Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
File: 6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft (raw, json)
Hash identifier: +8Gd+1Tr+IsJSKpdLHUrrI5Ge0EXQnCTSRZ2EEQCQ7U=
Subject key identifier: C9:12:13:13:37:39:CD:EA:E9:7E:08:F1:F0:52:FB:78:30:52:99:AA
Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
Certificate issuer: /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Certificate serial: 01A11AF57463BE535FE8D14397401C0D33E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
Manifest number: 194F
Signing time: Thu 08 Oct 2026 10:00:56 +0000
Manifest this update: Thu 08 Oct 2026 10:00:56 +0000
Manifest next update: Fri 09 Oct 2026 10:00:56 +0000
Files and hashes: 1: 6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl (hash: Er+XqURIJBYj1mkQzxMT6fRXpT79NDK4FvBHIghu5qA=)
2: JVnNDue1yDItEpFp0OCuNkyOxQM.roa (hash: rvpaHWXJ88W6TCf5XtdW918xCJCQp2lb/JSktVJEhS8=)
3: fPjMSTxjt-Lds7x8yst7wVIij2k.roa (hash: Glki/jEVDEe3pqTjGCU9qB4e+DKHJ+9x2LukEYA8hWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:74:63:be:53:5f:e8:d1:43:97:40:1c:0d:33:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Validity
Not Before: Oct 8 10:00:56 2026 GMT
Not After : Oct 9 10:00:56 2026 GMT
Subject: CN=c91213133739cdeae97e08f1f052fb78305299aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:de:33:ba:d0:d5:34:28:25:50:9c:ce:c3:
8b:e8:a9:43:12:7d:6e:97:31:4c:52:41:71:56:d5:
a9:d6:83:c0:e6:67:83:09:67:fe:29:64:b4:36:97:
50:de:e9:e5:50:0e:f3:84:20:3f:6a:a2:77:9c:e0:
45:dd:fd:46:2f:ef:6a:19:6c:31:51:16:cb:2d:16:
56:01:4c:d5:e8:af:11:17:22:df:bd:19:b7:ef:8f:
c8:81:cc:99:df:d0:5d:43:c5:81:c2:b1:b9:d0:6d:
a6:76:95:d1:25:90:7b:c9:78:6d:66:18:4b:2f:b0:
24:b4:02:01:39:97:88:9a:11:90:3a:e7:49:65:7d:
0f:9b:19:dd:32:aa:5b:47:d9:78:2f:3e:a2:57:19:
fc:19:cc:ab:e0:78:c9:19:e2:c3:8e:dc:ce:03:a6:
2b:06:df:90:b3:54:ef:fa:da:a2:24:0c:df:37:ab:
4e:ab:46:b2:5e:fa:00:66:b5:2d:ad:80:1a:72:e3:
1e:be:71:26:7c:f4:35:fa:50:7a:0d:64:7b:9d:11:
e0:69:61:43:6c:6e:16:d3:8e:48:7c:46:bc:2f:b3:
13:17:f5:05:ea:10:89:8c:df:4a:ea:22:db:7f:25:
9b:e9:88:72:b0:33:86:64:6f:af:1c:58:1a:b4:d0:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:12:13:13:37:39:CD:EA:E9:7E:08:F1:F0:52:FB:78:30:52:99:AA
X509v3 Authority Key Identifier:
keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:23:1b:79:37:04:bb:7c:df:c5:fa:c5:45:57:03:8a:8c:6b:
b0:8b:89:e2:16:10:5a:de:cd:d5:0e:ff:57:2c:82:45:b2:e8:
6d:c9:fa:67:8b:3c:85:37:4b:18:85:d4:29:66:03:16:a0:be:
49:55:19:3a:e0:33:67:34:c9:b7:c8:89:12:41:f8:81:e2:4d:
03:1c:97:c2:47:5e:90:3c:08:e7:bc:9f:84:01:6a:8d:7d:af:
d5:4e:22:3f:4f:4e:41:6c:06:66:f4:09:62:ac:a9:f7:d2:5d:
f0:c8:5a:38:f0:81:cc:d5:4c:03:df:9c:89:f5:d3:f2:5f:e3:
ca:c6:92:3e:81:15:57:a3:ac:04:26:7d:7c:b8:70:8b:9f:69:
dd:0e:0f:de:8a:0a:c1:79:90:e9:b8:1d:bb:17:ae:13:0f:8b:
d4:9f:d0:81:30:8b:9f:a7:99:1c:f8:a0:49:5e:c5:cf:5f:f8:
3d:e3:17:48:90:7a:8f:e6:a9:af:72:cb:b8:af:69:de:62:39:
f4:d0:72:45:15:c5:c2:7c:27:d5:15:27:7f:b8:bc:4a:9d:f8:
93:50:c8:ba:c3:9e:9a:1f:53:f2:40:24:2c:7f:83:5b:02:e1:
f4:e7:ca:a7:2b:94:04:ab:e2:bb:f8:f4:f2:08:28:ce:84:1e:
74:9a:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:45:38 2026 by rpki-client