Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/6OtiKLuHSSkS7jIDnkDh2SFK0H8.mft
File: 6OtiKLuHSSkS7jIDnkDh2SFK0H8.mft (raw, json)
Hash identifier: eCG0yDzBkmUoR1c3Wi8Zb6nNF4I5cszT1AiVRl12IoE=
Subject key identifier: BD:05:3D:1F:58:F7:3B:B1:C0:2C:6D:D3:B4:7A:45:13:A6:D1:71:7A
Authority key identifier: E8:EB:62:28:BB:87:49:29:12:EE:32:03:9E:40:E1:D9:21:4A:D0:7F
Certificate issuer: /CN=e8eb6228bb87492912ee32039e40e1d9214ad07f
Certificate serial: 01A1762838EC6F133B31C902CF13E30648D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OtiKLuHSSkS7jIDnkDh2SFK0H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/6OtiKLuHSSkS7jIDnkDh2SFK0H8.mft
Manifest number: 1D
Signing time: Mon 26 Oct 2026 03:01:49 +0000
Manifest this update: Mon 26 Oct 2026 03:01:49 +0000
Manifest next update: Tue 27 Oct 2026 03:01:49 +0000
Files and hashes: 1: 6OtiKLuHSSkS7jIDnkDh2SFK0H8.crl (hash: PfVdTTi19WPVuNT7APVkT70fXOH8OmlH34hIAB43e9o=)
2: smu-qlmjpiNuCgMs672oYEmdhAQ.roa (hash: LF0IB7deJDYZygYf//VjP2BeOaqH3xeQGlvnygDjBiU=)
3: zfHSLICLEypkfmeLOEVEu0Y317o.roa (hash: NKXe9WsNPacFiZG3n5bjlZghwZ6J321wSnyphXdPsXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/6OtiKLuHSSkS7jIDnkDh2SFK0H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/6OtiKLuHSSkS7jIDnkDh2SFK0H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OtiKLuHSSkS7jIDnkDh2SFK0H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:28:38:ec:6f:13:3b:31:c9:02:cf:13:e3:06:48:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8eb6228bb87492912ee32039e40e1d9214ad07f
Validity
Not Before: Oct 26 03:01:49 2026 GMT
Not After : Oct 27 03:01:49 2026 GMT
Subject: CN=bd053d1f58f73bb1c02c6dd3b47a4513a6d1717a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:1f:ab:d6:72:5c:90:ed:7f:2c:51:d8:c2:
25:4a:e2:1a:b6:63:d4:dd:3f:29:cc:c3:3d:0d:46:
2e:45:1a:53:f8:81:96:a3:be:1c:35:ac:35:b2:8a:
b2:2e:e2:6f:07:ed:08:d1:30:9d:31:ee:9b:fe:8f:
2d:ce:d0:70:0b:c7:f4:f4:9b:2d:5d:81:cd:ca:ce:
e0:8b:e7:13:e7:22:ed:0f:1d:49:6e:3a:21:6f:53:
f0:b2:a0:50:f3:0b:75:a2:d3:eb:5d:8a:57:26:fb:
58:eb:ce:bc:4f:04:1f:5f:a8:41:95:f1:d7:16:f9:
de:ba:01:62:79:bc:8d:96:85:59:b4:e0:8e:88:2a:
7e:f2:4f:f1:72:d0:f5:50:ab:a2:a5:7d:a3:c6:f5:
90:2c:b0:d0:23:46:47:0d:df:be:07:bf:a2:f7:69:
2f:91:32:f2:c0:98:4b:a2:4e:8e:aa:cc:55:5c:bc:
7f:34:3b:6e:4f:5f:c0:c3:0c:63:26:f4:5e:e5:2f:
6e:22:15:aa:fd:f6:1f:e0:7d:ad:1e:4a:71:49:36:
08:15:cb:ba:2a:fd:ed:73:2d:71:09:76:b0:f0:25:
5b:3e:90:fc:ef:67:e3:01:ed:bd:c7:ec:a4:ac:81:
6f:24:2d:4c:f3:dc:97:fe:1f:21:c1:3e:b2:92:ee:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:05:3D:1F:58:F7:3B:B1:C0:2C:6D:D3:B4:7A:45:13:A6:D1:71:7A
X509v3 Authority Key Identifier:
keyid:E8:EB:62:28:BB:87:49:29:12:EE:32:03:9E:40:E1:D9:21:4A:D0:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OtiKLuHSSkS7jIDnkDh2SFK0H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/6OtiKLuHSSkS7jIDnkDh2SFK0H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e08a09-a128-4698-9893-189ec6b3c8bf/1/6OtiKLuHSSkS7jIDnkDh2SFK0H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:21:57:ba:f2:c7:3a:fa:10:6a:ae:0d:08:a0:94:ff:8d:c6:
41:f3:f1:c5:de:f4:b0:3d:3f:b5:e4:e0:d1:21:e3:bb:b0:7f:
3b:2d:6b:b9:bd:aa:ed:ab:9c:d8:fc:9f:c4:56:4b:01:91:90:
30:4a:ae:67:38:c7:7d:2e:bd:6d:7b:16:08:9b:5e:b5:00:5d:
c0:d0:09:48:28:8d:e7:32:bc:17:f4:42:53:71:9f:15:fb:5b:
8d:8e:65:78:4e:04:cc:07:b5:fe:66:fc:70:01:7f:1c:6a:f9:
0d:58:31:f5:9c:e0:de:49:6d:12:9c:e5:38:0f:08:31:02:7e:
58:77:40:28:db:7c:cf:af:27:ad:c3:b6:5c:5f:dd:16:78:ce:
f4:77:c5:69:29:7b:c7:10:a2:59:5f:1c:03:3e:4c:93:9a:dd:
d7:ee:41:74:7b:33:84:b8:99:22:bb:b3:98:86:0e:f4:6e:7b:
b3:30:95:e8:3c:d0:98:e3:cd:1e:3f:0a:91:07:1e:ac:a7:a9:
ab:08:8f:92:1c:42:d5:e8:4f:1b:e8:da:17:7d:2a:3a:f4:0c:
77:f5:bc:91:a3:1e:ef:57:be:cc:38:d2:56:50:85:8f:03:3a:
ff:00:cc:ea:09:0e:0c:59:17:5f:15:cb:b1:41:03:80:dc:c4:
2a:54:d0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:46 2026 by rpki-client