Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
File: 6f383DJhtXr63-1zD7Le2yhkn88.mft (raw, json)
Hash identifier: eXmrRb0baC/wZJP9aX6U2FuorrJ8T8oamIMTgrWjF78=
Subject key identifier: 64:4D:4A:9E:0C:81:90:A1:5D:90:E4:A9:8C:6F:81:7B:00:6C:65:3E
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 01A13F6FF47F1C5339CB4A39D10907902336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
Manifest number: 1AAC
Signing time: Thu 15 Oct 2026 12:01:04 +0000
Manifest this update: Thu 15 Oct 2026 12:01:04 +0000
Manifest next update: Fri 16 Oct 2026 12:01:04 +0000
Files and hashes: 1: 6f383DJhtXr63-1zD7Le2yhkn88.crl (hash: OiMnY1bLWzjiVbVYrcyBFJgs01kEcX+wO1w/LG7WT64=)
2: z8QPDmNfQ0U5nDiOWR6fhTlT5bY.roa (hash: JpJdMydt2d4jsczclhW+ZcOFIoTDZoU5V9xzlSAiVrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:6f:f4:7f:1c:53:39:cb:4a:39:d1:09:07:90:23:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Oct 15 12:01:04 2026 GMT
Not After : Oct 16 12:01:04 2026 GMT
Subject: CN=644d4a9e0c8190a15d90e4a98c6f817b006c653e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:63:e5:2f:5e:7c:08:c8:99:25:26:df:17:
da:ca:a4:c1:84:b7:bd:fd:9f:b7:60:3a:5f:66:95:
60:9a:4c:bc:0a:e3:c0:c8:b9:c2:29:bc:29:76:3c:
2b:f8:6e:12:71:6e:43:2e:2e:24:02:15:66:4a:41:
29:e4:48:5f:f4:d1:97:1e:b8:fe:2c:42:01:7c:6c:
48:56:2d:f4:3f:55:4c:24:bd:2c:a7:9f:cb:c4:5c:
57:ba:26:b8:04:cb:7c:d0:5b:72:57:01:6b:dc:77:
2e:2f:14:5b:ff:73:a1:06:e9:22:98:35:bc:df:0d:
01:12:d7:20:13:0e:44:e8:49:81:7b:d6:29:3d:a2:
09:38:07:00:8b:38:b6:23:3b:17:1d:33:95:09:62:
16:90:d7:ed:7b:04:78:78:87:23:8a:2d:5a:f3:ed:
b4:21:af:ff:09:a3:9a:d0:7d:45:ba:a1:4e:9d:a3:
66:aa:0b:0f:18:a4:42:49:16:ac:44:32:29:e6:e6:
3b:87:5c:e2:fd:55:c2:a8:39:e1:84:c7:ad:ed:70:
30:b7:3f:01:c0:a4:3d:53:df:00:c3:af:f1:15:0b:
92:e2:8e:69:15:75:c8:0b:e8:20:9b:bf:82:94:d9:
fb:e7:61:f6:82:43:90:d0:16:53:91:e3:f8:42:3a:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4D:4A:9E:0C:81:90:A1:5D:90:E4:A9:8C:6F:81:7B:00:6C:65:3E
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:60:6d:23:2d:60:fa:5e:0d:99:d7:e7:6e:64:db:2a:9a:22:
ab:05:2f:78:71:5b:7a:bb:48:76:1c:29:b7:4e:bc:7c:e1:f3:
f9:0d:96:b1:03:ac:cc:8a:00:ca:45:4d:4d:bc:ba:0c:85:3f:
9f:e3:da:1d:d9:a4:9f:57:77:9d:6e:a5:71:8c:35:43:40:4c:
f3:0a:81:cf:bc:1c:0d:cc:27:af:26:b1:82:52:e1:22:ae:a9:
48:62:a4:26:3a:4a:c2:01:7e:9a:95:0c:9a:0d:0e:a8:aa:9f:
86:6b:e5:ad:bc:fb:64:f2:3d:12:55:c6:dd:0c:8a:a6:50:90:
2b:ac:fe:f6:ee:68:25:d9:f8:44:9a:86:01:47:93:10:a6:02:
e9:69:9b:f4:10:46:05:43:05:71:ab:98:0b:19:44:78:89:94:
f9:36:b3:d1:4b:e6:84:e7:ce:1a:2e:75:39:d3:51:56:60:84:
c0:d8:d2:6f:46:ff:68:6a:5f:bf:02:46:26:0e:ed:19:3c:02:
ff:d6:25:5d:be:03:96:a9:bb:e5:7c:15:cd:90:29:64:53:09:
d7:9d:fd:a2:9a:38:d3:a3:9b:ac:ee:3a:f4:da:8b:bb:1b:e8:
1b:9b:49:0d:79:e0:09:d1:f3:e7:49:99:43:13:6e:2d:3e:8c:
52:3f:3a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:57 2026 by rpki-client