
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File: 6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier: MlzcFHEMHep47pjrxL4KZ+BLPZuEO6ymd0jzKIxLPcg=
Subject key identifier: F1:AC:F5:84:CB:7A:D0:8B:34:05:7C:19:C1:2F:09:9A:BB:FD:45:D5
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer: /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial: 01A0C5579410A9CE1DA85AEEC15D98A4FBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 19:00:45 +0000
Manifest this update: Mon 21 Sep 2026 19:00:45 +0000
Manifest next update: Tue 22 Sep 2026 19:00:45 +0000
Files and hashes: 1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: GDRgeAKlejUCXlTx45dj9oFJVIjsX4qfAkQaS27uydk=)
2: NmgUP7e3LyCZ01solEPz1wLS4js.roa (hash: sfFMunag9+kvFAdBNDhMKRmeQWkcnrliO5pG/CNIgmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:94:10:a9:ce:1d:a8:5a:ee:c1:5d:98:a4:fb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Validity
Not Before: Sep 21 19:00:45 2026 GMT
Not After : Sep 22 19:00:45 2026 GMT
Subject: CN=f1acf584cb7ad08b34057c19c12f099abbfd45d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:e0:2a:9d:2c:c1:dd:4a:eb:dc:04:14:a5:
15:49:fd:26:89:2f:6e:ed:c6:f2:41:66:bc:ad:7f:
0b:b3:af:2a:67:c4:cf:1b:2a:d2:35:b1:51:a5:e2:
4f:3d:ce:90:94:c3:a0:3c:26:a1:ec:9a:4e:5a:9a:
e3:03:cc:92:15:2e:aa:07:82:5b:8d:7a:68:cb:63:
b1:a6:cd:84:a9:c7:8c:57:ad:03:4d:97:00:af:bc:
8f:9b:63:d6:92:01:9a:9b:9f:1f:06:3b:a9:50:e2:
44:db:52:59:f9:de:72:b7:2e:02:1b:4c:14:3b:25:
12:a1:6b:91:0c:f9:cb:56:00:68:35:11:5f:4a:e4:
f2:0c:cc:2c:0e:4f:8c:d6:bc:2e:0c:e0:7c:42:b0:
11:35:7b:d3:60:1f:b4:9f:2b:dc:16:16:ad:8a:21:
21:bd:df:56:d6:aa:69:69:48:a4:6b:e4:01:2e:25:
2b:df:e1:7b:d8:70:89:e3:fe:5c:44:7c:c0:86:7a:
11:1b:3e:ff:ca:2b:fb:77:ed:32:1e:28:a1:69:b8:
58:fa:59:a9:5a:6d:2f:30:14:9a:a2:c3:4a:b3:f9:
85:23:c0:62:cc:d4:33:0e:9b:5b:4a:bc:c9:fe:42:
20:bd:71:bc:18:44:69:ad:a0:56:fc:a6:c9:39:bd:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AC:F5:84:CB:7A:D0:8B:34:05:7C:19:C1:2F:09:9A:BB:FD:45:D5
X509v3 Authority Key Identifier:
keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0d:ab:24:33:56:f1:15:3e:f1:e0:a3:06:5c:78:65:57:a4:
49:96:c5:5e:84:73:f4:a6:c3:87:20:3e:0b:ee:0f:63:ba:50:
8f:bd:97:9c:d1:91:1b:88:7a:85:ed:ac:ae:0d:7c:e0:ee:64:
b2:64:b8:01:82:0f:71:82:f8:42:49:46:8c:9c:5a:16:33:03:
20:c5:28:83:24:be:ab:3e:e1:59:30:aa:af:f0:98:d4:1b:ec:
64:c9:bf:a2:6a:c6:42:0e:32:f4:3d:4a:b0:e0:0f:ff:00:9a:
42:c6:5a:23:e5:86:07:03:ce:08:ef:a5:96:7c:75:05:86:83:
53:0b:98:e4:cd:e6:3e:f2:01:c3:e2:97:63:8e:70:17:f7:64:
39:09:35:1f:5c:1e:c3:30:90:a1:f2:74:a1:3f:ec:b3:6f:15:
53:27:9d:cc:95:75:5d:e8:49:05:7a:7c:4e:0f:45:a0:4e:5a:
25:4f:8a:32:12:70:29:d6:3e:36:4e:9b:c3:93:69:d9:65:aa:
26:41:43:2d:f3:36:07:90:f1:23:78:94:b3:23:9d:fd:2c:7a:
c4:a9:38:a4:a8:2c:30:e9:cf:db:11:a8:e8:19:90:9c:91:dc:
81:14:8c:16:8b:6b:a4:99:c4:64:4c:45:5b:08:19:6c:b3:e3:
7b:ad:56:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:49:35 2026 by rpki-client