Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
File: 6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft (raw, json)
Hash identifier: MURtdNaAS1ZU9FIfOflsH80kJjRQGjQqV8DCVaDTQNU=
Subject key identifier: 8E:76:D4:50:B0:E3:40:70:75:1F:1B:71:35:2B:AC:99:75:C5:16:DB
Authority key identifier: E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13
Certificate issuer: /CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13
Certificate serial: 01A1DBA68A8DF32660EAB8098FEAAEA59052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
Manifest number: 1AF7
Signing time: Sat 14 Nov 2026 20:01:27 +0000
Manifest this update: Sat 14 Nov 2026 20:01:27 +0000
Manifest next update: Sun 15 Nov 2026 20:01:27 +0000
Files and hashes: 1: 5nMoTtXtLgnFlucAXgivnNRIQFA.asa (hash: 3BMjrBI1wsKqx8J3mxZlSg5C1hn0bo6ipDAcD0rXrVo=)
2: 6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl (hash: z3vwWytfQyqqQcjEFwh7S512RyoGA6bxmA4djkjfV/s=)
3: Dyqip5HlZG1j3jgqm5GWpecOrms.roa (hash: eZXfx32LLCAYzTbTHsucPX8yagv3eduCVAzvtgpLqUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:a6:8a:8d:f3:26:60:ea:b8:09:8f:ea:ae:a5:90:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13
Validity
Not Before: Nov 14 20:01:27 2026 GMT
Not After : Nov 15 20:01:27 2026 GMT
Subject: CN=8e76d450b0e34070751f1b71352bac9975c516db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b2:b0:f3:3a:c8:b4:d6:cb:9a:e0:d1:73:0a:
70:7b:2e:74:dd:18:a7:58:32:d9:4f:92:e0:96:77:
af:d7:49:a9:cf:9f:6d:36:fb:0b:7f:ce:f5:74:88:
1e:57:72:35:bb:47:c3:e2:2f:ea:fd:23:a2:c9:00:
9e:3d:42:c7:96:59:6a:6e:42:38:33:98:fa:70:09:
5d:82:67:bc:d6:3c:09:3f:67:42:db:f9:a9:9a:e6:
5a:41:f9:c3:c9:23:c5:28:42:e1:7f:d7:e3:e3:b6:
65:57:e4:39:6e:22:ed:0e:49:f3:7a:60:2f:a6:f6:
46:23:3a:ef:3e:2d:b2:7d:d4:1f:75:cb:e7:7f:f3:
ea:70:8d:d6:6b:56:e9:b2:53:65:36:28:3e:2e:75:
0c:45:bd:2b:61:ac:5c:d2:07:23:2b:27:b5:8b:37:
1d:5a:5b:ab:f4:13:dc:91:85:8d:81:8a:50:f6:23:
74:8a:e1:77:0b:c2:2c:85:88:60:51:7e:1a:d5:31:
6c:21:31:b7:e8:a4:e1:82:b5:3d:77:a4:ac:98:6f:
e5:d1:04:31:b0:7f:5b:93:2d:f1:6c:5b:a4:9e:1f:
00:37:3f:44:a5:80:d6:a4:a7:73:45:7f:7e:c2:c9:
39:7b:da:bd:e4:f4:b3:f7:c7:ca:c6:17:da:bf:d4:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:76:D4:50:B0:E3:40:70:75:1F:1B:71:35:2B:AC:99:75:C5:16:DB
X509v3 Authority Key Identifier:
keyid:E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f3:d8:1e:63:e9:2a:32:1d:f7:3a:91:03:b7:4e:e3:e7:e8:
c1:4e:73:6d:98:e4:9f:6e:37:ba:51:b4:f2:48:cc:04:5c:b2:
ca:57:93:33:a6:1c:18:ee:a9:62:dc:24:3d:15:fb:01:ab:4d:
00:c6:51:f4:51:e6:dd:7a:6d:7c:fd:2d:10:d6:c6:29:bb:eb:
8f:21:f9:db:04:7f:bc:6a:0c:bb:5a:c4:60:be:6c:5d:06:2c:
a2:18:3c:10:d8:86:71:0b:c3:03:18:47:20:67:9d:1b:76:00:
55:f1:69:61:60:c6:1a:ab:51:49:7d:98:21:e9:43:af:de:f2:
77:37:95:d5:6e:91:40:fe:d8:6c:27:6c:54:05:f8:22:81:10:
d5:4b:dc:7e:49:51:bc:aa:01:56:67:65:0f:3a:39:80:e6:01:
b8:3b:70:6e:fa:ad:36:d5:58:8c:34:be:12:17:a5:51:13:b4:
0e:f8:f5:c9:46:cf:86:45:37:59:b3:30:2f:0a:ae:55:8f:94:
16:e2:e3:27:bc:31:55:dd:d4:78:91:cf:0c:c4:5e:07:1e:bc:
b1:50:44:09:c4:5d:96:e7:c1:d4:73:a2:6f:b5:66:63:ef:ef:
ce:7e:50:a5:d7:36:b7:2d:d0:c0:99:d4:18:3c:d1:08:3d:3a:
2d:1a:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:24:52 2026 by rpki-client