Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
File: 6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json)
Hash identifier: hZKCa2TSc4qyZVSOSrak1i+nTpaDy9mhuKuq7wHOvOw=
Subject key identifier: CD:28:43:5D:90:80:D7:8D:70:42:14:7C:CE:55:02:69:6A:4D:6A:F9
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Certificate issuer: /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial: 01A1DF4C23DDA358025A1A51CB88AC76BC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
Manifest number: 1A89
Signing time: Sun 15 Nov 2026 13:01:11 +0000
Manifest this update: Sun 15 Nov 2026 13:01:11 +0000
Manifest next update: Mon 16 Nov 2026 13:01:11 +0000
Files and hashes: 1: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: psWZRkmdmuKGagXZqbA4DLjFrffB5/764jECGFBR/mM=)
2: sG7Jxd3j5bPpODxju8fXU3EM93w.roa (hash: bMzMmqgYSEERUbsFyNXWG2WNFtoS/kvz11SCChzG8x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:23:dd:a3:58:02:5a:1a:51:cb:88:ac:76:bc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Validity
Not Before: Nov 15 13:01:11 2026 GMT
Not After : Nov 16 13:01:11 2026 GMT
Subject: CN=cd28435d9080d78d7042147cce5502696a4d6af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:a5:5a:d2:4a:cd:87:b0:f1:52:66:5f:c5:
f3:a4:2d:75:36:bf:f6:36:91:e4:44:00:40:48:bb:
11:4a:31:55:b4:e7:7d:8a:43:9b:8a:12:1e:4c:d9:
6f:d2:e8:fc:be:95:48:46:90:44:3c:ce:1c:9b:30:
ca:29:40:27:86:2c:9f:71:5e:01:be:99:94:73:a2:
89:09:90:12:ea:08:30:11:0e:ad:11:b1:d2:b3:1e:
76:94:17:d9:5e:00:a8:67:1c:4e:c1:56:c1:90:03:
36:b6:29:bc:e3:3e:b5:61:8e:09:66:ff:08:99:14:
47:cf:4f:42:c4:0a:09:36:3d:5f:3a:b1:92:5c:d8:
44:14:36:37:c1:bc:97:b7:68:d3:66:0b:5b:20:d5:
1c:f0:d4:49:79:5c:1f:e8:0e:63:e2:5f:e3:aa:b8:
b2:44:6c:62:4e:e2:fe:b4:8c:a7:7f:10:64:24:49:
17:68:69:85:34:6d:9e:c1:d5:71:ad:77:86:54:20:
e4:61:12:3d:c5:fd:c6:9e:76:df:07:cf:8f:b1:d1:
03:40:92:2e:8f:b1:62:76:6a:41:31:02:b7:18:15:
55:2c:10:32:6d:ef:eb:b3:67:55:38:68:64:24:f6:
c4:6b:15:1d:62:64:1c:c3:87:fd:6c:1b:e3:90:71:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:28:43:5D:90:80:D7:8D:70:42:14:7C:CE:55:02:69:6A:4D:6A:F9
X509v3 Authority Key Identifier:
keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:86:59:e8:c8:88:5f:5c:6b:34:13:7b:e7:d0:5c:03:d7:78:
9f:bb:cc:15:39:9d:74:dc:93:2e:44:aa:11:ce:a5:da:e4:4d:
07:d7:51:65:03:b9:50:4d:56:98:3b:0a:6b:8b:7a:07:78:f8:
93:15:3f:5f:81:5e:ed:1f:32:ee:f3:40:63:cd:db:d4:8a:d0:
d9:b1:bc:62:b3:7b:5a:19:a5:1d:65:49:73:1d:d5:51:7e:8f:
71:27:04:90:b7:5e:03:3d:24:cf:de:39:55:a5:26:2b:9b:3a:
fd:d7:03:0a:01:20:71:85:54:ef:fa:09:e7:2a:49:5b:12:92:
76:5f:e7:f7:99:fe:7c:6f:8a:9c:a3:5a:5e:78:f4:b6:16:87:
60:d6:cc:d3:91:9c:56:3f:4b:bc:fd:62:37:b7:0b:8e:2b:95:
43:5c:9f:ba:fc:8b:fd:3b:c3:e6:39:dc:5f:d3:a6:5a:43:3c:
32:54:6d:86:36:d5:ee:23:32:ed:3a:30:0d:8f:3a:9b:d6:be:
55:e4:83:fe:1b:df:8c:dd:26:dd:ac:28:51:57:ad:4a:63:db:
84:34:09:4d:b9:34:b2:27:67:da:07:37:95:6a:c9:c1:4d:73:
2c:d6:ab:1c:71:7f:33:2b:45:9c:8b:cf:8b:48:5f:07:a7:b7:
d1:ac:06:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:27:28 2026 by rpki-client