Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
File: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft (raw, json)
Hash identifier: 8Z+m3cLn+kma2rXuNNsOLDszsEvQ0g5W9XLqUWepY4Y=
Subject key identifier: 10:40:00:D5:7B:5A:DB:3A:1C:AE:BC:E0:AA:1F:6B:6A:68:D4:EF:20
Authority key identifier: E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED
Certificate issuer: /CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
Certificate serial: 01A0C96AD9A3DBCFA27E4001FBAB780F7D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
Manifest number: 02FA
Signing time: Tue 22 Sep 2026 14:00:17 +0000
Manifest this update: Tue 22 Sep 2026 14:00:17 +0000
Manifest next update: Wed 23 Sep 2026 14:00:17 +0000
Files and hashes: 1: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl (hash: OKAcquSgxqe7BRUauO5EIEJE4/7Vp0WoODI3ETMIl+c=)
2: H34_SM699ZKERT6hxcJhZ4iWFhA.asa (hash: LcP5vILTWhpM9U0pUBj8DZKaMz5evKsVfP9lC5BGBCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:d9:a3:db:cf:a2:7e:40:01:fb:ab:78:0f:7d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
Validity
Not Before: Sep 22 14:00:17 2026 GMT
Not After : Sep 23 14:00:17 2026 GMT
Subject: CN=104000d57b5adb3a1caebce0aa1f6b6a68d4ef20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:05:d2:29:48:4d:20:c4:26:73:b5:ed:22:
a4:7a:6d:af:cc:69:2d:45:ce:35:aa:32:b7:a5:2b:
e9:c2:bf:eb:a6:fe:82:39:b6:5a:14:87:d6:12:d6:
04:c6:d0:12:bb:6a:dd:e3:78:2b:98:57:4d:7b:b8:
b2:29:34:a8:84:e0:0e:5d:47:e0:b0:4f:72:0c:79:
1b:c7:28:79:49:bc:fd:60:97:6d:60:08:6f:59:ca:
e0:1d:78:66:fb:99:b4:14:74:a2:cd:74:18:0f:66:
dc:74:1d:5f:71:0a:14:0e:4b:23:85:47:10:8c:39:
4f:23:06:2a:cc:10:b8:73:1e:b3:32:a6:27:f7:eb:
9e:c7:20:ae:c1:0b:b6:56:87:9a:ba:88:24:0b:ae:
c6:d2:f7:93:59:94:67:32:b4:31:e0:15:5e:36:74:
a0:da:f1:37:7a:56:75:b7:f0:3d:4d:ce:2c:f5:95:
b5:8f:20:c9:c5:7a:4f:b0:5b:58:0f:31:92:2d:c1:
b2:e7:ba:b8:c7:14:7c:d3:57:ed:58:f4:59:2f:7e:
d5:ae:4f:71:46:00:ba:d9:93:27:2d:a2:5a:85:20:
dd:f8:fb:64:69:e1:b2:c3:d3:33:1d:e0:1d:68:09:
67:fa:c8:66:3f:81:25:37:6d:fb:fc:1a:a0:4f:5e:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:40:00:D5:7B:5A:DB:3A:1C:AE:BC:E0:AA:1F:6B:6A:68:D4:EF:20
X509v3 Authority Key Identifier:
keyid:E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:96:fb:6c:a7:4a:2f:69:09:a1:02:b0:d6:71:9d:0b:da:2f:
09:95:fe:f4:6d:7e:4f:e8:d4:67:0f:91:ad:6b:98:88:76:72:
e4:78:a5:7f:e7:56:6f:05:51:9f:c9:99:9d:00:df:05:86:c0:
e0:45:87:4c:79:4c:9d:ad:35:04:99:01:c4:81:50:8c:c5:da:
7c:f2:ac:aa:23:34:28:27:d3:27:95:e5:b1:44:66:67:55:76:
17:54:51:69:eb:da:5a:20:3a:18:d6:ad:71:2f:c4:bf:97:be:
47:77:4d:12:b4:3c:b3:1f:a7:e2:93:76:71:6a:b1:d3:c7:ae:
d3:d2:b1:60:d8:cf:83:92:10:13:d1:a9:37:91:29:63:bb:b0:
66:20:a2:7e:76:fc:95:4b:8c:dd:8e:40:5b:88:48:d2:d2:1f:
8d:f2:2a:43:6f:59:b0:6e:bb:8c:4a:bc:a7:6c:c5:1c:54:39:
77:af:2d:23:1f:71:f5:87:a2:c2:07:00:71:82:cd:f5:26:ef:
d2:cd:25:1e:39:09:05:9d:26:d2:4e:c3:8b:4f:e5:0b:75:46:
e2:43:b2:4b:22:84:96:d0:93:e8:95:8f:5c:d4:71:b5:08:37:
c0:40:67:8d:fb:c5:bd:eb:fb:7c:21:6d:03:09:32:a5:97:36:
96:cd:0b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:33:53 2026 by rpki-client