Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
File: 6D-DcLFcuReWVQPKADcyMthXqp0.mft (raw, json)
Hash identifier: TO7oH9VbUTmvx2vcEMLG7nYPyo/1Z3QK8P5iSeXgJc8=
Subject key identifier: 6F:A6:99:9C:98:D7:B2:D3:69:87:D6:75:78:95:EA:4C:E7:06:E5:E3
Authority key identifier: E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
Certificate issuer: /CN=e83f8370b15cb917965503ca00373232d857aa9d
Certificate serial: 01A0C5FC82CBEBD48DFE7BBCFCA24AD56006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
Manifest number: 1559
Signing time: Mon 21 Sep 2026 22:00:55 +0000
Manifest this update: Mon 21 Sep 2026 22:00:55 +0000
Manifest next update: Tue 22 Sep 2026 22:00:55 +0000
Files and hashes: 1: 6D-DcLFcuReWVQPKADcyMthXqp0.crl (hash: kBPstakSWmCWlvw/gqHUP2wVKFQ8N/L+NJi30KOQHMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:82:cb:eb:d4:8d:fe:7b:bc:fc:a2:4a:d5:60:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e83f8370b15cb917965503ca00373232d857aa9d
Validity
Not Before: Sep 21 22:00:55 2026 GMT
Not After : Sep 22 22:00:55 2026 GMT
Subject: CN=6fa6999c98d7b2d36987d6757895ea4ce706e5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4e:06:6b:c5:c7:5f:54:7f:b7:48:32:61:94:
77:c5:6f:d0:77:4e:0a:34:dd:05:e9:e3:d6:0a:c3:
55:91:ee:68:aa:49:4c:c8:99:c2:ac:e0:22:84:f7:
76:36:3a:90:e2:34:d0:35:07:c1:26:10:c1:52:a1:
7d:38:76:3a:25:49:61:94:68:05:9e:21:79:43:34:
3b:f2:30:00:00:fe:3f:dc:97:34:15:c7:37:c5:c3:
e5:60:2a:b8:29:41:39:31:ac:72:83:13:be:da:2e:
f2:e5:41:35:17:c9:2d:6f:c9:2a:dc:2b:29:31:71:
ce:93:d3:e8:30:eb:c8:57:dd:8b:f2:de:18:7e:a7:
d5:89:77:62:f3:21:f4:e0:94:40:80:dd:d7:67:c2:
59:71:2a:d7:09:f9:4e:52:ba:16:4a:04:97:6f:5c:
e7:09:91:53:ba:a1:05:18:99:85:21:5d:2f:61:52:
c9:e3:b5:71:1d:a2:14:a6:ae:6d:5a:89:81:9a:5a:
ff:bf:bd:9f:f4:16:65:73:fe:ce:71:d7:eb:8b:b9:
73:e4:7b:a2:c9:60:31:0b:fd:71:57:a4:3b:9b:dc:
13:97:58:2c:27:eb:03:51:9f:94:fe:bc:0f:58:2b:
f3:76:02:e2:2c:52:de:fe:a0:18:f1:14:ce:fc:be:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A6:99:9C:98:D7:B2:D3:69:87:D6:75:78:95:EA:4C:E7:06:E5:E3
X509v3 Authority Key Identifier:
keyid:E8:3F:83:70:B1:5C:B9:17:96:55:03:CA:00:37:32:32:D8:57:AA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6D-DcLFcuReWVQPKADcyMthXqp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/67141c-d66e-420b-88e1-368cb95d18ca/1/6D-DcLFcuReWVQPKADcyMthXqp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:37:3f:46:81:00:83:b9:fa:04:97:a1:b5:14:9d:67:8b:ea:
