Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier: l16yaa4bjgjx3Hazx3HMKFnAqbJkyQ+00R1lyybTVos=
Subject key identifier: A0:25:14:4F:3A:F8:8F:EA:7C:A9:9D:BB:7F:C9:D3:14:A5:97:99:AE
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 01A1494F05D07310DAF9C6A840A1BFE57B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number: 100A
Signing time: Sat 17 Oct 2026 10:01:17 +0000
Manifest this update: Sat 17 Oct 2026 10:01:17 +0000
Manifest next update: Sun 18 Oct 2026 10:01:17 +0000
Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: 0EJQC7w2aXedNqcCWPCf+NAnqabGQwKdtLO2pPgIX2A=)
2: m26SchsQ_1UhkfbeCxw77FeJXCA.roa (hash: mdGSAQzmIJX1JB/CEMcZP3KjJ01KoAYsX4zgkL5y148=)
3: q_u69U7c2vxaq4Nl1v5Yc1MyuWg.roa (hash: 5dnA+LcITpNkdUu4xKxisyKSU227fPcdS2OGxJGeL28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:4f:05:d0:73:10:da:f9:c6:a8:40:a1:bf:e5:7b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: Oct 17 10:01:17 2026 GMT
Not After : Oct 18 10:01:17 2026 GMT
Subject: CN=a025144f3af88fea7ca99dbb7fc9d314a59799ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:ee:b4:25:84:82:3c:26:4c:20:b2:01:72:
64:b2:2a:d5:63:05:fa:c1:95:91:62:7c:a7:27:9a:
81:e0:9b:bd:d1:ca:59:ac:ac:b8:cf:97:f3:1b:51:
59:d0:f8:a3:58:ca:84:f0:b8:2c:af:e5:fc:ba:b3:
f1:36:a8:37:96:77:7b:f3:21:9b:fe:22:21:42:a6:
d9:74:c3:21:bb:5d:6d:ad:8c:25:d6:d5:18:b7:86:
fc:19:62:3b:7f:b6:7e:ba:a8:a4:b3:d6:1a:b8:d4:
1e:9d:7b:69:c1:d3:ea:78:79:ec:c5:cf:c1:2a:ca:
56:e6:79:36:23:3c:ad:8d:61:93:87:61:d7:d3:86:
ce:13:8c:ad:f7:63:4f:58:ee:f4:d6:22:b9:93:04:
8e:0e:65:50:8b:c6:91:0b:54:e2:51:53:4d:87:b1:
c3:99:bd:68:67:7e:6d:69:60:d6:1d:9d:fa:6a:32:
b1:4d:b9:14:f1:0a:2f:08:28:a8:d1:60:03:ab:2f:
9f:23:17:63:49:68:8b:c2:a0:60:ea:77:4e:62:b5:
6d:66:69:a9:0c:03:f8:ac:77:b4:33:85:60:f6:58:
fd:9f:b9:7e:ed:c1:fc:e0:a8:02:bc:03:bc:bd:34:
2c:06:c2:9d:61:41:96:d9:49:a5:90:18:13:80:d4:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:25:14:4F:3A:F8:8F:EA:7C:A9:9D:BB:7F:C9:D3:14:A5:97:99:AE
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:85:0c:59:56:96:85:73:00:42:51:d0:16:25:30:56:15:2f:
9a:98:b0:6c:35:d8:c3:06:82:dd:8e:f5:4e:08:73:a6:38:8e:
71:17:c8:65:5a:e0:7b:7b:99:e6:ed:8c:e8:20:6c:7a:98:66:
bf:61:b1:c7:d9:f5:6a:a3:4b:58:7a:32:3d:01:6d:fb:f9:52:
0d:ed:f3:8c:b6:be:7a:f5:7a:85:f6:53:0d:44:df:c2:3f:7c:
6a:80:4c:6b:88:ae:12:b1:ab:73:ce:64:8a:cb:01:37:e3:b6:
a2:d2:0b:9d:1f:d3:16:6e:54:78:96:52:e0:79:c9:31:e7:ed:
c6:fc:a0:47:90:e2:6c:ff:ec:d0:1f:c0:ba:b2:91:63:44:49:
fe:b7:33:15:01:85:1f:4b:3c:15:0a:00:d5:55:40:b0:45:e4:
a1:ca:92:3e:ab:39:d8:e7:eb:72:04:f0:f8:ee:0d:8c:03:2d:
fa:c9:f2:67:4b:51:65:cb:2c:fd:82:fd:8c:20:87:3e:10:f8:
e3:76:55:3a:8a:b6:57:06:1f:29:b1:81:49:0b:c8:84:6d:6a:
a2:56:10:24:7e:5b:9f:3e:b0:7f:13:95:f5:a8:2c:b5:04:78:
07:d9:b9:d6:57:88:e6:66:61:e8:98:5a:e3:ac:5a:48:1d:13:
d3:47:6c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:24:09 2026 by rpki-client