Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: 4Wzr0zqhuDuTmYZrufpQcGUWBwvHmlzcq98wVsV0Ejc=
Subject key identifier: F6:9B:C2:2C:66:1C:58:7A:D3:2C:35:4A:CC:DF:13:06:0F:52:E7:61
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 01A13DB818E45CDD44C49C004825AF319362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 0DD6
Signing time: Thu 15 Oct 2026 04:00:37 +0000
Manifest this update: Thu 15 Oct 2026 04:00:37 +0000
Manifest next update: Fri 16 Oct 2026 04:00:37 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: +rZorVPJpAU4QBuZJkNSEEuEZGiWxTr5OT+S415K65o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:18:e4:5c:dd:44:c4:9c:00:48:25:af:31:93:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Oct 15 04:00:37 2026 GMT
Not After : Oct 16 04:00:37 2026 GMT
Subject: CN=f69bc22c661c587ad32c354accdf13060f52e761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:81:41:90:de:a6:d7:00:7b:60:d9:28:19:
ae:cc:61:9c:37:d4:0d:90:71:f3:4d:45:72:a0:be:
1d:67:ce:62:19:33:0d:84:c4:42:4a:b1:be:8b:e7:
2b:20:7c:b1:a0:3e:47:27:26:44:55:06:6f:04:05:
77:58:64:b5:bc:69:2c:34:d7:6b:2c:19:1e:53:95:
27:76:12:b5:d5:63:f9:20:f3:a7:86:83:4a:09:e9:
c6:23:1d:41:ba:9c:16:47:2a:b4:fa:77:94:81:50:
5b:0c:f3:44:7d:00:dc:7d:de:00:7e:05:69:98:e7:
9d:79:c2:bc:14:d7:61:73:09:d7:a9:09:5e:e5:96:
33:3d:8f:a9:13:bc:b1:39:31:7d:12:d6:7f:e8:87:
76:6f:7d:57:fe:bf:49:89:a0:4c:d9:d7:8e:1a:e5:
89:67:85:e2:cb:4b:c8:97:fe:95:97:5b:4f:94:45:
7a:d1:ee:60:eb:78:b2:df:f6:ee:4f:f7:c2:18:12:
8e:9e:af:9e:1b:cb:bd:fe:0e:f7:92:1f:3f:38:f7:
02:d2:7f:34:e0:79:fc:17:ff:8b:dc:89:71:46:f7:
bd:08:12:3f:d7:1d:61:37:80:76:58:4c:35:ff:49:
b9:7f:0e:68:55:7b:59:59:4e:d0:17:dc:22:8c:83:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9B:C2:2C:66:1C:58:7A:D3:2C:35:4A:CC:DF:13:06:0F:52:E7:61
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:86:6a:92:6e:bc:40:2c:05:86:34:e9:24:01:21:4a:81:26:
5a:23:64:42:85:26:d4:d3:d3:e6:46:91:b2:c1:8b:3d:8c:7d:
a4:fd:d9:7b:b7:41:39:0a:a3:3d:fc:68:51:bd:8f:1d:53:40:
f6:62:fd:0b:8d:f5:f8:c2:b4:5e:f9:9c:a5:d8:28:c0:fc:b8:
73:53:79:c0:3d:36:b0:e0:81:2c:d2:cb:00:03:7b:0e:69:0a:
2d:a0:ba:60:69:4a:bd:3b:20:58:98:f2:c1:d4:7a:7b:97:11:
c5:d0:a9:01:5b:c1:a5:ac:0d:24:42:ea:e2:1e:fa:16:69:e5:
18:55:6c:62:40:2c:7b:19:af:cc:0c:55:0f:f5:b9:b3:35:ad:
f3:cf:79:4f:59:5b:2a:3c:82:ff:79:31:31:d6:26:6f:2c:c4:
99:74:58:3c:d0:27:9b:b8:61:ae:6b:e3:a6:97:a1:de:74:05:
ff:29:35:ea:9d:69:d5:c5:b3:55:9f:1a:9a:f4:29:61:06:b0:
e9:7c:4b:f1:a5:cc:73:0e:8e:ba:28:db:68:b1:7e:17:a7:64:
18:fd:9b:a2:3f:42:e5:16:6c:63:4a:26:7c:bc:45:c6:c2:32:
85:13:44:82:80:60:75:f1:f8:3c:f1:76:9d:51:b9:c8:ca:c8:
f9:39:f2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:39:21 2026 by rpki-client