Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/6Q_BpbXUsvrPsOFl4qOPx16FNY0.mft
File: 6Q_BpbXUsvrPsOFl4qOPx16FNY0.mft (raw, json)
Hash identifier: Ps8kQAWdq7h4a0mdQaQ7l5jtgthDACCn1OJlnN/eiYg=
Subject key identifier: 38:54:06:9E:3E:D8:1E:8B:1B:79:B4:8C:4D:CE:46:D5:CA:DD:8B:E7
Authority key identifier: E9:0F:C1:A5:B5:D4:B2:FA:CF:B0:E1:65:E2:A3:8F:C7:5E:85:35:8D
Certificate issuer: /CN=e90fc1a5b5d4b2facfb0e165e2a38fc75e85358d
Certificate serial: 01A0404EA2CEA709F367FD70598A96DA7CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Q_BpbXUsvrPsOFl4qOPx16FNY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/6Q_BpbXUsvrPsOFl4qOPx16FNY0.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:30 +0000
Manifest this update: Wed 26 Aug 2026 23:01:30 +0000
Manifest next update: Thu 27 Aug 2026 23:01:30 +0000
Files and hashes: 1: 6Q_BpbXUsvrPsOFl4qOPx16FNY0.crl (hash: PAHiwe8S2/PN4tPBw1tMqfeLraAzwqlXwQCvKrfnrsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/6Q_BpbXUsvrPsOFl4qOPx16FNY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/6Q_BpbXUsvrPsOFl4qOPx16FNY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Q_BpbXUsvrPsOFl4qOPx16FNY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:a2:ce:a7:09:f3:67:fd:70:59:8a:96:da:7c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90fc1a5b5d4b2facfb0e165e2a38fc75e85358d
Validity
Not Before: Aug 26 23:01:30 2026 GMT
Not After : Aug 27 23:01:30 2026 GMT
Subject: CN=3854069e3ed81e8b1b79b48c4dce46d5cadd8be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:1e:8e:49:d6:39:68:5c:c2:f1:87:3e:31:
73:a5:c7:a9:7a:6f:de:5b:54:f1:13:f5:bf:e2:8b:
de:88:90:a8:a3:8c:69:a3:04:05:fc:ca:ab:5b:ca:
a1:f9:b2:56:b4:72:a8:3b:e3:a7:c6:77:84:04:3c:
d0:ca:b5:b1:bb:38:84:f2:cb:51:62:55:89:ef:91:
dc:24:ca:8d:3e:e4:6c:02:8e:c7:60:b2:7d:98:1a:
af:ec:09:30:d0:38:34:b0:06:b5:41:97:bb:7c:43:
17:28:1a:e3:fd:c1:7d:bb:fb:3b:06:17:b2:25:41:
37:81:e8:17:c2:ac:69:59:b2:1b:d0:ae:dd:74:e9:
e0:e1:96:c3:1b:93:06:e1:ae:0d:cd:6e:81:af:82:
55:69:c6:a7:03:ff:7d:e8:05:1a:1e:68:f1:65:59:
05:3b:c0:a9:af:e7:a1:22:95:69:07:ef:3a:3f:75:
54:36:65:12:7d:c9:76:8e:ba:a5:ac:a7:02:5a:a0:
b6:4f:36:2c:46:ab:c3:a8:cf:38:31:ff:69:d6:db:
64:4e:b8:8b:2b:e5:a4:04:62:99:87:7b:4b:d8:ea:
a2:93:de:fb:79:43:08:c1:96:e0:82:91:85:ee:8a:
29:17:23:19:a3:0c:c6:c9:2c:96:a5:8f:16:ab:b5:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:54:06:9E:3E:D8:1E:8B:1B:79:B4:8C:4D:CE:46:D5:CA:DD:8B:E7
X509v3 Authority Key Identifier:
keyid:E9:0F:C1:A5:B5:D4:B2:FA:CF:B0:E1:65:E2:A3:8F:C7:5E:85:35:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Q_BpbXUsvrPsOFl4qOPx16FNY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/6Q_BpbXUsvrPsOFl4qOPx16FNY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/6Q_BpbXUsvrPsOFl4qOPx16FNY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:49:11:c9:7c:70:51:11:2f:56:87:4c:e9:5e:7b:81:ca:21:
db:6e:a6:d1:9a:32:fd:2c:bb:92:89:49:72:3d:44:78:9a:e2:
4e:9b:c0:41:83:a7:4e:0b:ed:13:1c:1e:d8:52:03:fd:20:ec:
1d:7e:d2:5b:83:71:63:79:14:85:03:b4:2c:fa:a4:bf:65:8a:
e7:81:cc:4c:a3:27:47:28:19:70:ef:9a:1b:27:30:65:0f:e6:
66:aa:5f:fb:cd:f1:7d:99:8b:c8:4e:ba:45:30:ec:ec:de:66:
e1:7f:9b:0e:70:94:27:b8:11:9b:27:66:4b:29:a5:6a:4a:08:
78:37:ed:5e:04:a2:de:cd:33:87:fb:99:72:43:33:cd:b7:e6:
1c:87:da:13:aa:f3:21:02:4a:a2:02:25:32:55:46:fe:a1:e5:
3a:e0:d3:b7:55:88:2c:8a:86:d2:58:a7:eb:be:e9:09:47:c6:
4e:2d:f5:6f:2c:74:f9:02:9d:df:06:b7:8b:0c:f2:b7:6f:cd:
39:72:2b:8b:05:84:83:98:07:fd:19:ed:af:fa:bb:c1:d8:d1:
24:55:16:26:66:08:a5:d6:b3:13:11:05:6b:a3:d5:78:31:b3:
67:03:cd:e8:69:59:24:ae:69:09:27:69:48:29:7f:dd:e9:15:
23:cc:52:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:32 2026 by rpki-client