6d:97:9f:aa:63:ed:01:c0:63:84:47:dd:c2:bf:7e:bf:29:d9:
db:38:ea:ea:09:81:22:eb:36:ab:a2:71:08:4c:df:f4:b2:d7:
e8:d4:91:21:b2:6c:4f:f7:eb:0b:b7:ac:8c:19:6c:51:d0:e1:
e7:33:54:10:99:ae:fb:56:ea:62:78:08:ca:96:ea:23:14:ec:
a8:f6:23:e8:64:dd:d4:fc:7a:9f:65:8f:37:8a:03:d9:30:2e:
11:10:30:83:9d:3c:55:e0:5e:1b:7d:58:f7:2c:f9:cb:4a:46:
3a:f2:14:25:df:b9:9f:55:a8:c4:1b:4e:82:41:83:dd:49:1f:
d3:7b:66:72:39:b8:54:3d:68:b3:e3:f3:de:38:97:b2:87:76:
9b:85:71:02:ce:e3:d7:d3:84:78:fb:0a:f1:44:81:57:70:ee:
00:ee:6a:e0:6b:23:eb:a4:fb:2b:64:b1:29:ae:f4:36:8b:43:
b7:e2:c3:07:fd:59:c2:eb:c0:21:b7:f1:27:fa:19:c6:b7:c3:
ad:0d:7d:bb:9d:cc:0a:0b:07:9b:0a:26:02:5e:24:c9:1e:ec:
2c:dd:1a:38:4a:69:74:55:7f:04:c3:75:28:a9:5a:6e:c5:54:
1b:8d:74:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDF/ILL69SN/nu8/KJK1WAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4M2Y4MzcwYjE1Y2I5MTc5NjU1MDNjYTAwMzczMjMyZDg1
N2FhOWQwHhcNMjYwOTIxMjIwMDU1WhcNMjYwOTIyMjIwMDU1WjAzMTEwLwYDVQQD
Eyg2ZmE2OTk5Yzk4ZDdiMmQzNjk4N2Q2NzU3ODk1ZWE0Y2U3MDZlNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk4Ga8XHX1R/t0gyYZR3xW/Qd04K
NN0F6ePWCsNVke5oqklMyJnCrOAihPd2NjqQ4jTQNQfBJhDBUqF9OHY6JUlhlGgF
niF5QzQ78jAAAP4/3Jc0Fcc3xcPlYCq4KUE5MaxygxO+2i7y5UE1F8ktb8kq3Csp
MXHOk9PoMOvIV92L8t4YfqfViXdi8yH04JRAgN3XZ8JZcSrXCflOUroWSgSXb1zn
CZFTuqEFGJmFIV0vYVLJ47VxHaIUpq5tWomBmlr/v72f9BZlc/7Ocdfri7lz5Hui
yWAxC/1xV6Q7m9wTl1gsJ+sDUZ+U/rwPWCvzdgLiLFLe/qAY8RTO/L72awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+mmZyY17LTaYfWdXiV6kznBuXjMB8GA1UdIwQY
MBaAFOg/g3CxXLkXllUDygA3MjLYV6qdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkQtRGNMRmN1UmVXVlFQS0FEY3lNdGhYcXAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82NzE0MWMtZDY2ZS00MjBiLTg4ZTEt
MzY4Y2I5NWQxOGNhLzEvNkQtRGNMRmN1UmVXVlFQS0FEY3lNdGhYcXAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS82NzE0MWMtZDY2ZS00MjBiLTg4ZTEtMzY4Y2I5NWQxOGNh
LzEvNkQtRGNMRmN1UmVXVlFQS0FEY3lNdGhYcXAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTc/RoEA
g7n6BJehtRSdZ4vqbZefqmPtAcBjhEfdwr9+vynZ2zjq6gmBIus2q6JxCEzf9LLX
6NSRIbJsT/frC7esjBlsUdDh5zNUEJmu+1bqYngIypbqIxTsqPYj6GTd1Px6n2WP
N4oD2TAuERAwg508VeBeG31Y9yz5y0pGOvIUJd+5n1WoxBtOgkGD3Ukf03tmcjm4
VD1os+Pz3jiXsod2m4VxAs7j19OEePsK8USBV3DuAO5q4Gsj66T7K2SxKa70NotD
t+LDB/1ZwuvAIbfxJ/oZxrfDrQ19u53MCgsHmwomAl4kyR7sLN0aOEppdFV/BMN1
KKlabsVUG410Yw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:14:08 2026 by rpki-client