Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
File: 6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json)
Hash identifier: vM7q3hudeuEYO76F3levCBoh7rFiWdJFIEMIN3IKpMg=
Subject key identifier: 5A:C1:7E:A5:A3:B6:57:38:F9:B3:AF:BD:E7:B0:D5:28:76:0C:8D:54
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Certificate issuer: /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial: 01A180E212F8337CC8903591DD758028AA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 05:01:01 +0000
Manifest this update: Wed 28 Oct 2026 05:01:01 +0000
Manifest next update: Thu 29 Oct 2026 05:01:01 +0000
Files and hashes: 1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: VyJCwOBP9/9gpiO7M7Cie+p/iRRdN3zUoQri9ZBliDY=)
2: PMopp0pb43IV-3YVKympni_YLmU.roa (hash: mnvZQ9iKDyXCLi1UgHfqzHGFq14R47gSAsxmQmT/bNc=)
3: dLk4w45q8Owa8GDVR2RUTXOe0Co.asa (hash: nBWLBlLdoR8D7y1wJlZ6nlGbY1sTEjeLaxtL/KKtDcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:12:f8:33:7c:c8:90:35:91:dd:75:80:28:aa:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Validity
Not Before: Oct 28 05:01:01 2026 GMT
Not After : Oct 29 05:01:01 2026 GMT
Subject: CN=5ac17ea5a3b65738f9b3afbde7b0d528760c8d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:f2:39:95:1c:05:b5:ca:06:f8:eb:33:ba:
af:d3:6c:03:84:02:18:46:ce:a7:60:77:fa:24:62:
fc:57:a0:8c:99:e5:3a:f8:49:63:25:3a:b4:ab:73:
4e:60:eb:52:51:ef:1d:e0:41:91:e7:8b:15:79:f5:
0c:b3:1a:67:bb:5e:5a:19:6b:47:0c:8d:b9:a5:bc:
dc:52:dc:11:29:ff:8c:ef:f4:32:e9:c5:fe:ab:24:
cd:80:55:90:27:8e:4d:dc:f4:25:c7:96:a5:6c:d4:
01:69:36:9c:36:76:b1:37:3e:7d:fd:a5:3f:56:4c:
2b:f5:f6:ae:6b:47:ca:82:a4:36:1d:ed:11:f0:3d:
6e:55:89:3d:9f:8e:03:65:51:a3:9b:a9:bb:32:5b:
84:04:7c:e2:35:09:4a:94:f1:29:17:7e:66:f2:da:
e3:78:a9:52:a9:dd:24:19:bf:e8:45:51:0b:cb:e3:
98:28:01:ba:f7:ca:87:a1:3b:f7:bb:e0:0c:87:1b:
47:cb:73:59:63:7a:9c:c6:25:7d:c5:e6:6e:b7:b7:
de:56:4f:1f:6e:a2:87:ac:9e:b0:13:6a:48:74:ed:
0d:92:71:54:7e:b2:68:c1:35:6e:0a:14:b7:d7:f8:
b8:c8:eb:7a:1f:46:d2:d9:e6:6d:3b:7c:75:db:be:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C1:7E:A5:A3:B6:57:38:F9:B3:AF:BD:E7:B0:D5:28:76:0C:8D:54
X509v3 Authority Key Identifier:
keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:15:64:63:44:50:d0:62:2e:b6:88:0d:3e:ff:b3:bb:cd:a8:
fa:93:74:2a:88:04:01:d4:9b:f6:db:9a:b0:5a:38:fa:42:24:
d4:44:5c:ec:77:a1:22:1b:56:32:50:81:3e:ba:33:16:c8:dc:
b7:90:65:c6:cf:93:d9:79:48:5e:0e:58:aa:1e:98:f9:23:64:
77:87:0f:ca:b9:8f:3b:86:94:15:67:ef:d3:bd:4d:90:c9:e9:
70:d5:76:4f:80:e2:b9:07:44:32:31:4f:78:9f:5e:0c:bf:5c:
3f:e5:11:7f:aa:5c:3a:44:28:99:23:22:e9:ad:26:0c:6e:f6:
e4:c0:03:3b:8e:49:25:6e:ae:b1:99:d9:7e:61:68:fa:c7:66:
46:25:17:87:08:4b:4c:1c:5a:34:bc:10:8f:c6:44:77:d4:c6:
06:93:d9:56:64:c4:b5:e4:58:62:49:8e:4e:50:59:12:47:8b:
03:c5:7f:78:15:90:65:d1:2a:0a:8b:2b:22:fa:93:36:0a:e0:
be:7a:e7:40:33:07:59:41:18:a4:5c:ac:c2:d5:d8:dc:d4:53:
be:36:c6:b5:f4:59:e5:0d:17:11:d0:27:81:a0:de:1c:6f:06:
25:52:d5:a8:89:7d:09:aa:a6:92:23:6f:2a:17:81:b0:5e:02:
6f:76:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:50:01 2026 by rpki-client