Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: 167xGreU1sNRCwn40G7MdzJHgMVJ8jlwdxXa7EH/R6E=
Subject key identifier: 45:B1:53:11:B9:23:EA:EB:57:16:4E:0C:33:56:19:0A:88:F9:0E:4C
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 01A08CE9570400C7838945F9F48BEA7A8551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0D52
Signing time: Thu 10 Sep 2026 20:01:37 +0000
Manifest this update: Thu 10 Sep 2026 20:01:37 +0000
Manifest next update: Fri 11 Sep 2026 20:01:37 +0000
Files and hashes: 1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=)
2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: vFmi3gXdpXyXVPhoStEZfGJUZ31XH8/R3J6kWcfDwvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:57:04:00:c7:83:89:45:f9:f4:8b:ea:7a:85:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Sep 10 20:01:37 2026 GMT
Not After : Sep 11 20:01:37 2026 GMT
Subject: CN=45b15311b923eaeb57164e0c3356190a88f90e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:24:e5:47:ce:a3:54:aa:41:a4:22:dc:8d:
0d:8a:65:50:1c:37:64:a7:a7:ed:78:e1:a5:bc:e3:
bb:9c:68:27:e6:bd:f3:9c:1f:17:6a:7f:f0:5f:81:
82:b9:bb:d0:9e:42:66:38:5c:98:15:51:c8:53:26:
a3:fa:63:44:dd:6b:e6:d3:57:53:8e:a2:0d:87:94:
f5:0d:b2:e7:8f:c0:69:01:31:60:6b:34:94:cb:bf:
c7:62:78:7c:72:ce:7b:40:a0:e1:8a:0b:bd:93:0b:
24:dc:f7:ae:2f:17:4c:25:85:98:f4:fa:7f:c1:c0:
0d:f1:d9:2c:94:06:dc:0b:a7:a8:6f:86:f4:62:b1:
cd:ca:d4:db:90:c4:a8:c9:a0:6d:12:56:76:b1:47:
b3:24:ac:8e:5c:68:2c:07:55:9a:01:7f:b0:da:1f:
4f:5a:53:1c:36:59:d3:85:98:eb:90:71:f8:ec:cc:
db:23:f8:fb:a5:da:70:39:0e:52:18:c6:fa:15:48:
47:1f:96:66:90:4e:09:15:bd:08:50:41:3e:f9:5d:
65:07:4f:c2:1f:23:74:10:27:bb:ec:1c:c7:79:8c:
70:a0:84:4b:51:b8:ac:92:99:14:b8:1e:a8:07:87:
1b:15:0e:8c:eb:53:83:96:46:26:22:ad:cc:e7:9c:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B1:53:11:B9:23:EA:EB:57:16:4E:0C:33:56:19:0A:88:F9:0E:4C
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3f:a1:dd:2e:49:55:5d:b9:df:18:cf:08:52:80:15:be:11:
fa:cc:40:8d:d0:e8:96:24:04:51:27:ca:dc:0d:9f:5e:fc:2b:
82:a1:ec:74:c6:6a:60:5e:1a:30:9f:ef:50:3a:cf:e1:24:57:
e0:f8:e7:94:90:62:eb:4e:1b:dd:70:06:7c:31:83:a9:84:36:
eb:8d:a4:2a:06:36:aa:1a:01:e3:23:4c:33:43:e5:81:2d:9f:
13:fa:30:3c:2e:55:71:c7:be:06:3e:b9:42:ee:8d:3b:4c:a3:
9a:83:dd:d4:72:71:04:a8:b6:b4:65:1d:50:27:44:49:f3:c6:
4e:da:bd:01:58:0f:9b:aa:12:aa:4c:4e:d8:34:55:e0:54:ef:
37:84:5a:24:f7:19:5c:09:bb:70:4c:c0:04:ee:7b:23:27:42:
41:4c:b3:aa:31:2a:5d:30:b6:a7:be:e6:c6:ab:4b:d4:5e:01:
b6:a1:06:52:06:28:41:b3:f2:ec:ea:3f:b8:a3:b7:ff:8e:50:
9e:25:37:5f:c4:ef:27:7c:de:3f:b2:77:0d:53:dd:74:59:df:
7c:80:00:d8:79:56:56:b5:b9:b1:41:21:6c:b2:4b:4c:7e:72:
ac:69:87:e2:b9:70:87:a9:aa:60:44:e4:f0:83:48:ba:75:12:
63:9d:c2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:09:29 2026 by rpki-client