Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
File: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json)
Hash identifier: KAVWo6M60wc5GZgbNqc0ljPdKAZ6Uq/zW+EEeVPW8fU=
Subject key identifier: 43:2A:DE:06:26:D3:B1:F2:D9:37:88:A5:2E:3D:1B:81:89:03:C2:62
Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
Certificate issuer: /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Certificate serial: 019E2F977AE6EB6B06918EF4AB13A2966D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
Manifest number: 0FF4
Signing time: Sat 16 May 2026 07:01:56 +0000
Manifest this update: Sat 16 May 2026 07:01:56 +0000
Manifest next update: Sun 17 May 2026 07:01:56 +0000
Files and hashes: 1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: YGgACfw8PWsnZTSc67fPSUml28P1/exXK4+naNgJBM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:7a:e6:eb:6b:06:91:8e:f4:ab:13:a2:96:6d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Validity
Not Before: May 16 07:01:56 2026 GMT
Not After : May 17 07:01:56 2026 GMT
Subject: CN=432ade0626d3b1f2d93788a52e3d1b818903c262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:b0:87:57:b3:75:80:40:6b:fb:21:bc:c0:
55:e0:57:b3:6c:fe:14:17:8f:6d:89:c4:c8:dd:52:
15:98:0d:d5:bb:2a:99:be:59:a3:9d:e9:17:31:81:
bc:5d:32:7d:7a:e0:81:86:ee:00:74:14:05:f9:54:
dd:04:9c:fc:9b:24:10:d7:68:03:5b:15:bf:76:a7:
d5:c5:df:e1:71:7b:bc:60:c1:08:81:c2:4a:0c:69:
3c:55:2b:20:1d:6f:30:fe:b0:f2:3e:41:60:48:4f:
c8:06:eb:b1:6f:5f:37:63:6d:28:98:40:48:53:b7:
e4:95:fb:d0:ac:cb:ae:b0:70:d4:31:65:44:49:9f:
25:6a:63:f5:da:c9:89:f3:e3:97:3c:11:c9:77:80:
27:15:fd:64:97:21:9f:4a:20:b3:b6:fd:f2:51:02:
f4:74:d1:b1:f9:eb:22:72:e0:91:07:cb:72:72:b0:
75:0f:49:8a:e9:bd:42:fe:d1:95:ef:bf:30:98:8e:
f1:6d:f4:ac:c4:f3:bf:90:79:0d:2b:07:56:cb:3f:
84:9d:65:2d:ea:29:49:d6:dc:c8:b6:73:c0:c2:0c:
c4:71:6d:6f:c6:76:5b:8e:5c:9c:bc:bc:38:26:b5:
75:66:a4:8f:5e:41:e0:a6:03:48:40:2f:63:b8:b4:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2A:DE:06:26:D3:B1:F2:D9:37:88:A5:2E:3D:1B:81:89:03:C2:62
X509v3 Authority Key Identifier:
keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ed:70:05:f6:c3:46:aa:58:b8:b8:fc:9e:57:fd:ae:f0:98:
33:f6:3a:9b:7c:2f:3b:18:56:14:5e:17:bc:30:62:74:75:e1:
ae:46:c6:19:f0:fa:fa:3c:57:b5:3f:7d:4e:a0:28:8e:dc:da:
2e:7a:1e:66:51:5e:59:11:7b:54:94:a8:d5:11:e1:cc:65:b3:
da:3c:f6:e4:56:69:f3:5f:88:b3:a7:1d:cb:94:9b:aa:09:0d:
16:1a:fb:fa:e5:08:d5:a7:f8:67:a6:07:3a:1f:3a:e4:2a:0f:
db:e2:ed:fa:57:51:60:e9:2e:22:79:62:3f:e9:2f:0e:26:1f:
a5:96:e3:2c:2e:de:53:71:dd:83:54:0c:9e:37:fe:8d:b9:aa:
75:ef:ce:f4:80:0f:7f:7e:a6:8b:c0:d7:89:14:ae:ef:76:38:
13:da:14:04:d9:82:ba:c7:5f:df:f0:c2:3a:e7:ee:aa:3a:0b:
e8:20:9b:fc:d1:80:92:02:dd:6a:3a:bb:ca:aa:1f:c7:b8:4f:
ed:1d:45:c8:b6:00:42:7d:93:80:d6:6f:e1:f6:0f:c2:02:13:
46:a0:76:d8:84:c1:2e:f0:75:cd:9d:ad:88:3e:41:eb:ec:87:
9f:13:3a:c1:cc:62:66:d9:8d:81:ab:e1:43:b9:55:fa:f7:97:
42:81:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:44 2026 by rpki-client