Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
File: 6lg9YfLlemsW6ksanKJ7slDXSO8.mft (raw, json)
Hash identifier: EcmTxSa4y8ammCjv/r/UDu/DhwUVfgrD0WgK1bLIvkk=
Subject key identifier: 08:9D:65:6E:52:67:B5:32:36:F0:FD:63:58:D6:F3:7E:17:9D:CD:DC
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial: 01A000CA01A698E1BA9EE597DE95B0F60C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 15:00:33 +0000
Manifest this update: Fri 14 Aug 2026 15:00:33 +0000
Manifest next update: Sat 15 Aug 2026 15:00:33 +0000
Files and hashes: 1: 6lg9YfLlemsW6ksanKJ7slDXSO8.crl (hash: fTVcunooThS/LMWat4W6BNY9JpqohPJ035MGhYuyY+k=)
2: Do7LVZlKxOpFLhQk4utS2y9-GH0.roa (hash: yUU9KHVXsH2kllJ9B9AdvusBySi+NzlMxs4jnEA4zmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:01:a6:98:e1:ba:9e:e5:97:de:95:b0:f6:0c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Validity
Not Before: Aug 14 15:00:33 2026 GMT
Not After : Aug 15 15:00:33 2026 GMT
Subject: CN=089d656e5267b53236f0fd6358d6f37e179dcddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:3d:d0:83:be:45:b9:e0:b9:9f:4b:f2:d4:
fa:af:46:50:35:7f:1d:db:21:93:a8:8e:a7:be:cb:
94:31:c1:c7:0c:c2:b5:2b:1e:a7:fc:32:1e:6e:c9:
42:72:53:9c:5f:94:fa:5e:4b:e8:29:bb:73:b1:cc:
85:2b:73:ac:84:47:be:53:e1:e4:b8:1a:dd:6e:aa:
0c:6b:3f:dc:f4:89:e6:05:c1:97:ad:26:b3:75:ee:
a6:92:71:4f:ec:c8:93:14:da:a4:33:f4:54:0d:1c:
a2:d1:36:e6:e3:07:05:3b:80:59:fe:ec:3e:b9:46:
69:a8:2d:4c:6b:7c:40:57:c3:e3:84:34:4f:07:ec:
a9:0c:f4:fc:e8:15:ec:af:66:54:36:df:5b:6f:a0:
b3:f2:e7:6f:1e:96:f5:3e:03:8f:45:45:dd:df:e0:
66:b7:76:31:16:20:b0:1d:a4:3e:3a:ab:2f:97:3c:
6c:df:33:ab:5b:ff:a0:71:b3:e3:d4:42:52:6f:8d:
ad:57:0a:8c:44:80:e5:e1:86:7b:10:cd:dc:f4:57:
a9:af:6f:68:41:73:b8:65:4b:2b:aa:a4:f4:b2:1c:
cd:67:dc:32:bf:80:7f:4a:3e:7b:f5:94:ce:01:ce:
fa:ea:74:50:18:cd:94:52:fb:56:ad:63:49:23:86:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9D:65:6E:52:67:B5:32:36:F0:FD:63:58:D6:F3:7E:17:9D:CD:DC
X509v3 Authority Key Identifier:
keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8c:fd:7f:de:4a:6e:7a:48:5e:99:6c:0c:e7:59:f3:bd:05:
e9:0f:49:19:c2:41:af:c7:5e:c4:90:49:7c:f4:3c:b8:87:91:
35:27:1c:6d:f3:a4:80:0b:b9:f4:c6:c4:10:35:51:ef:7c:8a:
4c:ce:c0:f7:8e:44:cd:b2:16:a6:47:d5:38:f5:40:b4:bb:0c:
ea:9a:67:a4:59:54:d6:d6:6d:4d:12:17:02:dc:a3:0e:76:75:
23:c2:53:de:30:16:0c:ad:f2:fe:9c:a6:10:d1:6d:a9:af:aa:
dc:77:49:1b:a5:24:ce:1f:92:e7:df:42:3e:e9:f5:87:50:f1:
d0:27:fe:4b:56:a0:8a:9e:94:71:7e:43:08:21:c6:62:00:98:
ac:4c:62:49:a3:8e:7d:54:5b:61:29:aa:46:e9:ff:0b:61:5e:
48:a1:10:d7:dd:a4:f7:7d:2b:63:47:4f:2c:cd:9d:7e:53:c0:
0d:93:39:78:2f:5f:ec:55:78:a2:af:f9:09:bb:5e:58:e9:6a:
df:b7:2a:b0:a9:c0:17:3b:d9:70:4b:81:71:a3:f7:f4:92:76:
44:35:b1:83:7c:ae:8c:ff:be:f1:0e:09:78:1c:e4:3a:0a:0e:
83:6e:0c:b7:17:e3:49:df:db:61:6a:0d:16:ee:54:0e:8e:b8:
3a:e8:76:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:05 2026 by rpki-client