Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: ZddrSClNaVGvW6V2tXTaGQwmyOsvz+aLImzTlUEMaP0=
Subject key identifier: 0F:F7:B7:BF:43:71:F9:40:E0:16:88:28:5F:19:54:CD:2B:7F:0C:05
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 01A001DD150A8917603872C3B796EA636050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 20:01:01 +0000
Manifest this update: Fri 14 Aug 2026 20:01:01 +0000
Manifest next update: Sat 15 Aug 2026 20:01:01 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: RQ6hEsSt7HiVkcUTO+FKTzyg/exBQKWbQaqYDTq1eEM=)
2: M2zIxC99QbRxfnET-6NXsK5UatI.roa (hash: rntTwdXiHDwjJTZclnHejjzBJUzAiOfJIRV0G//u/Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:15:0a:89:17:60:38:72:c3:b7:96:ea:63:60:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Aug 14 20:01:01 2026 GMT
Not After : Aug 15 20:01:01 2026 GMT
Subject: CN=0ff7b7bf4371f940e01688285f1954cd2b7f0c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:fe:a3:60:70:54:d9:c4:bd:7e:a1:35:8e:
73:ca:7c:b5:7f:1c:36:7a:7b:ed:f1:46:b8:c5:1b:
82:40:0e:e5:23:e8:07:27:1f:93:5c:e5:44:72:ab:
42:91:b8:45:c1:de:3a:57:60:72:e7:7a:c9:ef:2c:
a4:5e:5b:d3:70:17:08:26:d1:e8:66:ec:22:97:5a:
a9:ee:cf:ff:67:95:04:ed:95:b1:79:1c:f8:33:03:
95:52:dc:a0:68:3d:b6:81:08:e6:f0:cf:e9:a6:b3:
76:97:34:ac:da:20:c0:0d:fc:60:a2:87:66:3b:fc:
46:49:31:ab:28:4c:4b:d1:92:54:2d:ef:4a:05:db:
fe:b8:2b:d9:a1:e5:3c:cf:a2:ab:77:65:0f:04:3f:
85:ce:60:c4:41:2a:37:1b:cd:d8:0f:84:ab:94:75:
e6:d8:ba:a4:44:57:35:b4:4d:5b:98:bd:1d:be:e3:
67:44:65:84:45:28:f1:e9:aa:91:b7:11:32:63:75:
34:3e:18:95:90:b9:69:d6:f1:d5:a2:54:d2:14:19:
75:5f:f1:38:0c:bb:ce:f5:b4:35:2c:a1:0d:bc:aa:
fd:2b:db:69:84:b1:e7:5c:a8:04:fd:f1:51:e1:b0:
fe:87:cc:dd:7d:37:94:de:cf:e2:ee:53:56:7e:d7:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F7:B7:BF:43:71:F9:40:E0:16:88:28:5F:19:54:CD:2B:7F:0C:05
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a8:62:c5:b3:c2:9a:0a:13:86:f7:d0:29:00:9a:88:59:e8:
b1:45:a4:23:2d:58:2f:61:f4:61:77:9b:0b:f5:a1:ff:13:9c:
d9:ec:49:f4:02:97:4c:3d:e0:9e:4b:01:22:b1:1e:c9:62:73:
7d:9b:ac:94:b5:b1:51:34:0d:3d:36:a5:56:d0:70:22:82:43:
2b:51:59:cd:7d:6f:eb:44:a3:79:12:ff:0c:ba:67:ed:4c:a2:
db:f3:2a:e4:6a:46:9c:88:ca:1d:45:fc:ba:46:a9:ea:d0:36:
01:5a:3d:d6:fe:0f:5b:a2:2b:ec:b9:ca:4d:03:4c:45:a8:27:
70:a8:ef:d5:c0:64:a5:28:79:e8:49:ed:5b:62:4c:bd:74:28:
83:89:cf:ef:b5:95:6c:0a:33:29:69:77:bc:bd:b2:96:53:70:
9c:55:bc:01:3d:0f:cf:b1:e5:5d:9c:04:63:0e:d8:44:32:c6:
05:7e:36:fb:1d:f7:9b:34:1f:e1:13:7b:13:af:56:12:f9:e0:
66:cc:fa:05:be:d1:0d:aa:48:91:38:69:dd:5b:04:1f:cd:87:
ff:c0:70:29:64:ca:ea:d6:90:ba:12:95:a2:33:25:e0:37:a2:
9a:76:cd:b2:02:e9:cd:fe:5f:5d:77:99:f1:f5:24:01:2a:b3:
e5:b4:c5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:11:24 2026 by rpki-client