Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: DsM6oAYhIdfxEdqSe1oV/S11Hr/LYvBaK0HUiguWtQM=
Subject key identifier: FA:5D:6E:56:25:CB:9B:06:71:19:AA:E8:A8:BF:CD:E2:0A:98:30:BE
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 01A00100EA46CC6D7A1E42362A658B1F4FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 111D
Signing time: Fri 14 Aug 2026 16:00:32 +0000
Manifest this update: Fri 14 Aug 2026 16:00:32 +0000
Manifest next update: Sat 15 Aug 2026 16:00:32 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: nayuDbEP8DTgB5CXgPvv+C72ISgr9trGa8/m4m28f2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:ea:46:cc:6d:7a:1e:42:36:2a:65:8b:1f:4f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Aug 14 16:00:32 2026 GMT
Not After : Aug 15 16:00:32 2026 GMT
Subject: CN=fa5d6e5625cb9b067119aae8a8bfcde20a9830be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:29:a4:80:3a:82:79:68:69:7b:a7:22:7e:
76:2b:e4:d8:16:22:72:eb:15:57:d1:f0:de:42:3b:
bb:ad:c3:b9:70:e0:63:6b:f9:c1:70:8e:ae:43:85:
57:07:27:6c:4e:ff:cc:c5:9f:70:e8:cc:1c:fe:e1:
4e:1d:3f:73:66:be:4d:41:9c:d2:c1:1a:f4:b4:33:
64:0e:43:b1:9b:a2:6c:4d:c1:01:eb:2b:33:b6:d8:
e2:3b:bf:92:a0:00:01:d1:b0:11:c9:0f:75:7f:d4:
12:15:2e:b3:99:6f:4d:38:cd:27:98:e4:89:a7:c3:
82:35:07:95:b1:44:bd:96:08:09:a7:bc:e1:ef:85:
68:e2:50:9f:50:2a:c2:cd:28:3b:21:98:5c:bb:46:
cd:1e:68:f7:7e:05:98:a2:ba:3a:61:ae:59:8f:e3:
9b:fb:4e:be:90:29:fe:b8:25:5e:4b:92:dd:11:28:
0c:c5:8f:34:b8:2f:7c:8b:93:ae:73:82:aa:df:35:
92:24:b0:a0:da:50:9f:18:bb:16:1f:20:fd:fa:2b:
d6:c6:4b:90:ef:64:61:88:7c:75:f4:bb:6d:6c:05:
d7:ea:ad:59:91:5a:53:04:6a:a7:93:be:15:03:d5:
b4:e6:f5:3f:90:82:3a:40:6a:b0:da:7e:31:ee:46:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5D:6E:56:25:CB:9B:06:71:19:AA:E8:A8:BF:CD:E2:0A:98:30:BE
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:14:b9:a5:95:10:2c:57:0f:b6:8e:18:fd:d2:37:99:ab:e9:
8a:c6:f9:79:86:4d:37:b1:d6:a7:2c:4c:23:27:c1:6e:8d:a0:
3a:d7:48:c9:9e:b6:ea:e5:50:b7:83:8c:b4:15:82:33:72:78:
5c:7f:b8:56:90:d7:c8:28:54:6f:2b:f7:cc:93:f5:9d:93:7e:
ce:f7:eb:c9:6d:ec:f8:8d:68:11:94:42:35:9a:21:5c:a0:78:
26:c9:84:c7:e0:eb:ce:03:3d:a2:c8:de:fe:53:f0:e4:75:b5:
6b:99:41:83:64:1c:18:9e:48:97:f7:1b:eb:00:ee:dc:72:fa:
a9:c1:2c:ec:aa:d0:6c:73:2c:2c:37:73:bf:e8:23:04:8e:33:
44:7d:1f:f7:1f:a9:42:94:eb:a2:ea:92:8b:38:e1:4c:0a:44:
82:83:b6:8c:75:ab:2b:ef:ac:fd:89:4a:60:71:78:c6:8e:f6:
eb:3e:54:b2:ea:c7:16:9b:78:17:5a:7b:eb:17:0f:0a:c9:d2:
3a:84:11:15:f7:6b:dd:c0:5e:e3:16:d2:4e:ad:0d:45:5f:b0:
59:f1:e8:b1:ba:9d:0c:b2:74:b0:18:f5:f2:c1:40:65:ec:b8:
ea:58:d2:0e:fc:d3:a7:f1:c2:b9:d6:4c:81:8d:33:ea:e4:95:
50:df:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:20 2026 by rpki-client