Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
File: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json)
Hash identifier: PwqnB052ko5kXcRJiDeibRy6L7GtLXgWe743kTOz6xA=
Subject key identifier: B3:8E:CE:91:06:D8:4E:85:58:50:F1:9A:D3:03:06:0A:CE:F9:7C:A0
Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
Certificate issuer: /CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Certificate serial: 01A13F70D175D347873924F593ABACA47142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
Manifest number: 1A34
Signing time: Thu 15 Oct 2026 12:02:00 +0000
Manifest this update: Thu 15 Oct 2026 12:02:00 +0000
Manifest next update: Fri 16 Oct 2026 12:02:00 +0000
Files and hashes: 1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: MLNiMrkTg4OUCvPsP6e1jUVBxx5vJLNGLbrYVBapkwU=)
2: GsL6G3Qz5ZjpuRYda1-7KFnYc0o.roa (hash: pJa6GuoaHJHw4hKMbDO80uXWDKK7cJe4mwiQpI9C0zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:d1:75:d3:47:87:39:24:f5:93:ab:ac:a4:71:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Validity
Not Before: Oct 15 12:02:00 2026 GMT
Not After : Oct 16 12:02:00 2026 GMT
Subject: CN=b38ece9106d84e855850f19ad303060acef97ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:93:97:c8:43:ba:a7:fc:96:8c:99:e5:51:
44:02:23:f6:77:1c:30:77:4c:5e:2a:c6:6f:49:7e:
69:a8:75:b9:5d:ff:b3:81:a2:e1:6d:89:f9:56:10:
db:75:59:82:82:8b:94:70:68:11:8d:93:ab:09:e8:
1f:bf:7a:1b:fa:36:b9:45:5e:af:aa:b1:77:1b:54:
ad:f1:c1:1d:6d:08:64:c5:2b:58:47:b3:f8:bc:c1:
d7:fa:53:d4:74:a2:d1:f9:48:c1:7d:37:c6:09:53:
a8:13:76:4f:0e:d6:b9:c9:a8:53:e9:37:ae:ba:cd:
28:43:b2:f3:ac:6c:9f:ff:90:2a:73:40:9e:e3:ef:
ac:3b:e7:71:1c:6f:57:f5:a8:a6:1f:6b:c8:1c:26:
d5:1a:ea:f0:85:78:0a:22:fd:a4:4c:b6:c3:29:90:
5f:d5:40:ad:c8:26:07:a4:7f:f9:26:fd:e0:7a:d1:
fb:f0:26:6a:36:41:5d:77:88:31:4b:01:18:81:ad:
e4:82:f5:eb:bb:b6:5c:ec:a4:44:d1:14:ec:4c:76:
4d:37:ea:dd:b6:69:91:1d:b0:68:ed:4c:c8:1d:17:
a8:8f:d0:d2:ef:f6:ba:d3:21:3a:66:bf:4d:e4:14:
c4:48:68:21:62:f4:bc:64:83:0d:ac:5d:8e:b4:43:
cf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8E:CE:91:06:D8:4E:85:58:50:F1:9A:D3:03:06:0A:CE:F9:7C:A0
X509v3 Authority Key Identifier:
keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cf:3a:38:e3:15:f6:be:2e:b0:1c:7a:4b:e4:5c:7c:d4:17:
56:03:13:0f:fb:51:4c:be:01:3c:e1:99:8a:a6:c8:0e:ec:0f:
db:39:12:60:63:ed:24:5b:f4:9d:e4:6c:34:04:6c:0a:45:03:
2c:e9:3a:92:03:7e:a3:56:6f:2b:c4:c2:d5:22:8f:a8:08:1a:
94:3e:6a:0f:90:42:1b:de:d9:ab:49:6c:05:2a:9e:c3:a3:40:
12:66:5f:ee:98:46:fa:99:2d:fb:da:40:fc:b1:3f:d4:96:ec:
53:71:13:8b:89:2d:c9:b7:e1:f2:97:07:40:1e:72:f5:44:c1:
e8:2c:9e:3d:89:17:46:06:43:cb:59:b5:be:62:b0:e0:c4:70:
2a:d2:eb:b6:04:8d:9e:7c:c4:a3:83:50:80:1e:d7:68:40:8c:
dd:72:6f:63:bb:e3:fb:ac:2c:58:8f:44:4b:55:58:a7:64:15:
64:d3:a7:92:29:09:9e:b2:57:8d:62:7a:eb:2a:86:27:72:3f:
59:17:49:0f:08:fb:36:21:13:4d:0c:61:05:0d:52:8c:4a:2f:
7e:ae:de:d6:b1:c6:21:90:c1:82:d8:e9:8d:8d:56:e7:c1:71:
a0:d5:e0:dc:f3:c8:64:6c:71:53:69:c9:66:c2:c7:43:d6:32:
65:da:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:26:31 2026 by rpki-client