
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier: cQzLGBszVIzTVvXi0oLfv46xLMRN+ecBw8JQTM/CBVw=
Subject key identifier: 8D:81:C4:69:45:67:89:49:A8:0D:07:0D:57:2A:A4:5F:7B:47:64:19
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial: 01A0C4B2E2DA9B4ED087A708FD20FCC7D26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 16:00:52 +0000
Manifest this update: Mon 21 Sep 2026 16:00:52 +0000
Manifest next update: Tue 22 Sep 2026 16:00:52 +0000
Files and hashes: 1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: X/4vYJ4lH6xZBzJ70sGZItlO1FV1i1Fki87mevSK3To=)
2: A8PCXHYtPKOyp3MabVe-odhqYuU.roa (hash: BBukl0iR4BOT3LGjsYPG4CkyN4d3K0S/00+hEdW+8z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:e2:da:9b:4e:d0:87:a7:08:fd:20:fc:c7:d2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Validity
Not Before: Sep 21 16:00:52 2026 GMT
Not After : Sep 22 16:00:52 2026 GMT
Subject: CN=8d81c46945678949a80d070d572aa45f7b476419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:12:6d:c9:30:78:0a:63:12:f1:0a:ba:77:
81:7e:79:1f:b6:38:5a:b1:f7:0e:44:59:95:86:01:
ef:71:15:f8:c5:cf:09:42:20:d3:eb:6b:60:58:3f:
82:8c:d8:61:38:9c:43:4e:a3:2e:4d:2f:05:94:01:
11:33:3f:cb:1e:12:1a:04:23:0d:ab:a2:f4:a1:c0:
76:09:0f:55:c1:ae:06:1b:34:35:40:07:05:ea:f2:
57:0c:9d:af:7a:6e:68:98:80:4a:0e:79:57:77:cd:
cd:cd:11:38:dc:ad:f4:b7:72:72:6e:cf:f3:6a:df:
c1:06:57:61:20:00:ad:f2:23:d1:4a:42:43:4b:54:
00:55:0b:e8:53:80:96:14:f4:39:c4:50:e8:53:3a:
ab:2f:9f:6a:3e:50:df:36:15:d5:98:51:28:1f:44:
4e:42:95:5d:6c:96:99:4c:28:e9:3d:53:18:0c:dd:
9e:d8:27:bb:99:a5:25:68:e1:c2:c2:32:9b:9a:07:
65:4a:b8:90:e3:eb:aa:2c:1e:c3:62:bf:98:d0:23:
30:eb:c1:c3:34:d2:55:8e:19:eb:dc:63:f1:36:5c:
49:81:a4:68:8e:90:4b:31:ba:e3:67:22:f3:fa:3d:
d4:37:da:ca:27:78:37:79:48:b6:05:ff:47:61:5e:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:C4:69:45:67:89:49:A8:0D:07:0D:57:2A:A4:5F:7B:47:64:19
X509v3 Authority Key Identifier:
keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:13:f5:92:0d:ac:20:9b:05:4e:1b:2c:7b:73:70:e0:1f:2d:
99:72:42:ed:eb:1b:3f:d6:94:08:ed:0e:0e:82:2f:02:27:9d:
db:ec:1f:f8:4d:ba:9c:32:33:f0:e1:3c:94:64:f5:a7:d9:e2:
cd:c8:a7:dd:39:e6:17:0c:e4:ec:d4:50:1c:8e:e4:00:05:39:
b1:ef:ef:6a:29:73:67:52:6c:eb:b2:20:23:75:65:94:7d:ed:
25:cf:41:e2:1c:ae:3d:a7:2f:98:bc:b2:20:96:f8:4f:37:1b:
1f:fb:50:ce:1e:78:60:4f:2c:89:51:01:6d:e1:13:b5:8e:b0:
92:64:c2:07:f5:e2:7b:23:9d:6f:70:14:41:3f:c3:6a:9d:6d:
59:d9:f4:e1:c6:16:0d:85:dd:54:a2:3c:01:e4:79:1d:69:99:
2d:76:ff:98:ea:2d:70:16:53:90:9b:d6:7a:1e:d0:28:d0:dd:
1b:fe:00:a9:55:85:cc:5a:2a:ae:dc:32:9e:78:64:46:b3:8a:
e1:5b:90:58:01:41:d9:aa:2d:5c:6a:a5:03:af:f1:54:45:a5:
2d:14:3b:d0:b7:68:82:60:9d:b8:4d:f2:61:59:c8:61:d1:ff:
67:7a:34:a6:30:e1:93:b5:27:87:e3:96:9c:db:b0:aa:c1:41:
b5:2a:8f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:52:58 2026 by rpki-client