Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: gHP3zZN36hJ+tnpyDChDI21NJCkXtuhpPSiklAItavA=
Subject key identifier: E7:CF:64:41:80:42:77:89:5D:48:08:AF:E4:B8:B8:10:5C:7B:B6:2E
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 019F18302372D4FA951494419B859EED6E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 11:00:35 +0000
Manifest this update: Tue 30 Jun 2026 11:00:35 +0000
Manifest next update: Wed 01 Jul 2026 11:00:35 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: +61FOP2ulCXelesI8NjLHNS6IBX/ee6Llsv9RUuhbk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:23:72:d4:fa:95:14:94:41:9b:85:9e:ed:6e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Jun 30 11:00:35 2026 GMT
Not After : Jul 1 11:00:35 2026 GMT
Subject: CN=e7cf6441804277895d4808afe4b8b8105c7bb62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:90:67:17:4d:87:16:84:23:ac:a8:21:8f:
c5:f6:03:c9:cc:27:5a:a8:36:bb:c1:2e:7d:94:fb:
81:8f:7c:34:42:5e:8e:a3:19:9b:5a:94:19:d2:bc:
bf:22:a6:45:de:31:7b:92:ab:27:07:5d:49:63:84:
46:4d:71:76:aa:ba:58:25:a9:22:ef:6c:76:f9:ac:
6e:8a:52:8e:f3:92:67:b8:32:ed:a0:f3:00:9f:e4:
b9:3b:23:f5:4b:6b:2b:0a:c6:e4:fd:a8:d8:16:fd:
31:61:1d:af:b4:e5:c0:b1:ae:89:85:3d:8f:de:b3:
91:aa:f0:0d:bf:b3:95:39:f4:5a:4c:5b:be:2d:0a:
5c:2b:38:8e:df:f5:2d:60:95:80:d6:50:3b:61:ed:
51:1a:13:5f:59:c6:79:fd:e8:fb:a2:d0:a4:78:d5:
bd:61:45:de:4d:0e:b8:c9:79:14:14:1e:29:92:95:
ae:63:dd:ae:4f:a6:4c:2f:ea:f0:dc:95:30:2b:e5:
78:a4:65:43:1d:0d:6b:0b:a7:13:b7:de:57:eb:2a:
7a:c7:93:62:f9:b9:3d:88:eb:8a:33:21:c0:e3:de:
8d:2c:d3:6c:07:d3:ee:9b:22:8d:21:0e:a4:60:f4:
b1:94:d9:0c:a1:31:3e:74:04:7f:80:1d:72:31:ae:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CF:64:41:80:42:77:89:5D:48:08:AF:E4:B8:B8:10:5C:7B:B6:2E
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c3:6e:7e:ec:54:99:63:4c:7e:5b:27:ec:3b:7e:ee:4c:41:
ef:11:93:99:d3:20:7f:36:9c:84:5b:97:f6:cd:e7:98:cb:44:
d7:60:55:1d:ed:36:9b:b8:37:b0:d1:50:d8:0b:3f:af:9c:a7:
2d:19:45:70:a9:cb:d4:38:66:38:c5:7f:27:46:9d:43:ad:74:
f1:3a:d2:e1:4e:e0:42:8f:85:e6:c9:c8:0b:82:7d:3e:05:4d:
ce:27:57:ee:c6:34:9b:33:b6:62:90:86:ff:13:33:73:6d:9e:
ac:4a:c7:f4:62:b5:92:e8:e4:a8:4d:d3:59:45:1f:0f:d9:d8:
ca:60:7e:e5:91:5e:4f:8e:1d:da:6d:21:f2:25:35:84:e9:e1:
87:78:f0:2a:a6:4d:c9:7c:40:14:d2:e0:26:f3:d5:c9:96:3c:
89:e7:fa:1c:5f:0f:7f:93:aa:fd:c7:6d:dd:20:4a:be:a0:4a:
21:72:bf:a4:62:d0:fb:d9:04:f0:bc:45:24:12:8a:a4:8d:e5:
bc:27:f1:aa:4b:57:cc:03:0a:cf:35:b9:97:ec:68:49:d1:ab:
55:3d:10:bd:c4:16:1a:e2:86:ab:0a:31:be:08:fe:42:38:14:
84:34:07:b7:c8:3e:c3:97:c6:2d:ae:f6:5f:cd:a4:c6:51:5d:
48:e5:c1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:50 2026 by rpki-client