Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: TP3HjA8ko1bo1y6leDBxX/Fh52xjnU5jrfAZhCjziTs=
Subject key identifier: E3:F4:AF:25:DE:CD:FF:D7:75:94:DF:95:DE:C2:CA:45:83:F0:AA:41
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 01A1C39D68C5714C45CC7B929E873468923C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 1AE9
Signing time: Tue 10 Nov 2026 04:00:35 +0000
Manifest this update: Tue 10 Nov 2026 04:00:35 +0000
Manifest next update: Wed 11 Nov 2026 04:00:35 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: QLBTCb/ZHRZN+oE6K1wZZ2g8eZD9V12ngD8WoPGytko=)
2: C5_CXUA-hhdUx_k-OWHw-aFPQjg.roa (hash: 5m8YSeYQsWZWPbqEN+OxCEF2VsF88Ekcd12LgCTpyv8=)
3: N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa (hash: 5lDjmIb8YsbwWstNUGh9BH6bOqCQpiLvBcN69JYx3C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:9d:68:c5:71:4c:45:cc:7b:92:9e:87:34:68:92:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Nov 10 04:00:35 2026 GMT
Not After : Nov 11 04:00:35 2026 GMT
Subject: CN=e3f4af25decdffd77594df95dec2ca4583f0aa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:72:91:a0:72:f0:05:50:3c:54:42:81:f7:
b9:86:30:19:6a:cf:f2:f5:8a:a6:f4:b3:33:3f:25:
dc:ee:9d:ea:6c:83:fa:16:a1:f6:a2:36:7b:19:9a:
8e:ba:35:69:d2:47:52:3e:e4:8e:1d:99:63:4b:95:
f1:cb:d1:79:30:3a:32:1d:04:64:8f:ef:78:31:df:
b2:d4:d2:c9:70:51:0a:1c:fd:db:6a:4a:00:dc:5a:
fa:d4:5b:e4:92:4a:df:e3:52:be:a3:bd:5c:f8:5a:
f8:a4:cb:bc:df:bb:96:67:85:16:17:40:db:95:ca:
66:b7:ac:a4:9f:a7:ea:62:b8:e2:25:7b:73:86:5d:
74:eb:39:5f:4c:89:8d:1f:43:34:29:84:14:7a:77:
e1:61:99:dd:32:a3:63:15:21:0d:28:dd:2e:13:f5:
7a:d4:94:f1:2b:a0:39:44:3e:04:7e:a3:38:86:4c:
99:ed:b6:3c:8d:46:a0:c9:1d:d0:a0:47:83:bb:b3:
19:0a:ac:4c:3e:91:62:7f:f7:a2:f2:aa:2c:3b:f0:
bd:6d:b4:e4:b8:ce:ed:a8:73:7a:26:d0:72:69:54:
5a:2d:34:22:04:10:2a:1f:c2:28:4f:bf:c3:d1:38:
4a:0f:7c:97:fe:03:5f:9a:7e:72:42:85:b3:95:9d:
d0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F4:AF:25:DE:CD:FF:D7:75:94:DF:95:DE:C2:CA:45:83:F0:AA:41
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:92:2c:3b:2a:d3:21:10:4e:ec:c7:24:c7:00:35:43:77:d1:
a3:9a:6d:0e:b2:86:e1:f1:28:46:4b:90:db:8d:68:aa:fe:35:
a0:22:b7:f4:63:8d:ad:f9:46:5a:83:77:7d:32:bd:47:63:42:
e0:16:43:b9:2e:e7:91:c5:8e:68:16:22:ec:ae:58:7b:cb:23:
af:ce:61:ec:71:30:22:fd:9f:34:6f:4c:74:9d:77:0a:2c:48:
48:76:65:8f:72:13:d9:67:0a:65:91:39:bf:4c:f1:80:9f:36:
11:13:ef:f5:bb:49:71:90:7c:40:d2:4f:14:c9:0f:da:a8:51:
d1:98:38:e3:81:eb:f5:16:3a:dd:42:89:93:d1:b7:d0:fa:5b:
60:58:6c:66:f5:21:f2:53:7f:93:64:d5:c2:65:88:a4:dc:ca:
6c:91:22:7b:03:59:68:47:eb:90:b5:ca:61:d8:4a:ba:bb:88:
6c:d2:83:25:44:f6:f3:ad:14:d1:ba:1b:04:cd:75:c0:4a:3c:
3a:82:dc:5d:59:61:f3:00:2f:a6:59:cd:3c:43:a9:de:6c:18:
e1:38:82:9d:4b:5d:e3:e8:4c:67:33:ec:a6:6e:67:ea:8e:34:
40:ec:5c:c6:bc:c3:bd:b5:91:db:40:b1:e3:93:f5:9d:da:09:
e6:fa:80:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 13:40:18 2026 by rpki-client