Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File: k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier: NLh2K1QOsz3nLlYPqKadlTUlUm8qCcAfblMWpzPaukg=
Subject key identifier: CB:48:A2:17:AA:79:0A:62:88:9F:C4:8E:6F:48:8F:17:5B:9F:14:72
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer: /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial: 01A1464D5F3446BD7147B2A1666F036F5C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number: 0A1E
Signing time: Fri 16 Oct 2026 20:00:37 +0000
Manifest this update: Fri 16 Oct 2026 20:00:37 +0000
Manifest next update: Sat 17 Oct 2026 20:00:37 +0000
Files and hashes: 1: Ke9JZJzAeU2y3MAj67Y-ezxLtDU.roa (hash: ol9IiLjFY9gZ/Hu0WdjazLtITNLeMCgHDACJrZ2QFng=)
2: SfyGLqqUmhSJdrvNRjgqa719X1o.roa (hash: W5M17NIRo4ubi5ZsSmZINBoyskG2lROrQJ2bZs1LviM=)
3: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: 9JpUYS7viD7v2fwi5Sn0uBnFpaBtPjdltO1hFMPbP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:4d:5f:34:46:bd:71:47:b2:a1:66:6f:03:6f:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Validity
Not Before: Oct 16 20:00:37 2026 GMT
Not After : Oct 17 20:00:37 2026 GMT
Subject: CN=cb48a217aa790a62889fc48e6f488f175b9f1472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:15:bd:f9:fd:75:6f:0b:41:fc:90:69:21:
d7:a7:0c:32:00:9f:55:e1:75:85:ed:6d:90:98:cf:
ca:51:59:25:5c:a6:0e:f9:8a:1e:06:26:e9:68:08:
24:27:60:96:43:85:0c:0e:cf:52:d0:79:a4:ea:d6:
09:02:f0:3e:dc:79:81:a9:45:35:01:31:9c:e9:52:
da:a3:f7:0b:b6:d9:2f:94:14:fd:9f:6d:3f:5a:e4:
c3:c8:c8:c7:bb:50:28:70:e9:c7:3b:f9:c9:bf:38:
be:d0:64:37:7d:4e:34:81:ac:fa:08:42:7d:26:40:
ee:73:dc:73:4a:46:eb:de:53:6f:1b:61:f0:48:33:
7b:ae:e3:38:57:18:3e:20:03:4d:42:65:7e:c6:b1:
60:1b:b8:8e:a1:ae:e2:66:fe:af:31:0f:8a:3c:67:
6d:2f:f3:b2:5d:c7:82:f9:84:e9:27:67:f9:d6:43:
45:48:83:c5:9e:e2:16:9c:72:1d:7a:69:37:03:84:
fb:eb:8c:35:da:2f:76:c4:74:a0:ff:0e:bf:1c:ab:
e2:91:74:d2:fd:9a:c8:a5:55:75:73:08:ca:80:d3:
4c:3e:6e:e6:4f:17:27:b3:36:1c:3d:b0:24:de:e9:
28:64:28:57:22:cd:05:fa:53:f6:b8:ed:26:83:77:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:48:A2:17:AA:79:0A:62:88:9F:C4:8E:6F:48:8F:17:5B:9F:14:72
X509v3 Authority Key Identifier:
keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:84:e1:42:45:07:ec:11:1c:7d:05:3d:8c:e9:59:d6:08:19:
e7:ed:bf:9d:31:fe:bc:ee:8d:2d:06:0b:a6:ac:86:d5:b3:af:
6a:d6:b8:ac:3a:03:a7:37:78:00:e4:a1:0e:a1:86:ed:1a:8f:
6f:45:14:ff:14:cd:e4:34:05:6e:fa:4e:e7:4a:09:29:18:ef:
9b:93:67:88:3e:aa:2f:23:02:75:77:8f:92:1a:25:46:8f:31:
cd:e2:3e:c5:00:f4:4e:bd:e0:e6:86:91:29:85:fe:fc:01:56:
29:30:4a:de:8e:d8:e5:10:c2:ee:f1:2c:f0:a3:48:91:59:af:
4f:75:72:42:15:9b:b3:fc:95:25:00:9d:5d:2a:ae:b3:e6:fe:
10:3e:f4:16:1d:d9:93:d6:d3:02:34:f3:6f:a0:a9:3e:64:3c:
ff:03:04:3b:21:58:8c:19:e9:f8:12:67:af:41:16:43:d5:e2:
0e:ad:66:2d:da:9e:cb:58:69:21:f6:3e:3c:d9:ee:0b:c1:4c:
aa:7c:af:80:94:6c:a6:93:ad:32:7c:9d:43:ad:b2:cc:a0:a6:
40:7d:86:8e:e3:82:a0:84:7e:cf:9c:d5:46:81:65:5c:a2:69:
21:42:12:c6:e3:da:90:d7:ad:d5:79:28:1c:fd:da:5a:f0:0c:
00:40:ef:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:06:46 2026 by rpki-client