
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File: 6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier: MyG9gO6YK0VwsHFL2kCBigVzAgKm09NnWF3ZQETAX+Y=
Subject key identifier: 4B:41:07:DA:DD:2C:28:33:17:F0:C9:9B:C9:E5:CF:78:83:10:0E:05
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer: /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial: 01A13FDDF2370E89D525D9B579E32933BFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 14:01:12 +0000
Manifest this update: Thu 15 Oct 2026 14:01:12 +0000
Manifest next update: Fri 16 Oct 2026 14:01:12 +0000
Files and hashes: 1: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: inH6WG0nAFb/8WNleI2dy6vT+Re7a/M6wa0FcfEZqgI=)
2: NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa (hash: b2x0KyvUzCbJHB1hWOnKC2ju1PwOkyG9Q3mb0qlRsLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:dd:f2:37:0e:89:d5:25:d9:b5:79:e3:29:33:bf:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Validity
Not Before: Oct 15 14:01:12 2026 GMT
Not After : Oct 16 14:01:12 2026 GMT
Subject: CN=4b4107dadd2c283317f0c99bc9e5cf7883100e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:d2:9d:9b:b5:35:13:e7:3e:72:03:f5:8b:
ce:10:2f:77:34:a6:61:e5:a9:30:19:fa:82:df:a6:
dd:57:25:64:fd:7a:52:07:ff:d4:0f:95:a3:2d:a8:
20:7b:86:4b:34:aa:a0:44:cb:6c:13:3f:85:76:14:
7a:fb:f9:47:03:64:a3:b4:14:f3:b4:f8:02:96:bb:
99:8f:2a:1e:64:73:48:6a:b1:af:ff:cf:1b:cf:30:
cb:37:1d:bb:eb:ff:7a:92:b9:fe:c9:12:f0:44:27:
17:41:7f:e3:e7:02:88:b0:b4:3e:d5:d6:16:ad:c5:
44:f6:75:e8:2e:e7:16:e0:0e:be:4a:74:85:94:57:
f5:51:9f:68:86:6c:4a:cc:a6:4b:be:f7:4e:be:e4:
28:22:e2:32:a4:2e:ec:0b:3c:1e:14:00:fc:3e:ee:
db:37:24:0c:6a:6e:87:1f:54:05:23:7b:b9:f1:c4:
bc:f5:c1:96:a6:5e:4e:eb:91:3b:5c:06:3f:57:03:
53:61:44:59:5d:6c:05:36:e9:0b:75:32:cf:d3:b3:
4e:8f:85:c0:4d:45:9b:d1:74:23:06:44:3b:47:57:
59:43:dc:53:6e:4d:96:9e:5c:ab:82:6b:86:7e:a2:
62:99:b3:be:27:4d:a4:fa:13:8f:7c:ee:93:67:ee:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:41:07:DA:DD:2C:28:33:17:F0:C9:9B:C9:E5:CF:78:83:10:0E:05
X509v3 Authority Key Identifier:
keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a0:02:73:2f:c9:e3:17:2a:52:e1:4f:2c:58:ee:c6:2d:11:
ff:51:ab:1b:dc:70:6e:2f:7d:d6:f8:e0:04:b8:91:78:d6:ef:
2d:05:20:3d:8e:30:26:bb:e2:ae:ff:d3:69:e0:10:3c:c1:ad:
e4:57:ac:35:df:5d:bf:3c:74:94:63:b3:dc:1c:eb:80:94:c7:
35:ac:14:6e:1a:00:9c:a3:53:a9:f9:50:3b:91:20:76:6f:4a:
cc:7f:eb:8e:49:dc:23:01:ac:f5:bf:b9:ed:c6:c0:3a:9f:ae:
2b:bd:6c:53:3d:db:7b:0a:df:ba:ac:3c:d1:c9:32:bb:53:7a:
32:3c:84:1c:0b:bb:97:87:94:97:5d:69:4a:57:17:e5:6f:83:
f4:e0:56:91:c5:0f:26:ab:ef:0b:6f:c4:ed:ba:1d:53:b9:59:
37:40:56:70:2c:f2:96:bd:8f:17:83:a2:cf:1f:ed:d1:7c:42:
d5:65:41:fd:f7:6d:cd:9b:8d:d7:3c:8a:76:31:7b:7a:a9:bb:
46:82:85:5c:9d:e1:c2:bf:ba:99:72:c3:f2:39:80:70:e7:f0:
2c:9a:94:af:96:ff:72:aa:31:a4:64:2a:0e:d5:6e:8f:a1:3b:
9d:61:ac:ad:46:82:32:1d:87:91:6f:0e:36:ec:61:17:44:1c:
a8:ba:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:29 2026 by rpki-client