Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File: 6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier: 6AhYfT/QmEHvgHUXlkuBEN7bNXd+Uw8vrv5AAO0Cueg=
Subject key identifier: 9A:B3:07:F2:EC:68:A6:5A:95:8A:1A:9C:5D:BC:34:16:F1:1E:F1:38
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer: /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial: 01A1C51E867341ECF76EA70A6AF6B1C8CDBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number: 1AE9
Signing time: Tue 10 Nov 2026 11:01:14 +0000
Manifest this update: Tue 10 Nov 2026 11:01:14 +0000
Manifest next update: Wed 11 Nov 2026 11:01:14 +0000
Files and hashes: 1: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: qwG+1enC8Blz6AFHXS1BFM16IxZ/JH2YaW3Cdf7c+sM=)
2: NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa (hash: b2x0KyvUzCbJHB1hWOnKC2ju1PwOkyG9Q3mb0qlRsLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:1e:86:73:41:ec:f7:6e:a7:0a:6a:f6:b1:c8:cd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Validity
Not Before: Nov 10 11:01:14 2026 GMT
Not After : Nov 11 11:01:14 2026 GMT
Subject: CN=9ab307f2ec68a65a958a1a9c5dbc3416f11ef138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:25:77:27:6a:a4:9f:11:4b:04:78:ad:01:
03:58:e2:ae:2f:a1:04:03:4f:68:ea:5c:57:18:a0:
ab:7b:55:55:58:53:33:8b:41:ff:ce:ce:00:a7:b9:
98:39:15:e5:d7:63:a6:f8:97:e9:bc:9f:5d:00:c9:
82:66:af:6b:2f:ff:64:63:e2:93:3b:f1:c9:03:e9:
3d:e9:20:00:b5:8a:bd:06:fb:7d:b7:d4:5d:2c:d9:
4f:f9:de:ba:97:26:2d:3e:5d:05:04:c4:3f:0b:6c:
5a:8c:a8:f6:d6:37:b0:da:61:88:74:1e:d0:8c:e0:
17:a6:d7:37:21:8a:eb:b2:10:f6:ad:10:86:f8:a6:
de:23:a4:97:57:4f:80:35:f3:53:e3:42:67:98:ce:
41:41:10:a0:40:35:94:ea:1a:12:13:3d:53:9c:b4:
c8:51:35:77:c9:cf:22:71:a0:bc:29:e9:8a:b4:ca:
cf:6d:1b:79:7c:71:62:6a:2d:e5:2a:e4:29:9f:45:
a7:88:47:3b:3b:61:39:ed:d0:e1:d9:42:50:cc:0e:
a4:c6:0c:29:d1:78:09:98:54:b5:ab:04:4a:d1:48:
25:57:a3:5b:f2:0b:a6:56:a1:35:e3:8c:84:1a:1b:
90:e6:49:75:14:65:3f:f3:a3:fa:aa:a5:0a:25:4b:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B3:07:F2:EC:68:A6:5A:95:8A:1A:9C:5D:BC:34:16:F1:1E:F1:38
X509v3 Authority Key Identifier:
keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2f:21:4e:ed:6f:5a:6e:7e:ae:7e:74:da:ca:cc:39:86:74:
1a:5d:80:d5:7c:7a:ac:10:cc:94:f6:b0:ba:06:03:a6:c3:11:
2d:c0:63:08:2e:c5:27:e4:83:dd:4f:16:16:d5:53:4b:e6:43:
d8:af:63:bd:df:f3:08:4a:d7:45:cc:b7:e5:29:56:11:db:3e:
3f:3d:08:7c:d2:de:f5:d8:1d:20:f3:2b:7a:7a:1f:9e:c6:02:
38:8f:b1:0a:21:43:90:06:bb:f5:ee:86:6a:38:68:db:ff:59:
2c:a1:68:31:63:bd:14:b1:8e:12:ff:0a:95:1c:72:de:ee:b8:
eb:96:19:d6:7f:48:b2:30:ff:98:5f:80:ae:69:9c:5a:50:8f:
b7:bb:22:55:0d:63:0a:da:5b:05:ee:58:73:cc:74:dd:81:40:
0c:06:6e:5a:68:44:3d:7e:f9:b2:aa:20:2c:36:55:9a:21:77:
fe:f6:f1:62:64:14:55:84:0f:a3:e6:7e:65:dd:d6:e7:74:e8:
56:86:78:1f:48:6e:f0:9f:16:0d:e6:f3:f0:d4:54:cb:75:c0:
f2:d6:24:fc:0a:88:08:1a:46:a0:e8:45:47:6d:a9:09:bb:69:
5d:04:19:f1:d5:3a:5f:6a:9f:f4:7d:7e:9b:21:28:d2:15:b1:
9b:b1:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:11:24 2026 by rpki-client