Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: kESCKUQHKes4guCkxjPKjbKqv+Vb0SXx9AIzFGIosrU=
Subject key identifier: E4:F3:D2:BE:C8:29:0E:09:25:D8:86:7E:D2:C0:06:89:7A:18:4A:0E
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 01A0C2C3E3792A2B4AAFE15466D987F26C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 07:00:12 +0000
Manifest this update: Mon 21 Sep 2026 07:00:12 +0000
Manifest next update: Tue 22 Sep 2026 07:00:12 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: 6fdxYymDJz/TsJAyXi23YTQAEzyxSTXsCzL0gVEghHI=)
2: C5_CXUA-hhdUx_k-OWHw-aFPQjg.roa (hash: 5m8YSeYQsWZWPbqEN+OxCEF2VsF88Ekcd12LgCTpyv8=)
3: N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa (hash: 5lDjmIb8YsbwWstNUGh9BH6bOqCQpiLvBcN69JYx3C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:e3:79:2a:2b:4a:af:e1:54:66:d9:87:f2:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Sep 21 07:00:12 2026 GMT
Not After : Sep 22 07:00:12 2026 GMT
Subject: CN=e4f3d2bec8290e0925d8867ed2c006897a184a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:95:af:14:84:e6:aa:79:bf:1d:40:2b:0a:
36:c9:2b:bc:06:c3:0e:52:fa:c1:03:58:47:c3:04:
57:97:8c:34:61:7f:f0:6e:b9:27:4e:c0:ae:73:4b:
11:a4:60:fb:af:c0:26:0b:eb:df:86:ea:d9:78:4b:
75:85:3d:5c:62:fc:3a:d7:62:29:59:6e:7e:5e:9a:
29:00:22:35:ef:ae:be:c9:98:2e:de:ba:6e:35:f1:
86:89:4f:73:19:60:b8:29:58:b9:84:bd:da:32:b4:
c8:34:c9:da:5b:9b:80:4b:67:fb:b8:21:97:53:d3:
5c:3a:9a:1e:5a:54:19:8e:38:df:65:3b:5d:25:f4:
de:d9:d4:28:f8:36:54:0b:9b:ab:3a:0c:7b:6d:6f:
41:fc:22:a1:cf:1e:fc:24:8f:c6:05:89:2f:5d:09:
56:ec:c9:cd:23:97:22:e2:2d:5a:47:af:4e:11:12:
f7:4d:41:25:26:64:17:61:b7:87:92:c9:e6:50:c5:
ea:69:17:6e:8a:67:fa:d7:35:88:79:6e:5d:48:71:
67:cd:87:0a:67:4b:8f:a2:c3:85:51:b0:be:5a:05:
02:2a:49:94:29:8e:c9:ce:73:63:9a:59:c1:33:e7:
46:8f:88:1a:0d:5a:e6:88:e4:95:f8:a7:56:7d:7b:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F3:D2:BE:C8:29:0E:09:25:D8:86:7E:D2:C0:06:89:7A:18:4A:0E
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:08:61:f7:c5:76:d8:31:c1:0c:1a:f7:4f:f0:b3:bf:ef:9a:
a5:fb:93:d5:ae:27:97:f5:59:80:3a:1e:b1:c9:81:f8:2e:ef:
f8:2d:3b:ed:bf:c8:4f:ea:0c:c2:4a:b0:5d:5c:48:e0:60:fc:
5d:94:2a:34:c0:70:5c:b4:49:ab:0c:49:cc:c2:fd:f5:54:c8:
3c:25:49:62:cf:f5:e8:ae:ea:bb:55:fa:e5:2d:69:a6:1d:75:
f7:36:79:94:37:00:d2:a4:f2:24:3b:54:51:34:74:5b:f3:02:
cb:f1:18:21:bf:17:4f:39:15:76:a9:56:5f:b5:be:90:02:5d:
3e:50:a8:c4:00:55:31:a6:4f:4d:7a:3e:2a:28:a9:bb:72:03:
09:42:42:40:66:e7:66:a0:3a:08:58:3f:16:ae:69:85:d2:42:
7d:1e:85:5b:b9:0f:11:a6:a1:af:12:c6:a1:12:3e:50:80:85:
d6:78:a9:75:3e:33:38:13:19:4e:92:d4:9a:7b:2e:62:cc:9a:
96:54:38:ae:48:69:c8:5d:ec:64:4c:8c:e4:7d:59:07:f6:97:
fa:08:af:e9:a2:31:05:4f:fb:be:e0:9b:15:e1:8e:57:cb:5c:
e3:03:c5:85:8f:25:d3:06:42:82:a7:80:c4:10:be:25:13:1f:
2b:3f:cc:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCw+N5KitKr+FUZtmH8mwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGYwOGQ0ZWUxZjk0Zjk4NDQ5M2I0NjdiZDhhY2EyYWRm
YTI4NjYwHhcNMjYwOTIxMDcwMDEyWhcNMjYwOTIyMDcwMDEyWjAzMTEwLwYDVQQD
EyhlNGYzZDJiZWM4MjkwZTA5MjVkODg2N2VkMmMwMDY4OTdhMTg0YTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstuVrxSE5qp5vx1AKwo2ySu8BsMO
UvrBA1hHwwRXl4w0YX/wbrknTsCuc0sRpGD7r8AmC+vfhurZeEt1hT1cYvw612Ip
WW5+XpopACI1766+yZgu3rpuNfGGiU9zGWC4KVi5hL3aMrTINMnaW5uAS2f7uCGX
U9NcOpoeWlQZjjjfZTtdJfTe2dQo+DZUC5urOgx7bW9B/CKhzx78JI/GBYkvXQlW
7MnNI5ci4i1aR69OERL3TUElJmQXYbeHksnmUMXqaRduimf61zWIeW5dSHFnzYcK
Z0uPosOFUbC+WgUCKkmUKY7JznNjmlnBM+dGj4gaDVrmiOSV+KdWfXuf8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTz0r7IKQ4JJdiGftLABol6GEoOMB8GA1UdIwQY
MBaAFOoPCNTuH5T5hEk7RnvYrKKt+ihmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUt
MmVmYjQ2MWZkNDEzLzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUtMmVmYjQ2MWZkNDEz
LzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeghh98V2
2DHBDBr3T/Czv++apfuT1a4nl/VZgDoescmB+C7v+C077b/IT+oMwkqwXVxI4GD8
XZQqNMBwXLRJqwxJzML99VTIPCVJYs/16K7qu1X65S1pph119zZ5lDcA0qTyJDtU
UTR0W/MCy/EYIb8XTzkVdqlWX7W+kAJdPlCoxABVMaZPTXo+Kiipu3IDCUJCQGbn
ZqA6CFg/Fq5phdJCfR6FW7kPEaahrxLGoRI+UICF1nipdT4zOBMZTpLUmnsuYsya
llQ4rkhpyF3sZEyM5H1ZB/aX+giv6aIxBU/7vuCbFeGOV8tc4wPFhY8l0wZCgqeA
xBC+JRMfKz/MDA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:33:18 2026 by rpki-client