Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: 45H89H8jE0QMY28lUxkTU5yvo2iJcxfYCd8k6WJ8/9o=
Subject key identifier: D8:F9:6D:9E:F6:88:0D:9D:F2:A2:7E:5A:31:C1:FC:BE:CE:D8:C0:22
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 01A0DC16C1B6B64A2127C268523352B01707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0D7B
Signing time: Sat 26 Sep 2026 05:01:13 +0000
Manifest this update: Sat 26 Sep 2026 05:01:13 +0000
Manifest next update: Sun 27 Sep 2026 05:01:13 +0000
Files and hashes: 1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=)
2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: 5v68ywcX5H2pFUTXcRmD2XOPpxZuFON/TmwEaf9XQvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:c1:b6:b6:4a:21:27:c2:68:52:33:52:b0:17:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Sep 26 05:01:13 2026 GMT
Not After : Sep 27 05:01:13 2026 GMT
Subject: CN=d8f96d9ef6880d9df2a27e5a31c1fcbeced8c022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:16:02:8c:2b:3b:23:9a:8a:24:57:4b:a8:26:
99:7d:39:b1:e9:5e:68:67:e9:a1:25:82:64:8f:d0:
90:2c:5e:70:d9:40:26:61:33:93:43:8e:d1:97:56:
5c:ff:fd:c0:c8:ad:89:ad:85:0e:ca:d4:31:36:05:
0b:07:20:75:01:63:88:cf:64:e7:6a:aa:12:36:4b:
33:3c:e2:09:98:89:3d:da:97:13:ee:dd:1e:f0:cd:
19:96:3e:ee:b9:c0:c2:c4:18:21:2b:18:2f:dd:c5:
bf:c4:7f:8b:70:cd:37:f5:bd:72:c9:70:84:d8:6f:
cd:76:ec:16:a2:64:45:69:1a:c8:2a:9c:aa:9b:04:
d3:16:5b:1a:b1:59:1e:6a:8b:36:67:61:01:5a:5c:
4c:30:cd:b5:b1:3a:c8:30:5d:c0:fa:a2:d9:f1:5c:
07:8c:ce:d4:57:98:fc:a3:66:37:38:d0:22:eb:cf:
cb:c5:86:b9:e4:be:d7:fd:7b:ad:31:56:43:b3:6c:
cb:6f:d2:e0:5f:dc:12:65:24:06:db:35:d3:95:74:
50:42:41:cb:13:92:d7:ec:c4:11:77:ba:b1:e6:17:
34:5b:e0:6d:8b:90:c4:0e:98:9e:b6:4a:c8:fb:32:
8a:8e:87:ec:89:5a:84:c9:3d:9b:91:bc:e8:ac:6b:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F9:6D:9E:F6:88:0D:9D:F2:A2:7E:5A:31:C1:FC:BE:CE:D8:C0:22
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ed:ab:38:98:d7:85:24:93:04:0d:f1:8c:78:e0:aa:46:91:
ed:37:e3:ee:ab:21:bd:c5:f1:ba:b5:9d:33:f8:48:87:d1:3a:
53:c6:11:dc:5c:a3:4d:77:0f:af:db:cf:81:61:f3:42:6b:7a:
01:ff:20:e9:83:93:52:74:49:8b:5e:ba:92:e9:3c:ab:dc:88:
30:64:b3:43:5f:38:32:4c:7d:55:c3:e1:d0:0d:02:d6:27:85:
a7:58:e8:39:11:33:9a:91:60:09:c3:84:69:0b:f4:c7:4e:29:
4d:0f:a7:e9:39:a0:c4:b5:0e:e0:05:af:be:6a:6f:18:28:3a:
0e:23:0d:ed:59:60:bc:3c:ed:22:d3:48:23:0b:3c:bc:8e:07:
09:79:37:6c:87:c3:e4:a8:eb:06:32:50:a4:69:32:d0:c8:64:
f2:3e:90:8a:e1:d2:db:3f:7a:75:56:bb:72:f9:34:63:22:25:
23:8b:63:71:0b:21:76:3d:4e:85:79:89:7f:d8:07:4c:77:ac:
74:c9:dd:8c:5e:cd:a1:31:53:77:7e:3a:4d:07:25:54:86:0a:
00:2a:62:32:42:f6:e7:ac:a6:16:99:d5:dd:7b:ca:76:46:2a:
0e:46:a2:bc:1a:ea:ed:72:8b:a6:50:42:11:ce:39:d1:84:9d:
75:e9:bd:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcFsG2tkohJ8JoUjNSsBcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MzkzYmQxMzA1ZjZjYzQ0MzkxOTIxMTljNjA1ZjQ0YmJm
MDliYzkwHhcNMjYwOTI2MDUwMTEzWhcNMjYwOTI3MDUwMTEzWjAzMTEwLwYDVQQD
EyhkOGY5NmQ5ZWY2ODgwZDlkZjJhMjdlNWEzMWMxZmNiZWNlZDhjMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hYCjCs7I5qKJFdLqCaZfTmx6V5o
Z+mhJYJkj9CQLF5w2UAmYTOTQ47Rl1Zc//3AyK2JrYUOytQxNgULByB1AWOIz2Tn
aqoSNkszPOIJmIk92pcT7t0e8M0Zlj7uucDCxBghKxgv3cW/xH+LcM039b1yyXCE
2G/NduwWomRFaRrIKpyqmwTTFlsasVkeaos2Z2EBWlxMMM21sTrIMF3A+qLZ8VwH
jM7UV5j8o2Y3ONAi68/LxYa55L7X/XutMVZDs2zLb9LgX9wSZSQG2zXTlXRQQkHL
E5LX7MQRd7qx5hc0W+Bti5DEDpietkrI+zKKjofsiVqEyT2bkbzorGvpaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj5bZ72iA2d8qJ+WjHB/L7O2MAiMB8GA1UdIwQY
MBaAFOg5O9EwX2zEQ5GSEZxgX0S78JvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUt
YjA2ZmRhMDFmNDZjLzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUtYjA2ZmRhMDFmNDZj
LzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADu2rOJjX
hSSTBA3xjHjgqkaR7Tfj7qshvcXxurWdM/hIh9E6U8YR3FyjTXcPr9vPgWHzQmt6
Af8g6YOTUnRJi166kuk8q9yIMGSzQ184Mkx9VcPh0A0C1ieFp1joOREzmpFgCcOE
aQv0x04pTQ+n6TmgxLUO4AWvvmpvGCg6DiMN7VlgvDztItNIIws8vI4HCXk3bIfD
5KjrBjJQpGky0Mhk8j6QiuHS2z96dVa7cvk0YyIlI4tjcQshdj1OhXmJf9gHTHes
dMndjF7NoTFTd346TQclVIYKACpiMkL256ymFpnV3XvKdkYqDkaivBrq7XKLplBC
Ec450YSddem9qQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:32:12 2026 by rpki-client