Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: 5FbiDKGJo2myZI44JsUusI/YBH6U7NTsen7inA4vDQM=
Subject key identifier: 12:7E:25:C3:DA:7A:DD:DE:DF:61:3A:FE:75:6C:E7:2C:6D:7F:72:49
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 01A0B53F3218F7520C200382EFF974FA918A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 1A5D
Signing time: Fri 18 Sep 2026 16:00:12 +0000
Manifest this update: Fri 18 Sep 2026 16:00:12 +0000
Manifest next update: Sat 19 Sep 2026 16:00:12 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: H35BvcUD9Q/+iqRLw4IyTtq74v68JC9T8yNhWh1vv6I=)
2: C5_CXUA-hhdUx_k-OWHw-aFPQjg.roa (hash: 5m8YSeYQsWZWPbqEN+OxCEF2VsF88Ekcd12LgCTpyv8=)
3: N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa (hash: 5lDjmIb8YsbwWstNUGh9BH6bOqCQpiLvBcN69JYx3C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:3f:32:18:f7:52:0c:20:03:82:ef:f9:74:fa:91:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Sep 18 16:00:12 2026 GMT
Not After : Sep 19 16:00:12 2026 GMT
Subject: CN=127e25c3da7adddedf613afe756ce72c6d7f7249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:40:aa:b8:73:91:f3:ef:ee:47:6e:c1:f6:
24:ed:e7:54:08:00:33:a6:cb:cb:0d:91:25:7c:19:
20:25:b3:68:eb:53:09:93:eb:04:17:7d:4d:e0:e6:
09:aa:ab:e4:63:50:db:98:c4:93:3d:68:23:7a:43:
0d:7c:2c:26:2f:c4:10:11:b3:1a:7f:64:f5:96:fd:
81:53:bb:92:b6:af:01:f3:6d:d3:2a:a2:d6:4b:0d:
d3:70:cc:73:e6:5b:0a:6a:5c:8c:3f:8b:3c:7e:ce:
ec:cd:83:1b:39:7a:67:33:fd:8d:e4:0f:58:fd:1a:
e2:4d:7c:1d:e9:78:60:28:12:8d:46:30:5a:fd:0c:
63:5f:a9:f1:8a:da:75:b3:e5:67:07:cd:72:d3:c0:
a4:6d:84:71:1a:36:14:13:0d:33:cd:78:b8:02:55:
67:6b:f6:c3:21:7e:97:1a:9f:84:8f:12:b3:1d:5d:
db:56:06:90:3c:d8:df:92:b5:20:7c:e4:28:a6:a4:
d5:87:50:67:75:35:26:a5:b7:a0:65:6e:a8:6d:4d:
9e:98:83:fe:b5:bf:56:c6:ed:7d:4b:1e:84:39:d3:
d1:0c:de:61:2b:c1:fb:25:87:4f:ae:88:34:91:90:
6c:bd:11:15:90:3f:79:1b:34:bc:b6:7d:47:33:c0:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7E:25:C3:DA:7A:DD:DE:DF:61:3A:FE:75:6C:E7:2C:6D:7F:72:49
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:13:c0:fc:ed:32:bf:1f:98:d9:9c:4c:26:cc:3d:86:64:fc:
04:0f:1b:7f:a7:60:74:d6:ee:8e:5f:8d:2b:18:bb:24:72:5d:
99:93:2c:2c:c8:15:76:35:98:19:9a:d8:18:d8:45:ba:db:ea:
24:46:d3:7d:bb:ae:a6:fc:73:6a:37:34:d2:02:9d:e7:50:58:
69:03:ac:6f:5f:e1:31:99:5e:55:7d:76:4d:6b:da:a9:bb:ab:
1d:a4:63:0f:2a:0b:80:89:97:e9:41:06:f9:1a:3f:ea:32:04:
d5:2e:fb:0f:cf:55:4a:94:64:44:b5:d1:f5:41:78:b2:ac:1b:
5d:5e:23:76:e1:6a:82:bc:1b:23:cf:02:c9:2d:93:de:23:c4:
70:32:9d:e0:3f:90:29:0b:07:ba:35:63:17:2d:68:7e:d3:e4:
9d:6a:57:bd:2d:e4:0f:10:b5:a9:1e:65:79:eb:e6:fa:7c:1d:
12:f0:f3:86:28:42:e2:13:29:c1:f1:e5:6b:22:a7:6f:12:22:
9f:fc:a6:6e:38:77:1d:26:fc:ec:d7:09:15:88:12:8c:1d:0b:
71:f2:d8:34:8a:6c:88:76:bd:aa:47:bd:5e:f1:19:53:f7:0c:
91:70:8e:19:d9:17:f2:a7:84:a1:0a:15:f6:98:95:26:32:0d:
36:1f:84:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC1PzIY91IMIAOC7/l0+pGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGYwOGQ0ZWUxZjk0Zjk4NDQ5M2I0NjdiZDhhY2EyYWRm
YTI4NjYwHhcNMjYwOTE4MTYwMDEyWhcNMjYwOTE5MTYwMDEyWjAzMTEwLwYDVQQD
EygxMjdlMjVjM2RhN2FkZGRlZGY2MTNhZmU3NTZjZTcyYzZkN2Y3MjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKBAqrhzkfPv7kduwfYk7edUCAAz
psvLDZElfBkgJbNo61MJk+sEF31N4OYJqqvkY1DbmMSTPWgjekMNfCwmL8QQEbMa
f2T1lv2BU7uStq8B823TKqLWSw3TcMxz5lsKalyMP4s8fs7szYMbOXpnM/2N5A9Y
/RriTXwd6XhgKBKNRjBa/QxjX6nxitp1s+VnB81y08CkbYRxGjYUEw0zzXi4AlVn
a/bDIX6XGp+EjxKzHV3bVgaQPNjfkrUgfOQopqTVh1BndTUmpbegZW6obU2emIP+
tb9Wxu19Sx6EOdPRDN5hK8H7JYdProg0kZBsvREVkD95GzS8tn1HM8DsgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJ+JcPaet3e32E6/nVs5yxtf3JJMB8GA1UdIwQY
MBaAFOoPCNTuH5T5hEk7RnvYrKKt+ihmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUt
MmVmYjQ2MWZkNDEzLzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUtMmVmYjQ2MWZkNDEz
LzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBPA/O0y
vx+Y2ZxMJsw9hmT8BA8bf6dgdNbujl+NKxi7JHJdmZMsLMgVdjWYGZrYGNhFutvq
JEbTfbuupvxzajc00gKd51BYaQOsb1/hMZleVX12TWvaqburHaRjDyoLgImX6UEG
+Ro/6jIE1S77D89VSpRkRLXR9UF4sqwbXV4jduFqgrwbI88CyS2T3iPEcDKd4D+Q
KQsHujVjFy1oftPknWpXvS3kDxC1qR5leevm+nwdEvDzhihC4hMpwfHlayKnbxIi
n/ymbjh3HSb87NcJFYgSjB0LcfLYNIpsiHa9qke9XvEZU/cMkXCOGdkX8qeEoQoV
9piVJjINNh+Eaw==
-----END CERTIFICATE-----
Generated at Fri Sep 18 23:22:35 2026 by rpki-client