Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File: k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier: 3htHibAOb4hlXzb3jCrSIQ0BW4Ht4I1+5TmiKd2ryC8=
Subject key identifier: 9B:50:92:72:C9:D2:B7:0E:CB:A2:B9:5A:19:A0:21:6F:23:47:35:6E
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer: /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial: 01A134EC0316ADA565CDFB1A8BBB81435F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number: 0A15
Signing time: Tue 13 Oct 2026 11:00:44 +0000
Manifest this update: Tue 13 Oct 2026 11:00:44 +0000
Manifest next update: Wed 14 Oct 2026 11:00:44 +0000
Files and hashes: 1: Ke9JZJzAeU2y3MAj67Y-ezxLtDU.roa (hash: ol9IiLjFY9gZ/Hu0WdjazLtITNLeMCgHDACJrZ2QFng=)
2: SfyGLqqUmhSJdrvNRjgqa719X1o.roa (hash: W5M17NIRo4ubi5ZsSmZINBoyskG2lROrQJ2bZs1LviM=)
3: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: Akbz3eaTiKAtRvZE50xBh0kfNTCbATkLChh6PPRJQrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:03:16:ad:a5:65:cd:fb:1a:8b:bb:81:43:5f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Validity
Not Before: Oct 13 11:00:44 2026 GMT
Not After : Oct 14 11:00:44 2026 GMT
Subject: CN=9b509272c9d2b70ecba2b95a19a0216f2347356e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ef:45:3b:c4:c7:07:59:b3:aa:f9:25:6a:d7:
11:c4:5b:62:f6:f2:53:6a:1c:83:b8:5d:4e:67:0a:
a7:8e:39:cf:44:fe:38:bd:34:12:d5:24:42:0c:3f:
62:57:6a:6f:b7:50:94:fe:dc:12:45:c3:3c:15:fe:
61:05:a8:c6:6e:92:34:d6:61:7e:b2:1d:71:29:e2:
26:ee:d7:99:a7:ab:57:ac:3f:47:19:91:d8:ca:1f:
a2:67:f1:95:91:ab:b0:93:e3:f1:46:e3:ab:2f:29:
05:fb:3f:b1:e7:6d:7b:fe:a5:21:ba:8e:bf:5c:56:
02:7d:a4:5e:12:d4:8d:1d:a1:95:6d:11:1f:1c:72:
57:d9:f3:72:72:d1:ea:37:89:9e:ae:d9:eb:95:8d:
5c:2c:8c:13:8a:bd:51:c8:fb:a6:e4:f0:a6:ad:5c:
a9:cb:21:c0:eb:e4:62:75:fc:00:b6:84:63:43:d7:
07:6f:b3:10:9b:fa:f1:3e:48:40:27:d2:b9:cd:20:
e9:f5:af:ca:4a:15:11:ac:6c:bb:ed:e4:9a:e4:23:
79:16:3c:b4:8b:6d:11:6c:58:7d:00:2e:58:74:7c:
5c:79:8a:e4:51:6a:26:9b:7a:a3:ad:fe:a3:3b:ad:
c0:c1:c4:2a:35:70:a3:12:db:bc:12:2e:59:6b:a0:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:92:72:C9:D2:B7:0E:CB:A2:B9:5A:19:A0:21:6F:23:47:35:6E
X509v3 Authority Key Identifier:
keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2a:d4:52:ef:f5:ca:57:39:51:ad:f4:25:90:66:a2:af:54:
c9:89:a1:12:95:7d:c1:0d:af:cf:c9:0b:90:cd:9c:47:fc:7e:
63:61:49:25:d1:73:5d:90:cc:77:b6:0a:e2:ee:77:bc:ad:4d:
76:cc:2f:33:00:0a:ca:04:83:d8:a6:ed:ab:d0:75:3e:0f:f3:
bc:ce:94:01:c3:ff:f0:32:a2:34:54:8a:1b:fe:69:0d:cc:38:
85:d9:9e:37:71:e6:9f:4c:42:8f:3b:11:7e:8c:cb:48:73:64:
65:8a:f4:2e:99:48:e6:73:c9:93:cf:41:2c:26:f7:ae:47:3d:
5c:56:3c:75:d7:29:c6:c9:85:52:5b:74:39:07:31:6f:26:7e:
68:30:52:09:ad:41:47:d6:16:d0:71:78:5d:ae:62:d7:c1:35:
64:f8:f9:f8:13:bd:97:5d:46:2a:2e:be:e0:e9:4c:27:af:c2:
d0:78:ee:55:a0:79:ff:1b:9f:a2:9c:fa:51:ce:aa:18:84:2b:
5c:25:42:17:8d:82:e5:be:2d:0b:06:ed:0a:c2:9f:78:fa:17:
19:ee:65:46:30:14:4b:cd:24:0f:62:26:e1:b5:da:ca:8d:d2:
03:6c:0a:dc:3b:0f:be:e1:a2:62:c3:c2:16:d9:d2:dd:15:e9:
f2:7a:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:26:58 2026 by rpki-client