Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File: 6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier: ns9ZuTBYJC6u1ZBJFgqm/dbMk7hTux4yTa1xpCLSaXs=
Subject key identifier: DF:DD:7E:F5:76:FC:69:00:4B:98:7F:2F:DA:10:A3:A9:15:B6:6B:99
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer: /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial: 01A17D73D5E63229E296C48BAA483F756A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number: 11AC
Signing time: Tue 27 Oct 2026 13:01:45 +0000
Manifest this update: Tue 27 Oct 2026 13:01:45 +0000
Manifest next update: Wed 28 Oct 2026 13:01:45 +0000
Files and hashes: 1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: DyfogOQBsQO3s3T/ix5pSu3otGAYTea7ASR9rrGhB9U=)
2: BHtYTKXAhvuK5qQH2dMZrKgOMHg.roa (hash: x0aDgSbM0k6Qn4DXz0HQEQO8d3rc25aCpgfGk0kEatY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:d5:e6:32:29:e2:96:c4:8b:aa:48:3f:75:6a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Validity
Not Before: Oct 27 13:01:45 2026 GMT
Not After : Oct 28 13:01:45 2026 GMT
Subject: CN=dfdd7ef576fc69004b987f2fda10a3a915b66b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:24:95:b9:74:ee:32:c2:e9:0a:e0:3e:6d:
0e:b8:fd:0d:44:4f:c2:04:93:23:af:ed:6a:2e:9a:
87:9c:b1:34:cd:3c:92:e8:01:7f:08:48:f9:81:58:
2c:6a:5c:49:bc:75:8d:c4:a8:a8:a6:f8:aa:66:b5:
b7:da:da:ec:40:4b:4b:86:ff:1c:8c:e7:b3:05:a7:
24:e5:68:41:62:6d:a8:5f:59:3e:1d:f8:21:0b:9a:
e0:d1:57:bb:be:42:da:13:db:b9:84:4b:0b:48:48:
16:eb:aa:e3:51:c2:f7:b3:99:9c:72:5e:e4:f3:3b:
4a:09:6e:4d:25:d0:f2:8a:24:13:1d:8e:30:93:ef:
d5:a9:80:54:f9:11:07:c5:4e:9a:43:6f:0a:cb:f3:
46:22:9e:34:a1:dd:88:48:58:68:0a:20:5b:4b:ef:
9c:34:2c:4e:c1:a0:8f:42:66:93:da:54:93:a4:61:
d8:79:c7:c5:c8:a8:83:65:a7:3e:8d:cb:da:9f:ad:
62:e1:3c:86:59:b5:f8:88:f2:0a:16:2e:6b:c4:58:
5f:5b:a9:4d:1d:b2:63:97:e2:b8:d4:7e:f7:6c:c0:
e3:0c:58:2e:6e:f1:5f:89:11:75:a8:db:7b:6e:d0:
d3:21:dc:70:ae:8a:0e:16:47:2e:98:7d:ee:c2:93:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:7E:F5:76:FC:69:00:4B:98:7F:2F:DA:10:A3:A9:15:B6:6B:99
X509v3 Authority Key Identifier:
keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7b:b4:8a:99:20:72:5e:fc:a4:63:7c:99:f7:04:dc:3a:d1:
43:44:34:ce:d0:f5:08:31:50:bd:fd:2d:96:0f:1b:0e:13:c0:
ba:91:e2:ce:f4:98:ef:b9:f4:be:00:d2:1a:63:9d:38:d8:c4:
3d:03:5a:c5:b6:74:8d:b6:52:80:b1:02:0c:d5:32:e2:c8:d9:
00:c5:b0:73:60:26:26:13:83:e1:e7:d7:33:30:0c:3e:32:de:
3c:d2:2f:7a:fc:f6:f0:8a:5d:60:ac:fd:f7:8a:3b:d7:95:0e:
75:9e:b1:fc:f9:c2:07:08:68:95:a6:9d:89:f4:4b:46:1e:4b:
c3:e2:06:c9:51:bc:de:94:09:15:18:9d:9d:bd:18:81:02:1f:
e6:6d:db:f3:53:87:99:83:e9:aa:be:29:08:46:57:2e:53:14:
36:b4:08:b6:b5:0f:ce:f8:90:43:c0:fe:e0:c7:f7:7e:a7:4d:
fe:03:59:a1:82:37:ce:84:36:4a:f5:de:42:f9:fb:bf:39:29:
51:25:50:35:27:01:67:a6:36:82:94:c6:48:70:3f:31:fa:3d:
29:80:35:45:17:09:08:c8:b1:ac:b7:f2:a0:0a:36:50:db:40:
87:18:bb:3e:ba:cb:3c:7a:a3:ab:06:b5:0c:71:14:df:51:68:
5c:77:c2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:29:05 2026 by rpki-client