Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: pGcTpFoWyaxwW01Wu7JqLC1Ff+jGoHo2xcmh7R1oXMc=
Subject key identifier: C8:F4:EE:1C:D3:6A:00:09:16:D5:43:4F:F0:46:DF:F6:66:18:DC:CA
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 01A0C4EA28BD716C8964601CE22C69521F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 17:01:15 +0000
Manifest this update: Mon 21 Sep 2026 17:01:15 +0000
Manifest next update: Tue 22 Sep 2026 17:01:15 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: vwts7NvIGmjFxYxZbYfd5Zr5Er7yMYnqi1lc+dUU/Ds=)
2: M2zIxC99QbRxfnET-6NXsK5UatI.roa (hash: rntTwdXiHDwjJTZclnHejjzBJUzAiOfJIRV0G//u/Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:ea:28:bd:71:6c:89:64:60:1c:e2:2c:69:52:1f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Sep 21 17:01:15 2026 GMT
Not After : Sep 22 17:01:15 2026 GMT
Subject: CN=c8f4ee1cd36a000916d5434ff046dff66618dcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:fc:6a:46:4c:13:d1:f6:d9:b9:62:91:f4:
b2:17:a1:f4:2f:06:c5:d6:dc:71:90:ae:a5:97:af:
05:e5:f9:61:8c:78:26:2e:df:70:98:2d:84:f5:c0:
ff:2b:0c:13:2c:da:59:a0:9e:f5:a3:ea:bf:00:d3:
45:89:d7:11:47:79:18:07:14:3e:dc:46:25:54:ab:
2b:17:94:d8:98:41:65:dc:81:9d:40:23:ce:b5:09:
29:b3:83:02:5a:cb:39:59:fe:0b:01:d9:46:8f:76:
80:24:3c:b8:31:2d:b2:04:1c:bb:8d:99:bf:32:e5:
29:50:3d:42:53:19:e7:38:6e:1b:43:ba:41:6f:99:
9a:19:28:c9:71:85:42:e1:09:24:6b:f1:bf:7e:af:
ed:c3:3e:0f:cd:3c:bd:84:5c:58:1b:8d:47:a0:9e:
d8:e5:00:0e:14:6c:9f:1f:92:9b:94:0f:ff:03:83:
df:31:a8:2f:79:da:4c:0c:93:44:9e:ed:67:ef:f8:
39:56:27:a9:9f:29:8a:db:89:6c:06:14:2d:83:72:
f9:e3:42:a8:4f:ca:7a:4c:ef:91:22:bf:b0:8e:72:
80:0d:a8:eb:6c:8a:0a:fc:00:4c:54:20:8c:55:03:
11:95:87:04:c0:fa:08:62:3b:c7:b1:56:90:c2:85:
e3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F4:EE:1C:D3:6A:00:09:16:D5:43:4F:F0:46:DF:F6:66:18:DC:CA
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6f:76:44:1f:86:c2:39:f0:c6:07:f6:f4:05:4f:95:ae:e5:
28:cf:0f:f5:56:22:e4:2f:4d:14:dc:cd:8c:c7:0b:d0:61:02:
69:10:87:bb:71:2c:07:75:64:bd:cf:26:46:ba:20:3a:97:e3:
da:02:50:0a:ef:b9:89:9e:ed:82:4f:ba:72:4c:c4:39:ec:05:
9f:1c:53:c0:a4:f0:67:f8:69:c5:0b:94:56:0d:3b:c0:10:62:
90:d2:1f:1e:50:72:5c:b9:c4:52:6d:ae:75:df:84:38:00:fb:
6f:18:de:c8:f7:a6:9d:38:ca:62:ef:a9:dc:2a:fb:15:91:45:
21:c4:6f:20:21:38:4c:dd:17:90:fe:a8:81:f4:20:a0:f2:11:
60:c9:44:4b:14:4a:e9:3a:f5:10:f3:b3:c8:d9:1c:38:d3:4c:
8b:19:93:5c:a7:ef:73:50:3e:e7:2b:9d:e0:a0:6f:5a:26:dc:
f9:89:c1:bd:40:be:78:13:94:04:af:dd:a4:6f:9e:a1:a0:ee:
80:f7:74:1d:79:bf:db:2a:89:a5:f8:1a:39:41:8e:99:6f:15:
15:43:4c:d9:bb:8b:d3:30:47:0d:75:33:15:f9:fd:6e:8d:90:
81:df:49:1c:99:9d:14:23:48:da:33:4f:e0:bd:36:ef:a4:6c:
e1:51:9a:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDE6ii9cWyJZGAc4ixpUh9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzNlNjQ1MmE2M2Y4ZTQ3YTI1N2U1M2MxYThmZmE3NWY5
MWVhNDAwHhcNMjYwOTIxMTcwMTE1WhcNMjYwOTIyMTcwMTE1WjAzMTEwLwYDVQQD
EyhjOGY0ZWUxY2QzNmEwMDA5MTZkNTQzNGZmMDQ2ZGZmNjY2MThkY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjv8akZME9H22blikfSyF6H0LwbF
1txxkK6ll68F5flhjHgmLt9wmC2E9cD/KwwTLNpZoJ71o+q/ANNFidcRR3kYBxQ+
3EYlVKsrF5TYmEFl3IGdQCPOtQkps4MCWss5Wf4LAdlGj3aAJDy4MS2yBBy7jZm/
MuUpUD1CUxnnOG4bQ7pBb5maGSjJcYVC4Qkka/G/fq/twz4PzTy9hFxYG41HoJ7Y
5QAOFGyfH5KblA//A4PfMagvedpMDJNEnu1n7/g5ViepnymK24lsBhQtg3L540Ko
T8p6TO+RIr+wjnKADajrbIoK/ABMVCCMVQMRlYcEwPoIYjvHsVaQwoXjRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMj07hzTagAJFtVDT/BG3/ZmGNzKMB8GA1UdIwQY
MBaAFOjD5kUqY/jkeiV+U8Go/6dfkepAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTkt
NmQ4MTBiMGFkYTBhLzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTktNmQ4MTBiMGFkYTBh
LzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcm92RB+G
wjnwxgf29AVPla7lKM8P9VYi5C9NFNzNjMcL0GECaRCHu3EsB3Vkvc8mRrogOpfj
2gJQCu+5iZ7tgk+6ckzEOewFnxxTwKTwZ/hpxQuUVg07wBBikNIfHlByXLnEUm2u
dd+EOAD7bxjeyPemnTjKYu+p3Cr7FZFFIcRvICE4TN0XkP6ogfQgoPIRYMlESxRK
6Tr1EPOzyNkcONNMixmTXKfvc1A+5yud4KBvWibc+YnBvUC+eBOUBK/dpG+eoaDu
gPd0HXm/2yqJpfgaOUGOmW8VFUNM2buL0zBHDXUzFfn9bo2Qgd9JHJmdFCNI2jNP
4L0276Rs4VGaaA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:19:26 2026 by rpki-client