Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: d6Cx5MElw0ll72Nf7wN6ZGeZJ9vJK1hSJFlAaPcjaEs=
Subject key identifier: 5D:58:A0:D9:63:D8:47:CE:45:49:7C:E6:F3:86:FA:3C:AE:5C:E0:F2
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 01A1C1E5CC14B545C8ECF3EA6DFA120F34ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 1AE9
Signing time: Mon 09 Nov 2026 20:00:24 +0000
Manifest this update: Mon 09 Nov 2026 20:00:24 +0000
Manifest next update: Tue 10 Nov 2026 20:00:24 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: A8aN0IjQAVOfydyy8FsOqfunxWtTUWkd2Bz9vBWnVc8=)
2: M2zIxC99QbRxfnET-6NXsK5UatI.roa (hash: rntTwdXiHDwjJTZclnHejjzBJUzAiOfJIRV0G//u/Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:e5:cc:14:b5:45:c8:ec:f3:ea:6d:fa:12:0f:34:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Nov 9 20:00:24 2026 GMT
Not After : Nov 10 20:00:24 2026 GMT
Subject: CN=5d58a0d963d847ce45497ce6f386fa3cae5ce0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:2b:82:f7:c1:98:1e:5b:c8:df:0e:a7:98:
af:5e:13:fb:95:5e:54:75:4c:78:f5:c7:8f:8b:5f:
2f:e2:11:a1:2d:6a:a2:22:cc:7d:fe:e8:3c:3e:94:
63:96:5f:64:91:72:ca:eb:52:3f:04:cd:8a:e9:d9:
1b:3b:f3:a8:09:39:56:db:d3:d5:1e:0d:cb:31:07:
59:3e:e5:02:c8:49:d0:1d:a3:87:c1:4b:c5:52:e1:
89:a3:41:06:ea:09:4c:2d:55:0a:98:7f:e3:39:8e:
e7:1c:c8:08:40:44:ac:85:98:35:f6:a6:64:8a:d0:
84:24:a0:14:8b:8a:2a:92:7e:dc:5d:30:52:77:b3:
94:4b:db:a4:e6:a7:9a:be:5c:e4:79:a2:e0:fa:51:
ca:4d:34:71:ff:7d:63:e6:49:8c:2d:54:43:6c:ed:
da:ed:f7:69:84:de:23:94:ea:2a:06:d5:77:7a:d3:
fa:f4:c4:33:5c:b5:b2:8d:9c:c1:c0:be:e5:08:69:
f3:bf:72:d6:c1:6a:18:95:f1:79:8d:d1:d1:ab:ea:
5a:71:20:a3:a4:76:98:d5:c3:7f:a7:82:51:4a:59:
e1:8d:ad:f6:16:1c:4c:1f:ad:28:76:3d:10:56:b2:
19:e8:0f:70:8a:27:5f:05:be:eb:ec:da:c4:61:ce:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:58:A0:D9:63:D8:47:CE:45:49:7C:E6:F3:86:FA:3C:AE:5C:E0:F2
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fb:cc:da:e3:e8:14:11:07:7a:f3:c7:8d:95:00:3b:c6:02:
05:5b:71:8a:5e:68:f7:7c:bc:ce:4d:10:f5:fd:25:58:ef:c5:
c4:92:81:20:51:81:a1:7a:1a:97:11:fb:ef:70:0b:71:ca:c3:
4d:7e:2a:d7:86:8f:f3:5e:6a:81:ad:06:5e:6a:86:5a:33:cb:
36:63:71:27:81:6a:0c:dd:53:a2:0a:43:97:57:db:06:c2:94:
39:4b:7e:20:1c:e8:b4:61:69:28:6d:8e:6c:6c:ce:ef:42:bc:
24:17:2b:b3:40:2c:50:52:c3:60:b9:fc:de:60:50:84:20:e9:
52:70:48:a7:7f:f6:e9:d5:32:8c:71:98:4f:61:57:80:06:7f:
be:67:5d:0c:71:d9:8f:97:b2:fa:e6:3a:58:d8:af:bd:26:2a:
6c:3f:92:d1:f7:8d:5d:ea:24:f8:ca:a1:1c:7d:fb:94:fc:5e:
bb:31:55:3a:20:ab:04:5c:e5:df:23:c8:db:80:e4:f0:2b:94:
8f:ef:2e:14:ea:23:f2:b4:2b:0b:3e:94:48:d4:33:dc:6e:db:
d3:ba:73:a3:a9:23:dd:9f:c3:e9:37:bb:c5:de:f4:9f:ce:76:
22:48:67:1b:50:44:e3:eb:41:08:dd:c3:cd:27:a1:9f:79:11:
04:52:4b:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHB5cwUtUXI7PPqbfoSDzTtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzNlNjQ1MmE2M2Y4ZTQ3YTI1N2U1M2MxYThmZmE3NWY5
MWVhNDAwHhcNMjYxMTA5MjAwMDI0WhcNMjYxMTEwMjAwMDI0WjAzMTEwLwYDVQQD
Eyg1ZDU4YTBkOTYzZDg0N2NlNDU0OTdjZTZmMzg2ZmEzY2FlNWNlMGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq4rgvfBmB5byN8Op5ivXhP7lV5U
dUx49cePi18v4hGhLWqiIsx9/ug8PpRjll9kkXLK61I/BM2K6dkbO/OoCTlW29PV
Hg3LMQdZPuUCyEnQHaOHwUvFUuGJo0EG6glMLVUKmH/jOY7nHMgIQESshZg19qZk
itCEJKAUi4oqkn7cXTBSd7OUS9uk5qeavlzkeaLg+lHKTTRx/31j5kmMLVRDbO3a
7fdphN4jlOoqBtV3etP69MQzXLWyjZzBwL7lCGnzv3LWwWoYlfF5jdHRq+pacSCj
pHaY1cN/p4JRSlnhja32FhxMH60odj0QVrIZ6A9wiidfBb7r7NrEYc7FIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1YoNlj2EfORUl85vOG+jyuXODyMB8GA1UdIwQY
MBaAFOjD5kUqY/jkeiV+U8Go/6dfkepAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTkt
NmQ4MTBiMGFkYTBhLzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTktNmQ4MTBiMGFkYTBh
LzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPvM2uPo
FBEHevPHjZUAO8YCBVtxil5o93y8zk0Q9f0lWO/FxJKBIFGBoXoalxH773ALccrD
TX4q14aP815qga0GXmqGWjPLNmNxJ4FqDN1TogpDl1fbBsKUOUt+IBzotGFpKG2O
bGzO70K8JBcrs0AsUFLDYLn83mBQhCDpUnBIp3/26dUyjHGYT2FXgAZ/vmddDHHZ
j5ey+uY6WNivvSYqbD+S0feNXeok+MqhHH37lPxeuzFVOiCrBFzl3yPI24Dk8CuU
j+8uFOoj8rQrCz6USNQz3G7b07pzo6kj3Z/D6Te7xd70n852IkhnG1BE4+tBCN3D
zSehn3kRBFJLkQ==
-----END CERTIFICATE-----
Generated at Mon Nov 9 22:59:37 2026 by rpki-client