Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier: Yx6n48uD2OdHhCRG7aZBYJjDag1WLDG6CEDov5gqeWI=
Subject key identifier: B3:69:BD:2E:85:5F:B9:8A:1C:95:6F:8B:87:EE:00:9D:0C:C2:35:C8
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial: 01A0CC6BFAFA3C0073761FA323C41814C214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 04:00:23 +0000
Manifest this update: Wed 23 Sep 2026 04:00:23 +0000
Manifest next update: Thu 24 Sep 2026 04:00:23 +0000
Files and hashes: 1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: 59FwdCcopGlr6jW4N/zr+VJay10ee+7ihX5txXMo0WU=)
2: A8PCXHYtPKOyp3MabVe-odhqYuU.roa (hash: BBukl0iR4BOT3LGjsYPG4CkyN4d3K0S/00+hEdW+8z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:fa:fa:3c:00:73:76:1f:a3:23:c4:18:14:c2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Validity
Not Before: Sep 23 04:00:23 2026 GMT
Not After : Sep 24 04:00:23 2026 GMT
Subject: CN=b369bd2e855fb98a1c956f8b87ee009d0cc235c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:3c:84:bb:82:33:39:d6:13:b3:d0:0f:94:
b8:6c:b2:14:46:f5:c4:f2:6a:6b:a0:d1:59:23:6b:
5d:fb:a7:74:b1:9c:ff:69:8c:37:71:51:dd:00:db:
26:89:16:64:33:f9:19:10:ee:56:30:47:23:4b:ba:
a6:2c:e2:10:ed:5b:74:4f:35:00:30:86:8f:2a:43:
49:f6:f7:f7:15:19:0d:61:30:7a:96:37:c8:57:d7:
e6:ac:e1:9e:80:93:a7:39:1d:d9:3e:ad:01:80:c1:
d4:5d:8b:a1:93:b5:d5:fc:d1:37:6d:43:35:c0:69:
46:ed:df:26:7e:ab:81:8a:b1:58:3f:8a:61:f4:21:
80:46:cf:e0:c2:68:bf:01:91:7f:e3:d1:cf:ec:47:
31:a1:e5:17:f8:d7:06:cf:44:e2:1d:d0:84:4f:a3:
18:50:bf:8c:cd:ea:f0:50:e9:8f:26:94:0a:c4:08:
e5:06:6e:cd:be:48:6c:a8:68:36:39:b0:e2:51:f7:
d0:6e:f6:46:bd:e1:01:99:21:2b:4b:90:0b:3c:dc:
f6:16:cd:27:e6:1f:e3:51:42:7e:4b:b9:53:45:e0:
62:c4:ac:e3:a3:3d:a3:dc:5e:3c:7e:29:18:fb:90:
f7:90:a9:84:f5:40:4e:8b:3b:70:4c:a7:75:38:03:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:69:BD:2E:85:5F:B9:8A:1C:95:6F:8B:87:EE:00:9D:0C:C2:35:C8
X509v3 Authority Key Identifier:
keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4d:3f:12:a7:c9:05:13:f7:01:60:8d:d4:85:c7:94:63:16:
f5:74:9a:b2:90:cd:c8:55:c6:79:0b:0c:7f:7c:f4:f4:25:ea:
37:42:ae:98:44:ec:7f:8f:09:37:38:d5:71:3f:b5:31:0d:63:
f0:f9:e7:8a:b4:66:bd:17:c6:de:24:12:c7:fe:5f:ca:2a:2d:
be:30:b7:56:0c:00:cf:a8:6c:2a:e6:8e:61:c8:51:b7:32:44:
9a:a1:04:c7:0c:d6:f2:23:2e:7a:82:bb:10:16:8f:33:ca:cb:
b3:d3:4e:41:36:8a:95:3b:5f:68:61:c2:d3:0a:89:4b:3f:27:
c6:b3:8e:83:fa:c5:bf:41:29:70:de:08:e2:d1:6f:fd:67:47:
c3:71:5b:5a:fb:92:7c:6d:50:74:fd:6d:e7:35:ac:16:fe:b7:
ce:51:01:73:a7:02:62:ef:ab:62:98:cb:11:67:ea:75:ac:2f:
b7:9a:82:73:f1:38:c8:8e:57:33:36:44:94:0e:c1:22:ee:e3:
1b:59:c5:ae:00:d2:4b:b9:cc:ea:cf:60:67:a6:13:2c:ca:f2:
1b:e2:e5:98:db:78:fd:7c:71:bf:12:e3:3c:34:e0:8a:8c:59:
c7:2a:55:8f:22:e7:31:5a:c7:aa:ec:ee:aa:97:09:b8:e0:07:
5d:af:a9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:45:36 2026 by rpki-client