Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
File: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft (raw, json)
Hash identifier: /36VWjW5lk/5d0Haszoc3wZXMPCcAgWkgnOD2qCfORc=
Subject key identifier: B7:FA:83:A2:70:19:5F:30:B1:E0:4F:6B:3B:7D:51:B0:E3:95:73:AD
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Certificate issuer: /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial: 01A0EAADE06275B1990D13E4713C05CC1AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
Manifest number: 1A89
Signing time: Tue 29 Sep 2026 01:00:58 +0000
Manifest this update: Tue 29 Sep 2026 01:00:58 +0000
Manifest next update: Wed 30 Sep 2026 01:00:58 +0000
Files and hashes: 1: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl (hash: PLBDY/Qh7WMOc9fKhZLxbT/10KFOLkkudII4eBoKIQA=)
2: PLU1scGCX_Z6EP8Hgyg69HPqQ9I.asa (hash: 9c59RiHmUg5m8lvioiUPAxpkste+ERLLAHwy/LfB1tc=)
3: h49K85L4UEyeEFjotSv0qoO9c5E.roa (hash: Om6LbPxllmjNlvNuigobtMNJ+3VA5Oexf50hnPEjfBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ad:e0:62:75:b1:99:0d:13:e4:71:3c:05:cc:1a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Validity
Not Before: Sep 29 01:00:58 2026 GMT
Not After : Sep 30 01:00:58 2026 GMT
Subject: CN=b7fa83a270195f30b1e04f6b3b7d51b0e39573ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:a8:24:27:4f:c6:80:a9:9b:20:b8:eb:d8:
5b:8f:90:47:91:cc:17:81:35:d8:3d:dd:5f:e9:24:
a8:52:7e:87:12:9a:10:91:45:f0:d9:e7:85:aa:69:
20:05:37:f4:62:16:8f:25:b8:52:3f:2c:8d:de:9a:
b4:cd:96:3f:2a:9b:47:07:a6:d0:4b:c9:4c:88:49:
a5:6d:80:54:9a:d6:75:90:0a:fd:ee:f9:d6:fc:be:
6c:65:c3:bf:cc:32:73:ad:3f:d8:6b:ea:6e:f5:e8:
fa:b1:1b:53:23:88:fe:d6:57:a6:01:90:17:c9:ba:
1c:98:0c:df:47:d2:21:14:91:62:21:3d:0f:8d:8e:
13:23:a6:9c:1a:2d:f5:18:48:68:cf:0e:e3:58:cf:
8a:1a:3b:a9:b5:b6:00:d5:21:fc:40:b5:b7:1a:41:
13:4c:00:09:e8:e6:76:03:b9:28:4a:b3:b7:eb:3f:
e2:d0:60:4a:83:e7:55:15:33:0b:53:1b:c5:e1:ca:
ad:bc:32:8f:58:45:22:f2:21:78:ae:47:d6:57:55:
5b:d3:90:e3:bc:fd:ae:f2:5b:b6:45:bb:cf:23:6f:
89:44:9c:c8:2e:34:5f:5e:e7:7d:e7:90:fb:1a:35:
36:fa:5b:15:f2:9f:ea:b1:9a:4b:fe:fa:0d:c1:28:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FA:83:A2:70:19:5F:30:B1:E0:4F:6B:3B:7D:51:B0:E3:95:73:AD
X509v3 Authority Key Identifier:
keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2c:b3:a2:65:36:4f:64:2b:af:76:09:d1:df:db:b6:5d:bc:
5c:64:9a:7e:54:1f:e7:90:07:ff:87:ff:85:6d:f9:b8:c7:fe:
e2:d2:44:40:8e:c4:e8:70:5f:ff:94:b2:db:7f:76:35:16:81:
1f:59:d2:c6:a9:d3:8e:2e:c2:ae:52:78:3f:a6:53:91:91:86:
71:54:67:f7:f8:01:a4:87:88:52:1a:22:9d:9d:05:5b:fd:c4:
ad:a6:12:5a:45:8c:a2:40:f2:52:8c:a4:69:7c:c1:93:81:9d:
d4:c0:2c:83:e7:c2:b2:10:1e:84:b9:11:de:04:0d:11:6a:e8:
b9:b5:a1:0c:79:8b:cf:52:58:ee:44:28:81:9e:f2:fd:47:d8:
ff:f9:b7:a9:ef:7a:9d:a2:1f:ac:e8:13:70:53:95:33:d6:9d:
80:21:f6:c2:62:11:87:f8:53:99:07:e9:9f:55:6e:a9:f2:f4:
50:dc:5b:53:aa:78:9c:d8:08:1f:05:93:b1:3a:c3:31:5d:32:
8c:67:ff:98:02:39:7b:47:d5:d6:15:fb:9a:5e:83:0d:bb:50:
3b:65:79:de:3e:b9:19:2d:42:bc:b1:98:ee:30:dd:10:51:cd:
75:24:ce:eb:02:c8:b4:d3:63:b4:c8:0d:88:6a:48:15:67:a6:
c2:ad:d6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:35:09 2026 by rpki-client