Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: smT811etQdSt+HUa077ZflA0DWS+lRrwBzE8YzFRJzM=
Subject key identifier: E7:BB:25:C9:EC:A5:EB:89:FB:25:41:EA:45:88:91:8F:F5:57:67:D1
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 01A13CA5AA765B0B5DF015978712D258DCE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 1AA0
Signing time: Wed 14 Oct 2026 23:00:52 +0000
Manifest this update: Wed 14 Oct 2026 23:00:52 +0000
Manifest next update: Thu 15 Oct 2026 23:00:52 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: JV6OEMKWeSTRVX0RuqR/0v+TbtkfZz/AosgocaT0F5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:aa:76:5b:0b:5d:f0:15:97:87:12:d2:58:dc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Oct 14 23:00:52 2026 GMT
Not After : Oct 15 23:00:52 2026 GMT
Subject: CN=e7bb25c9eca5eb89fb2541ea4588918ff55767d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:02:98:f8:61:7c:2e:ff:45:1f:36:b5:fd:
2c:96:48:04:8e:52:c3:40:c3:a6:c3:b6:6c:ed:8f:
5e:84:dc:65:b7:fe:53:77:3f:44:84:c3:05:d7:3c:
16:8c:cb:c5:b7:9d:20:0e:18:da:a1:1e:24:3b:0b:
f8:2e:4e:da:77:bc:bf:98:d5:50:8a:54:15:06:17:
ff:3b:db:75:59:ad:2c:d3:47:b4:3d:cb:57:8b:d8:
b2:e7:be:2e:dd:74:88:83:c1:5c:63:b2:5f:75:1c:
e2:e9:b3:34:e7:d9:22:99:a5:98:0b:ed:b0:8c:ef:
ae:f6:77:ba:fc:f0:0f:da:2e:ff:c9:c4:25:5b:c1:
ce:b7:55:d5:98:9e:53:7c:d8:43:e5:db:d6:e9:c1:
14:0f:4c:af:e3:06:ff:44:56:60:94:2c:11:2d:5b:
d4:05:ba:3e:1b:32:b9:5b:f3:35:07:1e:d3:c3:98:
20:80:2e:0e:c3:26:66:b8:ea:3f:00:df:12:3a:a1:
5c:fb:4e:29:3b:58:f1:18:24:45:19:28:54:5e:41:
b5:2c:74:76:7b:05:17:2c:07:41:64:61:68:09:92:
0e:3b:c5:67:1a:51:6d:c1:3b:fe:7d:e1:1a:3f:fc:
27:7c:de:22:6f:ef:c2:8c:26:6d:16:a1:f0:ab:8b:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BB:25:C9:EC:A5:EB:89:FB:25:41:EA:45:88:91:8F:F5:57:67:D1
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8f:29:82:39:c9:88:e8:69:78:58:a9:e0:4e:37:4c:ec:cc:
9e:e1:1c:a4:2e:59:d7:de:3d:04:73:f7:5a:0b:dc:5d:a9:88:
48:11:9e:3a:08:33:1e:25:25:aa:a9:3a:64:41:65:62:28:bb:
63:43:ca:bc:ed:76:f2:a9:f9:4b:a4:a8:60:5a:98:14:1c:a5:
09:a6:4d:47:5e:9a:14:ad:4c:e1:5b:56:27:82:82:b6:cf:af:
1b:34:de:d4:42:a3:81:33:80:e8:20:db:b2:ab:62:b3:32:b1:
a9:95:39:27:ef:2b:b6:ef:a2:a9:6f:45:cd:af:ec:6b:77:56:
29:dc:a0:6f:6f:d0:75:63:10:ff:7a:c6:d0:db:31:d9:2e:d0:
08:e2:29:52:36:e5:0f:d6:1c:6b:b6:d1:27:3a:02:f8:02:40:
24:f1:3a:e7:d5:be:22:59:c5:ff:5a:c2:2e:2e:1e:c9:b0:29:
0c:5b:e1:b9:b2:e1:ba:1a:ce:af:25:c1:46:24:3f:dd:18:8b:
40:ce:c6:27:1f:65:4e:8e:0b:01:98:58:a0:11:8c:54:ec:d6:
07:5e:b8:57:00:36:39:e3:7f:7d:c3:fe:f8:98:f6:1c:d6:0c:
3b:14:f2:04:ad:86:6f:ff:51:03:3d:c0:0e:25:f4:a1:4b:16:
41:f9:fe:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:45 2026 by rpki-client