Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier: HO8kGyNQOhDLe5MSBzuBKN5RgoFem3fV+XQ8THYBg/Y=
Subject key identifier: C1:E0:D4:22:B9:60:79:7B:B6:C2:FE:A2:D5:77:C5:50:3F:CD:39:41
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial: 01A1C39DECEC1A3531281A9D0A5F394E449A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number: 1AEA
Signing time: Tue 10 Nov 2026 04:01:09 +0000
Manifest this update: Tue 10 Nov 2026 04:01:09 +0000
Manifest next update: Wed 11 Nov 2026 04:01:09 +0000
Files and hashes: 1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: Zyg/73zLCJOZJZd/yv5SiTQYbnKh23DhhRpwMa3PNTM=)
2: A8PCXHYtPKOyp3MabVe-odhqYuU.roa (hash: BBukl0iR4BOT3LGjsYPG4CkyN4d3K0S/00+hEdW+8z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:9d:ec:ec:1a:35:31:28:1a:9d:0a:5f:39:4e:44:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Validity
Not Before: Nov 10 04:01:09 2026 GMT
Not After : Nov 11 04:01:09 2026 GMT
Subject: CN=c1e0d422b960797bb6c2fea2d577c5503fcd3941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:25:6a:2b:f0:32:aa:67:83:63:f2:0e:9b:
c7:f5:3a:16:6a:72:94:3f:97:4c:5a:6d:ea:81:d8:
bc:8d:8c:32:dd:86:1e:04:87:de:c0:83:ce:c1:76:
0a:47:61:7b:22:48:d8:bf:62:43:ff:0d:e6:db:8b:
99:f6:f6:98:8f:cf:f4:e1:b1:69:58:db:b5:da:a7:
a0:62:81:19:ea:8a:59:e3:cd:0b:65:11:4c:47:31:
a8:3c:5e:c7:06:04:96:73:e7:31:1e:3d:62:5f:f3:
f0:20:bb:de:96:3f:91:0f:d6:1c:33:f0:98:ea:f7:
57:7c:e0:0d:d6:f4:07:aa:d5:e1:48:5c:16:15:ed:
14:c4:27:b6:28:be:94:e3:1f:0c:19:1c:cc:24:25:
3e:50:16:54:02:7a:09:a2:fa:dd:53:d1:1a:5e:da:
b1:00:55:6a:f9:11:0b:62:f7:66:1d:f2:aa:e0:56:
18:26:87:99:d4:87:5a:fa:ca:41:85:e2:02:df:a8:
f7:2f:dd:50:58:87:37:2f:90:26:06:c2:f1:16:c8:
59:61:1f:ca:60:89:eb:b6:60:7c:42:1d:dd:3c:85:
23:30:2f:b7:ad:e5:68:f8:26:70:cd:56:aa:fe:b3:
8f:5a:85:75:03:33:c7:cc:de:b6:a0:04:b0:fe:38:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E0:D4:22:B9:60:79:7B:B6:C2:FE:A2:D5:77:C5:50:3F:CD:39:41
X509v3 Authority Key Identifier:
keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3a:dd:96:7c:4f:f9:82:7e:1e:2f:75:b4:b0:2e:3b:77:64:
57:77:4b:4c:ac:31:eb:2f:5f:8d:8c:aa:12:60:2b:00:d5:36:
c4:f6:f3:0b:b8:e3:46:7a:f0:40:33:04:5a:4f:44:09:b0:e9:
d3:ba:7f:96:e3:be:8a:01:70:02:ad:dc:80:2b:2d:50:8e:3c:
af:d5:31:56:cf:e9:6c:e7:42:e0:bd:7d:96:6d:2c:d8:a9:2c:
b3:8d:b1:c5:59:ed:9c:7d:75:27:4d:59:d9:5d:04:5f:48:9f:
63:40:74:f4:1b:8b:62:03:36:63:ae:aa:2f:c1:9b:f2:89:a1:
76:70:fd:1e:56:b8:b4:39:c5:72:7b:63:c9:0c:c8:36:08:25:
7b:9e:7f:82:14:62:a1:b0:e1:e7:27:5b:4f:bf:f8:47:4d:84:
1f:82:45:fb:8e:91:2d:8c:c8:fc:b2:e4:21:da:bb:c3:d7:51:
d9:e8:e2:3b:d5:2d:f8:1a:d1:81:fe:27:7d:a9:da:99:09:2b:
70:db:7b:20:1a:35:42:e3:98:4a:ad:3d:2b:06:da:68:a1:4e:
18:65:21:18:e8:5e:ca:3c:2b:0d:60:08:df:6f:e2:e4:a3:d9:
ee:c1:11:52:1a:dc:53:68:21:2a:4c:d3:83:47:ca:7a:86:d0:
a6:50:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 14:24:28 2026 by rpki-client