
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier: jcCVAPzRExjYSgjMqb8Idh1TOS1TcvL9k3Nql1PJAYU=
Subject key identifier: ED:49:EF:1C:84:86:5C:B7:5B:6E:F4:B7:59:A9:B8:E6:7D:B5:9B:41
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial: 01A13E5CCCA009D93626D18041EDD87F01F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 07:00:31 +0000
Manifest this update: Thu 15 Oct 2026 07:00:31 +0000
Manifest next update: Fri 16 Oct 2026 07:00:31 +0000
Files and hashes: 1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: 0WoiKRRcq6POCUv+lDtjVoTioIpy0TJO9yO1g3gonwk=)
2: A8PCXHYtPKOyp3MabVe-odhqYuU.roa (hash: BBukl0iR4BOT3LGjsYPG4CkyN4d3K0S/00+hEdW+8z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:cc:a0:09:d9:36:26:d1:80:41:ed:d8:7f:01:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Validity
Not Before: Oct 15 07:00:31 2026 GMT
Not After : Oct 16 07:00:31 2026 GMT
Subject: CN=ed49ef1c84865cb75b6ef4b759a9b8e67db59b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:a5:ee:ab:0b:f8:bb:fb:61:22:7e:e5:e5:
95:e7:8a:0c:9a:c8:a0:a9:f5:bc:60:57:c9:35:16:
67:6e:28:ec:b8:ce:98:48:a6:68:cd:27:3c:4c:13:
6a:d1:6b:4a:55:90:56:0e:3f:34:63:d7:02:84:c4:
35:ee:3d:80:44:50:b4:32:db:3a:57:3c:86:55:d8:
59:92:f1:9e:db:ca:1a:9a:5b:3a:9d:29:b4:77:21:
0f:85:e7:a8:24:cf:6a:e8:70:69:9c:35:28:fa:bc:
cb:a0:5b:45:ae:4b:b6:19:db:55:9f:b1:73:f0:7c:
b5:b7:35:93:28:d6:00:6b:10:e8:be:6e:74:43:3b:
38:e3:80:2f:df:9d:b6:b2:d1:73:c9:87:58:fc:77:
4d:e7:70:bf:91:cd:e2:59:72:e3:44:57:39:68:f1:
36:1e:e6:45:d5:82:3f:1c:6c:0f:47:58:b2:a1:8c:
0a:00:67:85:66:08:9a:92:63:1e:eb:07:72:4f:6f:
f0:05:95:3e:84:97:57:fb:7a:a2:13:83:70:fa:99:
67:b6:0c:ec:65:df:00:5b:b8:a3:c1:3e:79:57:ea:
d6:04:96:ce:41:eb:da:19:28:0a:47:db:6d:7a:b9:
ff:c3:92:dd:ad:a0:0b:3b:79:81:75:57:bc:26:e2:
ac:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:49:EF:1C:84:86:5C:B7:5B:6E:F4:B7:59:A9:B8:E6:7D:B5:9B:41
X509v3 Authority Key Identifier:
keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3e:c5:a7:5b:7c:17:da:df:7b:89:04:93:a2:02:f5:5b:5b:
a0:a2:83:7e:51:15:8a:d8:e8:16:62:93:f4:90:5d:e1:3d:46:
a6:23:0f:a8:e4:d6:78:d7:fc:52:61:75:4b:e8:1a:b4:05:57:
44:9e:99:aa:20:b2:45:39:e5:26:fb:43:c1:02:5d:25:48:6c:
f7:7f:84:b2:ed:da:e6:96:92:1e:61:46:cf:5c:5a:37:56:55:
ab:18:6a:9b:d8:eb:86:93:2c:ed:c8:cb:45:d2:36:59:98:bf:
e2:07:95:66:a2:0e:b1:1a:77:b1:49:76:5d:65:b0:42:c9:76:
ef:a0:16:4d:79:bf:fa:9e:a9:49:14:2d:fc:23:bc:b7:8e:22:
ca:71:15:1c:cd:1f:f6:c2:5e:e6:06:c8:84:20:22:d9:fd:d9:
40:01:a0:d4:cf:ad:96:e3:ba:f2:47:c1:59:9b:d5:9c:bf:d5:
1d:b2:d5:89:72:c8:34:a0:8c:37:b0:32:47:25:92:32:cc:c6:
79:10:d5:af:e2:55:32:1b:d1:f9:45:82:1a:55:22:a4:26:b3:
2a:84:a7:87:f4:9c:9e:e0:9e:9e:b7:19:c9:23:4c:d4:32:29:
69:8f:5c:12:44:01:8f:31:b9:24:46:f7:8e:c9:d2:94:3c:fb:
af:8c:d3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:09 2026 by rpki-client