
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
File: rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft (raw, json)
Hash identifier: VoUbjWl1Mx5hp6bteXW8/ciC18OB5XozsxBfNN++Tew=
Subject key identifier: 61:A6:4B:FA:B5:C7:41:1D:A3:BA:B0:D5:0E:09:4F:3D:E1:E4:AA:F2
Authority key identifier: AC:C6:E6:DF:87:D9:99:6C:5A:23:57:40:EC:5E:43:AF:D2:DE:D8:F4
Certificate issuer: /CN=acc6e6df87d9996c5a235740ec5e43afd2ded8f4
Certificate serial: 01A12C578FB587EAD7F83BB114D5882E5AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
Manifest number: D6
Signing time: Sun 11 Oct 2026 19:01:38 +0000
Manifest this update: Sun 11 Oct 2026 19:01:38 +0000
Manifest next update: Mon 12 Oct 2026 19:01:38 +0000
Files and hashes: 1: QSWjo5_DxLn3VxAudtaPC2FnwM0.roa (hash: 1mFyEckr7ZMS8v3pxO2ED4j5izEiaVLcu9avDOseeO0=)
2: rMbm34fZmWxaI1dA7F5Dr9Le2PQ.crl (hash: arp3PhNXJFB1lIclrMGjpeW3sge6mbd11sN3bGrcZNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:8f:b5:87:ea:d7:f8:3b:b1:14:d5:88:2e:5a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc6e6df87d9996c5a235740ec5e43afd2ded8f4
Validity
Not Before: Oct 11 19:01:38 2026 GMT
Not After : Oct 12 19:01:38 2026 GMT
Subject: CN=61a64bfab5c7411da3bab0d50e094f3de1e4aaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:81:70:1e:b2:e7:c4:60:b9:2c:d3:85:2b:
0e:d3:1e:56:e7:27:8a:47:bd:1a:14:43:7a:e5:e3:
6d:68:39:89:35:41:3f:3b:2b:67:58:7f:4c:6f:f5:
48:e7:ea:59:5b:d4:d6:47:af:7b:c8:3d:f7:3a:fd:
77:72:b6:ac:b8:33:88:6f:a4:95:0e:d1:f4:d0:28:
4c:43:41:d7:65:37:f2:80:83:1c:06:78:1b:a2:84:
18:fa:4f:ed:36:08:ff:2d:df:9f:71:55:9c:87:fb:
0f:f2:9a:c7:d7:a7:44:8f:4b:51:7d:16:83:87:6d:
c3:3a:c9:f1:d9:4d:19:54:11:88:f8:bf:55:4d:95:
07:1f:9c:8d:d9:76:5c:59:59:91:32:55:64:71:25:
9e:3e:53:f3:b4:69:80:5c:7d:eb:db:8a:81:62:99:
b3:d7:9d:4f:b2:a8:cf:75:05:d5:6c:18:37:8c:23:
7a:21:d6:cc:c6:49:74:8c:c0:c6:13:96:1f:bf:3f:
89:a5:1e:f6:63:59:ea:aa:b7:1e:67:82:7e:27:3f:
d8:c7:1b:b7:95:7f:cd:8d:89:c2:a9:3b:35:b6:1f:
01:59:d4:91:97:75:e6:7e:ed:c4:91:bf:a8:74:bc:
b7:c0:12:15:9e:cd:bc:22:93:f9:da:7a:25:92:a8:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A6:4B:FA:B5:C7:41:1D:A3:BA:B0:D5:0E:09:4F:3D:E1:E4:AA:F2
X509v3 Authority Key Identifier:
keyid:AC:C6:E6:DF:87:D9:99:6C:5A:23:57:40:EC:5E:43:AF:D2:DE:D8:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1f:12:2b:c9:ea:df:92:43:fa:d7:2f:01:a7:d8:25:90:ae:
83:85:e7:c3:d7:e1:06:58:b3:7e:92:8e:24:83:40:5f:c5:09:
79:f5:e6:1e:b6:f9:6b:07:64:5b:af:f3:42:d4:47:2a:79:e6:
56:ad:9a:e1:62:52:2f:17:21:2e:52:df:b9:19:94:ad:f9:36:
f8:da:07:ea:55:6a:45:e2:ec:a9:2f:fb:da:9c:27:65:a4:33:
62:e0:78:ec:35:71:a5:c4:31:6f:28:bc:d2:70:5d:64:6d:27:
51:0a:ff:32:ce:ea:66:e7:52:e5:fa:58:b3:4f:0e:03:3b:6e:
ac:4d:21:99:78:c7:f8:14:5f:75:72:de:8c:78:fc:f2:b2:5f:
08:9c:b8:2b:d7:fc:88:0d:6c:1b:cb:24:bd:47:82:aa:39:c2:
be:f0:be:4f:77:64:63:72:98:83:6a:a5:af:07:51:b0:07:77:
2e:e7:de:9c:2d:2a:98:a9:33:c4:2e:f9:93:88:18:8b:e9:f7:
ab:bf:ab:c8:66:b3:66:2d:b5:26:c5:9c:b0:74:83:d1:28:39:
82:e8:ca:9a:71:5e:69:25:82:fb:4a:01:9b:ac:a1:b3:3c:34:
2b:44:ee:c1:2e:88:14:ce:6b:ea:55:2d:66:24:fe:8d:c6:aa:
05:85:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:46:50 2026 by rpki-client