
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
File: 6w649Uh9dBqMxtbfOzkhke0-7T8.mft (raw, json)
Hash identifier: nZfMRKiOHujVPnShxATxop+5DMnqBivymeYx/RR04zc=
Subject key identifier: DD:C2:BE:91:61:81:69:2D:E2:74:56:53:82:DF:AE:17:5D:A0:38:3A
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Certificate issuer: /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial: 01A000936C2C3A9DA3B1631C476F898AD6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
Manifest number: 0FAF
Signing time: Fri 14 Aug 2026 14:00:56 +0000
Manifest this update: Fri 14 Aug 2026 14:00:56 +0000
Manifest next update: Sat 15 Aug 2026 14:00:56 +0000
Files and hashes: 1: 6w649Uh9dBqMxtbfOzkhke0-7T8.crl (hash: OBbFpz6hRLp+wfvMrECVLLPl1h5PAlt1aEAnl7VF7n8=)
2: BKV_fu3YFOoxYmo6YqQLV_km-4E.roa (hash: ifeOZt3xfJQ0veX8MeURu5Xl/bcGWTOWIc6ZubLu+6U=)
3: xPHCIlwZRFqDfgyxd_czObp8uN8.asa (hash: tM0NdTcgIP9FIU4gR/sMVjLjvE8IKOWb7Ddeoclduhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:6c:2c:3a:9d:a3:b1:63:1c:47:6f:89:8a:d6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Validity
Not Before: Aug 14 14:00:56 2026 GMT
Not After : Aug 15 14:00:56 2026 GMT
Subject: CN=ddc2be916181692de274565382dfae175da0383a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:8b:ef:82:34:82:4f:91:68:23:7a:88:37:
2a:7d:32:15:e5:03:36:7d:f5:e1:d5:bb:cf:0c:fc:
ff:b0:0e:c1:ed:f9:5b:12:90:94:d6:5b:60:4e:e3:
04:ed:c0:14:d5:27:49:05:fe:e9:d1:a1:47:3d:58:
f8:50:3c:0d:9c:ac:02:0c:1c:ab:13:99:30:b7:24:
18:14:0d:b9:8c:6e:63:6b:d3:79:1d:7e:39:85:f7:
2d:fb:38:03:1e:aa:86:a3:94:d7:cf:3e:ae:2e:67:
cf:e0:f9:3c:aa:ee:67:eb:1c:0c:1b:1d:4b:11:c5:
ec:a2:20:f6:c4:db:8a:c0:e0:9a:db:6b:cf:8a:16:
16:47:24:15:d4:3c:72:ca:e9:9f:9f:6a:14:29:91:
88:c4:ee:9d:5a:e5:1b:24:1a:a6:ed:d3:51:1e:0b:
00:65:56:80:30:3b:74:8e:55:b5:f5:27:5f:b1:a9:
67:06:a5:76:fb:bd:85:33:03:85:f8:b5:9a:90:1e:
8d:6e:25:6f:29:71:9f:15:ec:61:60:44:1b:b9:51:
8b:de:50:0d:71:e0:18:34:a8:9c:13:b9:88:70:c8:
5d:90:19:d4:64:58:4b:58:97:c3:06:50:af:4c:e0:
8b:7a:ab:e9:bd:d5:b1:50:f7:5c:22:d8:52:79:7d:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C2:BE:91:61:81:69:2D:E2:74:56:53:82:DF:AE:17:5D:A0:38:3A
X509v3 Authority Key Identifier:
keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7c:21:90:6f:80:3c:3d:34:ff:a2:b4:ac:f2:85:6a:5e:e0:
aa:23:c4:b8:16:0c:8b:14:62:b8:01:47:b9:44:4c:29:53:80:
e9:78:d2:bb:c7:d5:f3:8d:ac:a3:44:c9:2c:8a:f8:79:c2:25:
f3:c0:71:0b:25:f1:eb:b9:96:4c:6e:d3:fd:8b:6f:8e:01:d7:
83:2b:05:cf:0a:79:f7:04:2b:17:33:78:96:4c:11:30:86:d5:
61:df:df:70:c4:7c:72:c3:45:c4:5d:56:5e:c4:c9:02:59:96:
ef:b6:4d:97:3b:db:41:55:99:44:24:b1:4f:cc:17:e8:d2:24:
ae:9a:ed:df:0f:aa:4e:1b:1e:1f:1d:31:07:ce:18:60:23:5c:
80:fd:5f:21:14:83:20:d2:48:8f:0c:bc:18:5c:c5:3f:7a:ed:
ec:0e:96:77:87:83:96:cb:94:64:c6:30:59:ee:bd:11:71:90:
3b:e6:ae:75:67:16:0c:38:49:7d:b9:93:dc:6d:4e:6c:09:b5:
09:e9:fc:f5:13:1a:99:6e:8f:72:13:d9:ea:ca:f6:d7:a6:f2:
ea:90:42:10:1f:9c:1b:5a:f7:b7:c2:e8:4e:bb:6e:af:d4:d2:
15:51:a7:6c:a6:cf:fe:46:ce:88:fe:7e:e6:55:fa:59:f9:13:
94:96:69:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:33:42 2026 by rpki-client