Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier: Wi/9QZmqVKGyTuYztdXm+EsuEspJugybVE1h8+PPSoc=
Subject key identifier: 0A:AA:BE:13:20:96:46:E5:0B:26:C3:8B:FA:2E:C4:EF:4B:55:09:A8
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer: /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial: 019F1943E06698D8357018C2C748B15C9352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number: 06C2
Signing time: Tue 30 Jun 2026 16:01:46 +0000
Manifest this update: Tue 30 Jun 2026 16:01:46 +0000
Manifest next update: Wed 01 Jul 2026 16:01:46 +0000
Files and hashes: 1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: 9IcorpHrc4WdksG65/OY48PWvpmx3ZHtiHByKzodTww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:e0:66:98:d8:35:70:18:c2:c7:48:b1:5c:93:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Validity
Not Before: Jun 30 16:01:46 2026 GMT
Not After : Jul 1 16:01:46 2026 GMT
Subject: CN=0aaabe13209646e50b26c38bfa2ec4ef4b5509a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:11:fb:9f:9f:42:bc:c0:99:d2:1e:31:5a:
3c:d5:21:d0:2c:12:a2:fe:28:e4:46:73:d6:46:8f:
c5:57:33:80:dc:08:5a:ed:df:af:23:8f:c7:5f:fb:
00:06:14:98:59:98:ea:de:59:35:ac:15:5e:6d:99:
2c:c1:c6:11:7e:8f:d4:90:e6:f4:fd:92:87:33:3b:
6c:0c:23:a6:96:72:af:44:4d:f4:56:e6:99:25:1b:
79:dd:0b:78:ff:11:39:d2:bb:60:71:46:1d:40:4f:
13:12:db:61:df:42:9d:55:ee:27:a4:72:34:89:90:
d4:c2:91:c0:65:6d:9f:83:98:b4:24:5b:f3:2b:f2:
34:93:1a:ad:ed:ea:40:73:94:e8:c0:32:e6:20:94:
af:ba:34:c3:1e:ae:3d:85:c2:05:9e:a7:de:d9:95:
b7:07:89:0c:76:92:d6:5c:6a:9e:0c:b7:f7:99:f0:
60:1e:87:43:22:68:43:12:b6:aa:9b:95:a2:8b:57:
04:88:47:42:11:8c:08:00:b2:0b:04:84:36:b8:9e:
a1:1b:b2:79:de:8e:b1:19:9c:3d:24:bf:21:91:6d:
13:d2:1e:b9:94:b6:23:61:37:28:79:b0:5b:f0:c9:
a8:87:fb:90:ce:47:5c:73:ba:1f:d5:27:ab:a7:cf:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AA:BE:13:20:96:46:E5:0B:26:C3:8B:FA:2E:C4:EF:4B:55:09:A8
X509v3 Authority Key Identifier:
keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c7:e8:9c:b3:0c:57:70:19:2b:fb:fa:05:63:ff:88:a9:c4:
42:e6:20:ed:3d:f6:9d:41:f7:d5:3b:55:87:e7:3c:1b:d3:69:
c7:07:fc:36:cf:58:03:1f:8d:18:53:36:37:18:0c:25:aa:9f:
35:0f:a6:cc:e5:5c:db:9a:fb:cd:8e:c6:7b:bd:b5:46:d5:76:
62:47:e7:dc:03:6c:d9:00:d5:b5:89:3e:9c:d2:04:ba:f0:a5:
3e:df:bb:e9:40:e2:6d:05:7b:ea:2e:e8:09:c1:ec:e1:c5:2b:
fd:7c:15:f6:b9:98:61:2d:c0:d9:05:be:a0:49:d7:87:a3:dd:
44:38:2a:4c:b1:2b:34:7f:95:99:fa:d9:f5:e4:8c:b6:d8:01:
21:a3:35:90:bb:0f:68:47:48:9e:60:94:9c:2f:e4:f5:2f:8e:
d6:58:81:b3:20:92:88:30:84:27:99:59:e5:9f:64:8a:27:a3:
2f:16:0c:ae:9f:b4:52:77:7b:7a:ec:64:58:eb:d5:23:e0:c7:
0e:6d:2e:46:e5:cb:98:9c:c5:68:7a:0b:8f:cc:d4:3c:41:a1:
ff:9d:80:06:93:f3:e7:38:63:f2:49:23:76:22:da:39:52:e2:
41:35:6c:f3:2f:09:48:89:19:45:38:ca:05:6b:0e:16:87:7f:
fb:83:dd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:34:23 2026 by rpki-client