Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: KjaAH3qojxoGgZk7TkRb2EgyRdsX33Xilqlz5hO5CQs=
Subject key identifier: E0:86:45:EA:1C:3E:43:4C:FB:3F:B7:F2:58:B6:F1:5E:1B:FF:B8:CA
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 01A13CDC367FCD0E4006839322060A9027D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 1AAC
Signing time: Thu 15 Oct 2026 00:00:27 +0000
Manifest this update: Thu 15 Oct 2026 00:00:27 +0000
Manifest next update: Fri 16 Oct 2026 00:00:27 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: L0oIjCXEzMveUfu50EQLOyREP1sdMud+7zvBc92L3Ko=)
2: MoM66qQuhJcSL5w9TkLPi9sdoKs.roa (hash: /dt2y7/UKbT5EuF45pcmtQs53CRnIBBB6Rg/I22HBZM=)
3: rwInDctVSqf9bY5au3SgxXMR30k.roa (hash: HNhqme3U8E9COjNTzz0hBRfGIPWCZDCViGGXUd7ReyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:36:7f:cd:0e:40:06:83:93:22:06:0a:90:27:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Oct 15 00:00:27 2026 GMT
Not After : Oct 16 00:00:27 2026 GMT
Subject: CN=e08645ea1c3e434cfb3fb7f258b6f15e1bffb8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:4f:ec:13:8f:8a:3e:41:13:b4:9d:e1:c2:
64:18:a0:3e:f6:37:f1:05:23:82:b5:a8:5e:4e:b5:
cc:36:56:53:88:fe:2d:fc:0e:db:e7:72:7d:96:1e:
65:1c:1b:2d:61:f8:c4:44:db:6a:7f:23:37:45:96:
92:58:4d:33:85:da:fa:2b:aa:cf:03:b6:28:af:c2:
82:c6:07:b0:0e:65:4b:01:0c:4d:81:18:97:9e:24:
36:96:72:6a:e3:13:3a:80:ad:a2:71:c5:1b:b0:90:
ed:da:56:47:5f:8e:50:4b:6c:38:c8:c2:e4:f9:32:
b2:ac:c9:d1:25:f5:7a:de:c1:63:48:bf:bc:87:67:
a4:16:a9:bb:78:06:a7:ec:5d:99:d1:ae:a1:3a:27:
4d:73:ef:85:17:d6:fc:eb:e6:38:10:14:ab:f3:24:
18:03:b8:17:3c:62:fa:f1:9b:78:38:5b:f4:5a:d9:
00:75:a1:68:b8:9a:b9:ce:18:d9:b5:4d:b5:c3:b4:
a7:a0:80:a0:70:1d:22:88:ce:15:37:14:b8:59:07:
16:b2:2b:9b:d9:9e:28:62:07:f6:ca:da:af:4c:bc:
f7:fa:98:db:a5:a8:62:84:96:b7:49:70:e8:7b:71:
fb:cb:e1:a4:9f:8c:4c:6c:d3:7a:0a:5b:9b:bf:f6:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:86:45:EA:1C:3E:43:4C:FB:3F:B7:F2:58:B6:F1:5E:1B:FF:B8:CA
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5c:06:09:8c:5b:3c:96:d9:6e:c3:27:95:74:9c:64:2e:db:
c1:be:74:ac:8a:b6:df:aa:65:75:a4:34:97:2c:e6:20:3d:ab:
db:3e:9a:43:45:52:b2:3b:ed:90:fc:84:86:e8:32:a4:b8:25:
3b:06:c7:29:73:b2:d9:ac:ce:93:c2:46:29:b4:9f:74:9e:c4:
be:7d:0b:1e:fa:7d:23:25:27:a3:79:e9:e7:63:4c:08:a8:14:
50:73:54:c6:26:7b:08:d6:2c:21:4a:bd:c2:ff:29:80:5a:ab:
1e:53:d4:69:44:72:6d:8e:a1:4a:56:f4:8f:bd:f3:f0:97:ab:
e9:9d:0f:88:82:c4:0b:86:31:6d:5d:a2:15:a5:e5:e1:1e:ea:
57:4e:67:d1:5e:e7:85:9c:88:89:bb:f7:6a:67:bd:93:fe:08:
3b:21:ac:a7:44:db:12:a6:de:77:09:d1:43:99:63:d2:6e:e7:
47:d1:f4:22:c9:81:22:63:78:97:84:d9:f4:cc:35:b9:77:f2:
76:e3:ae:23:1d:02:86:74:2f:07:c6:60:03:7c:1b:fd:9d:78:
3c:f5:1c:72:41:20:a8:d8:55:99:af:9f:07:09:14:cc:db:2e:
dc:e8:5a:91:77:7f:b5:ad:38:5b:40:71:d9:97:fe:83:5b:59:
d8:f0:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:09 2026 by rpki-client