Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: J0T067RzReP9J7EQTmhSgpHfbyze8Tot28a+5eAsvZ0=
Subject key identifier: D3:2D:DD:CF:5A:40:72:FE:3B:67:F2:48:31:12:EF:14:F1:99:3C:32
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 01A119E21359202E8284B96751EC71A986B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0D9B
Signing time: Thu 08 Oct 2026 05:00:08 +0000
Manifest this update: Thu 08 Oct 2026 05:00:08 +0000
Manifest next update: Fri 09 Oct 2026 05:00:08 +0000
Files and hashes: 1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=)
2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: r8WYni6URsnZw6/ROjw0JeuJdb3VGSQGgC1EJnTcbjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:13:59:20:2e:82:84:b9:67:51:ec:71:a9:86:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Oct 8 05:00:08 2026 GMT
Not After : Oct 9 05:00:08 2026 GMT
Subject: CN=d32dddcf5a4072fe3b67f2483112ef14f1993c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:f0:f1:0f:ea:ab:b2:2e:67:87:95:07:58:
78:0f:65:a4:21:47:d9:93:b2:ae:21:a4:de:fb:70:
86:90:fa:82:46:b0:7f:a2:57:ba:5f:e7:e6:29:4f:
c0:23:93:e3:de:6a:c1:6f:96:70:08:37:9c:67:a6:
60:6a:4f:fe:11:cc:91:0b:f9:9f:00:10:2f:c6:ed:
a9:53:e4:47:74:aa:53:32:45:41:5a:25:43:30:f3:
2f:c3:98:06:90:55:95:d7:45:e3:38:1a:e0:11:71:
58:45:27:d7:f0:38:a0:52:54:72:b0:cc:57:4f:9d:
38:d5:be:c3:63:52:03:3f:fc:68:92:c3:21:18:c2:
20:6c:ce:51:ae:10:00:75:4c:99:89:a8:d6:86:b4:
a7:d4:49:33:7c:93:9a:4c:1a:28:12:60:7b:07:b0:
cf:bb:11:c5:52:61:7b:db:16:c5:a5:ff:8b:84:12:
ee:06:5b:72:85:32:b4:06:b3:6d:be:7b:b9:87:43:
3f:3c:aa:cf:74:08:04:c0:fd:52:93:d3:6c:eb:6d:
03:0a:1b:42:b0:c6:b0:1b:be:2c:0d:12:27:1f:dd:
7d:d9:d1:0c:79:b9:58:6c:86:bd:92:1d:89:45:bc:
c8:69:96:4b:ba:e7:b0:f4:27:23:5d:88:8e:18:75:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2D:DD:CF:5A:40:72:FE:3B:67:F2:48:31:12:EF:14:F1:99:3C:32
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:94:4b:fe:85:3d:36:65:64:24:6c:ce:a5:1f:69:eb:43:e5:
31:55:c8:4d:24:65:bc:e8:85:b4:ad:ba:9e:75:a1:5f:ae:3a:
d8:19:d9:84:14:53:fb:f6:c6:f4:c6:79:ac:7c:f7:d3:ac:bd:
62:d2:ca:89:1e:bb:ab:c7:73:4a:42:cb:df:31:24:cf:46:08:
af:59:b6:91:ab:a1:8b:65:f3:7c:7c:c7:60:99:c8:94:cf:e1:
4f:31:a3:35:a7:9a:f3:3a:a5:b9:ee:dd:5b:af:03:df:53:d2:
1e:ee:58:90:14:8e:fc:12:fb:d7:07:8d:45:e2:9b:48:e1:62:
17:46:65:3e:e8:4b:9a:3d:21:d1:ed:80:59:df:8a:e1:a1:c1:
98:e4:5a:6e:9b:87:c6:64:3e:ce:91:66:23:49:cd:af:fe:14:
a9:a7:96:de:03:bb:56:7d:c7:53:00:dc:2d:6b:ae:05:41:2a:
72:62:e5:09:5d:9a:f3:9d:06:10:4f:11:c2:64:ab:13:2b:cb:
be:f3:8e:cb:16:55:aa:fc:b2:9d:aa:67:b4:bb:1f:a9:b1:f8:
54:90:a9:b0:ed:bd:21:27:dc:02:c4:36:84:db:e1:ef:2c:08:
80:6a:ab:3a:b1:17:fb:45:cc:19:35:ff:f7:14:41:36:b5:a0:
83:be:97:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:24:35 2026 by rpki-client