19FF
Signing time: Fri 25 Sep 2026 15:03:27 +0000
Manifest this update: Fri 25 Sep 2026 15:03:27 +0000
Manifest next update: Sat 26 Sep 2026 15:03:27 +0000
Files and hashes: 1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: aGEu0k7tw3S7Up8tTybNOtY8N31ZzAFyhCRs/UpdKr8=)
2: GsL6G3Qz5ZjpuRYda1-7KFnYc0o.roa (hash: pJa6GuoaHJHw4hKMbDO80uXWDKK7cJe4mwiQpI9C0zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:bf:99:cc:32:3d:41:52:da:5a:b3:9f:1f:9c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Validity
Not Before: Sep 25 15:03:27 2026 GMT
Not After : Sep 26 15:03:27 2026 GMT
Subject: CN=ee5feea52a31504dc4cb839af91cad1edce8ee30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:69:39:52:44:c2:04:26:fd:5f:1a:f8:fa:
d4:91:e5:e6:be:4d:eb:20:11:99:ac:db:f6:05:0b:
60:a4:97:7c:01:aa:32:7d:6b:32:20:61:a3:99:a1:
07:b4:f1:b9:8c:0b:2b:91:0e:c9:e2:a3:f2:3e:fe:
a1:e0:c2:37:0e:38:2e:bd:b4:ac:b1:90:bd:e3:a4:
b6:27:2a:cc:dd:8c:11:46:c9:8f:bd:49:1c:55:34:
5b:4d:06:0f:69:b2:57:06:ce:f5:02:cb:a9:a9:a2:
dd:84:d8:62:42:3b:49:9e:b9:4e:ec:0e:49:aa:f6:
05:0e:20:3f:29:67:a5:6b:64:30:08:13:49:13:74:
f4:26:3d:78:6a:a0:4a:a1:ba:c4:c7:69:df:12:4a:
a5:5b:3d:68:3e:5b:79:c4:96:cb:ab:d6:4f:56:54:
be:ae:ff:86:56:ac:1d:ca:b4:c6:88:e4:38:62:1f:
07:ce:5f:dc:48:15:e9:29:fd:c9:ea:65:c3:dc:a9:
2e:51:97:fc:d2:bf:de:c9:bb:fd:07:77:cd:60:bf:
79:05:5e:02:dd:ca:c2:f4:1b:01:5a:e1:04:f5:07:
03:8b:b6:56:00:a3:30:a3:82:7c:e3:b5:08:18:09:
a9:53:2c:c8:ee:82:dc:09:fb:00:39:3b:6f:4b:d6:
02:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5F:EE:A5:2A:31:50:4D:C4:CB:83:9A:F9:1C:AD:1E:DC:E8:EE:30
X509v3 Authority Key Identifier:
keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:90:96:79:ab:88:6b:6d:fc:73:da:1c:5b:a8:92:84:78:dc:
d3:13:e8:2a:48:0f:03:db:f7:75:f9:02:7b:c7:b2:7c:e8:27:
c8:b4:65:bd:fd:ba:c6:78:cd:2f:58:49:18:d6:ab:d0:8c:88:
fa:8d:d9:cb:52:60:53:a4:cd:5e:2b:fe:d6:41:48:0b:ca:09:
9d:90:a2:7e:e1:99:39:87:97:64:81:2d:11:28:f3:b4:da:3b:
24:48:a7:6b:3e:3b:cd:17:64:27:16:a7:84:3b:4a:8b:63:8d:
e7:91:d1:f6:ee:2f:a0:d3:64:03:75:a2:15:17:20:a4:a6:a5:
30:9d:05:60:d9:cb:8a:df:ca:81:66:32:dd:83:70:4d:7c:d0:
7c:30:b6:fa:f1:5c:15:b1:21:82:5f:94:31:39:cf:19:f0:80:
09:5e:d9:6e:ae:d2:cd:cf:4a:63:19:88:e5:32:57:ab:50:a4:
77:e0:29:b3:bf:74:40:c2:c4:82:e5:de:d6:32:02:92:5e:f6:
cd:70:71:bf:8a:ab:70:20:fc:76:40:b4:9f:66:cd:95:3c:a7:
2f:27:ec:4a:dd:9d:cb:66:44:3a:68:64:2b:dc:b3:aa:a0:59:
62:82:78:6b:77:78:1b:a9:ca:3d:a1:cd:63:bc:c5:8b:5e:c9:
25:35:32:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:59:45 2026 by rpki-client