Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: mSz4gw7a5tqHlGfgwYdaZSIOqU4zL1ksE/ocDO79N+w=
Subject key identifier: 36:1C:47:4C:12:E8:D1:13:36:CD:54:64:FC:60:C7:23:92:D2:F9:7D
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 01A1841A84A1E4EF7EE36A3E3F99EA5D6541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0DD2
Signing time: Wed 28 Oct 2026 20:01:32 +0000
Manifest this update: Wed 28 Oct 2026 20:01:32 +0000
Manifest next update: Thu 29 Oct 2026 20:01:32 +0000
Files and hashes: 1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=)
2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: 00LxGMdy6FxCVvh0VL7ek2JVGPx+LCNQV5qIbcJBYP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:84:a1:e4:ef:7e:e3:6a:3e:3f:99:ea:5d:65:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Oct 28 20:01:32 2026 GMT
Not After : Oct 29 20:01:32 2026 GMT
Subject: CN=361c474c12e8d11336cd5464fc60c72392d2f97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:76:aa:b0:aa:f5:56:ef:5e:23:a0:15:4d:
9a:0e:26:e1:dd:8f:df:ac:dd:01:68:44:22:30:27:
99:f9:71:1f:5a:cf:a6:40:34:46:49:60:7d:e8:9c:
ae:04:a0:c1:41:0b:a2:9f:a9:95:03:73:7c:e3:50:
73:4c:b9:80:2c:69:81:0c:cb:c5:ce:cb:95:83:be:
e5:b0:83:80:6c:16:a2:78:12:03:6c:0c:e8:32:73:
4b:32:e6:18:34:1e:af:67:f5:8c:e2:6f:68:ca:90:
10:e5:c0:a3:75:c7:62:79:84:66:5b:8c:f4:dc:e8:
84:9d:82:c9:1a:45:ab:12:b5:eb:a8:c6:b3:f3:84:
58:69:13:19:b7:cb:d1:86:b1:38:88:b2:c3:76:fb:
9d:d8:65:0a:6e:f7:54:12:16:65:c3:eb:f0:d3:16:
fb:69:08:9b:20:37:86:83:ad:a3:92:36:fd:1d:7f:
9d:4d:8a:fb:6f:1f:2e:3f:61:28:ac:89:4b:41:4e:
06:b7:ff:c4:09:51:fd:fd:4c:8d:20:4b:79:3a:2b:
8a:46:92:18:44:a5:c1:33:97:45:43:45:f6:36:98:
6f:8c:45:72:7b:e8:35:65:61:a8:ef:a8:7e:ab:90:
95:d4:85:25:8a:af:9c:8f:61:7b:ec:0c:ea:d3:0f:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1C:47:4C:12:E8:D1:13:36:CD:54:64:FC:60:C7:23:92:D2:F9:7D
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:28:a6:34:a9:c6:9e:90:6a:e3:b7:73:48:21:df:07:a7:35:
dc:57:ca:26:91:63:9f:91:67:6f:88:33:43:77:ae:2e:3c:69:
47:af:0d:a1:88:64:4d:11:60:42:6c:1c:1f:58:7b:97:0f:1d:
bb:db:21:fe:df:b4:d8:3e:0f:1f:85:e9:24:fb:c7:d0:7f:21:
06:47:ff:e9:39:52:48:9a:f8:98:9e:92:4b:8e:af:6b:a2:62:
02:95:ce:5e:a8:bc:e6:d0:66:50:4c:5a:a1:b5:c9:9c:31:6c:
87:42:84:20:da:3e:d9:fc:86:f7:71:32:33:69:8d:3c:d7:52:
30:04:6b:b9:3a:0c:55:f2:07:89:01:e8:90:9f:21:aa:a4:67:
59:78:93:fa:a3:a4:2f:d6:d1:c0:7b:c3:cf:f5:0d:3c:90:c0:
1c:fd:5a:3b:d1:6e:93:33:b0:51:12:a9:2f:78:c6:3e:cb:c8:
dd:48:10:36:47:07:6d:88:21:b0:48:49:a3:8b:45:10:39:90:
aa:c9:1d:b0:9d:66:7f:83:82:00:19:1e:bd:57:4b:2a:9c:43:
7c:98:0f:7c:e8:9d:12:84:32:a1:b4:b6:83:f7:53:ff:20:6b:
f0:6a:d5:16:c2:99:e2:66:59:47:c1:0b:26:e2:79:78:ed:67:
2a:07:d7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:46:13 2026 by rpki-client