Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File: 6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier: IlzIIvEV31pJflW0CYZ94TPJ1RD+dhldY8IVFDuXRKM=
Subject key identifier: 69:B5:F6:ED:EE:34:10:79:1A:E5:D8:66:AF:ED:4D:EC:39:06:CF:5B
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer: /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial: 01A1C58C4ED702A75F69802DE03F977ECDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number: 1626
Signing time: Tue 10 Nov 2026 13:01:09 +0000
Manifest this update: Tue 10 Nov 2026 13:01:09 +0000
Manifest next update: Wed 11 Nov 2026 13:01:09 +0000
Files and hashes: 1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: N3BqAoeGQW1pluaD/CFpsa3BzF/piA5e5jH9w6X5sLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:8c:4e:d7:02:a7:5f:69:80:2d:e0:3f:97:7e:cd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Validity
Not Before: Nov 10 13:01:09 2026 GMT
Not After : Nov 11 13:01:09 2026 GMT
Subject: CN=69b5f6edee3410791ae5d866afed4dec3906cf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:96:5f:5b:cb:38:36:47:9b:31:7e:84:33:f6:
5d:59:f0:45:df:96:6c:8b:75:df:8c:1f:23:94:6f:
91:29:dc:fc:3e:1c:77:8c:1c:ba:f2:f0:ea:fb:84:
e6:8a:e1:d9:52:32:1e:e4:1a:8e:25:86:17:7d:ea:
a2:9e:77:68:d2:a3:42:bb:01:42:87:85:7b:e6:55:
d6:14:f2:49:a0:ba:8e:b1:f1:59:92:37:77:5d:35:
e2:a8:d4:8a:08:1a:ae:02:0f:e7:71:3b:56:74:4e:
73:62:73:b4:36:1d:45:16:cf:eb:02:32:f9:20:b5:
70:0a:0f:9b:bf:03:17:5c:1e:1a:dd:12:f4:10:f5:
55:45:c4:51:74:0d:c5:25:84:f6:bc:ac:73:6a:12:
23:fe:5e:14:07:f4:03:96:1c:10:ef:f8:f9:e9:24:
e1:c5:3d:b9:a1:68:0a:36:4a:8e:18:48:b0:db:ca:
5a:e3:2b:f9:b4:bc:b2:41:ac:07:aa:3d:0d:36:5c:
c1:9d:ac:b3:b6:85:2e:f1:f2:6e:22:14:09:dc:46:
70:f6:5a:be:42:07:4a:7b:89:de:b3:51:6c:b6:64:
5b:de:cc:91:fc:be:60:e1:9b:e3:bf:d3:69:a3:d5:
b1:3d:3b:85:12:6f:bf:20:e7:ba:ec:c5:49:6f:a2:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B5:F6:ED:EE:34:10:79:1A:E5:D8:66:AF:ED:4D:EC:39:06:CF:5B
X509v3 Authority Key Identifier:
keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:aa:9e:d8:f5:53:4e:4c:90:4b:0a:9c:be:94:37:0a:e8:fc:
14:09:a2:10:92:ee:5b:4d:b5:7c:27:1d:9f:9f:3e:b5:31:dd:
98:7e:cf:44:c5:60:ab:74:9d:81:e6:5e:72:99:2b:7a:9d:54:
80:f6:cf:64:5f:73:cb:e2:2c:28:d2:1d:e9:a0:b2:aa:07:6e:
d4:06:75:33:f9:18:53:7b:c6:71:09:cd:6d:67:60:5b:8d:9c:
ae:b7:3a:cc:21:be:15:ec:19:ef:f9:3c:c1:8d:76:1c:d4:09:
e0:76:d9:01:24:84:00:d3:ec:85:c0:81:40:d3:64:25:19:73:
57:55:44:19:a2:9b:c7:f6:a9:28:55:50:ea:5f:79:70:12:ba:
0d:63:71:8a:99:6d:e4:6a:50:91:9b:dc:e2:3b:14:7b:b8:d3:
8e:f5:f9:72:a4:77:8f:42:90:23:f0:53:2c:34:16:fa:e1:21:
9d:f0:eb:a6:19:8b:f1:45:6f:a3:86:51:cb:06:23:fa:c3:31:
31:42:6d:c8:9e:bd:26:a7:14:79:f5:71:df:c0:db:72:a9:ff:
81:3c:19:34:15:dc:5a:5a:49:21:a0:57:b2:b0:96:7b:94:e6:
83:1d:c7:df:7d:b7:b3:f4:3f:87:0e:e1:c2:b7:ee:3f:d0:19:
f3:7f:b7:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHFjE7XAqdfaYAt4D+Xfs3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzQ4M2I3NWMyZGIxY2Y5ZmY0ZTk0YzdhMGZkZjBkYjAw
MDBmMDAwHhcNMjYxMTEwMTMwMTA5WhcNMjYxMTExMTMwMTA5WjAzMTEwLwYDVQQD
Eyg2OWI1ZjZlZGVlMzQxMDc5MWFlNWQ4NjZhZmVkNGRlYzM5MDZjZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5ZfW8s4NkebMX6EM/ZdWfBF35Zs
i3XfjB8jlG+RKdz8Phx3jBy68vDq+4TmiuHZUjIe5BqOJYYXfeqinndo0qNCuwFC
h4V75lXWFPJJoLqOsfFZkjd3XTXiqNSKCBquAg/ncTtWdE5zYnO0Nh1FFs/rAjL5
ILVwCg+bvwMXXB4a3RL0EPVVRcRRdA3FJYT2vKxzahIj/l4UB/QDlhwQ7/j56STh
xT25oWgKNkqOGEiw28pa4yv5tLyyQawHqj0NNlzBnayztoUu8fJuIhQJ3EZw9lq+
QgdKe4nes1FstmRb3syR/L5g4Zvjv9Npo9WxPTuFEm+/IOe67MVJb6JQZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGm19u3uNBB5GuXYZq/tTew5Bs9bMB8GA1UdIwQY
MBaAFOjEg7dcLbHPn/TpTHoP3w2wAA8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zMWZkYTAtN2FhYS00NjFjLWEzNTIt
ZWIzNWJmYTA2NWFkLzEvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zMWZkYTAtN2FhYS00NjFjLWEzNTItZWIzNWJmYTA2NWFk
LzEvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqqe2PVT
TkyQSwqcvpQ3Cuj8FAmiEJLuW021fCcdn58+tTHdmH7PRMVgq3SdgeZecpkrep1U
gPbPZF9zy+IsKNId6aCyqgdu1AZ1M/kYU3vGcQnNbWdgW42crrc6zCG+FewZ7/k8
wY12HNQJ4HbZASSEANPshcCBQNNkJRlzV1VEGaKbx/apKFVQ6l95cBK6DWNxiplt
5GpQkZvc4jsUe7jTjvX5cqR3j0KQI/BTLDQW+uEhnfDrphmL8UVvo4ZRywYj+sMx
MUJtyJ69JqcUefVx38Dbcqn/gTwZNBXcWlpJIaBXsrCWe5Tmgx3H3323s/Q/hw7h
wrfuP9AZ83+3lA==
-----END CERTIFICATE-----
Generated at Tue Nov 10 20:16:45 2026 by rpki-client