Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File: oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier: fSVr3dY32bIiU3n2B5un2qzI895F9Fsk/Ii7Iy13BLo=
Subject key identifier: 6D:00:28:23:7E:03:EC:5A:D7:DE:A2:0A:45:E4:C7:BF:CD:2F:A6:3D
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer: /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial: 01A08B31284595071ECC64F90D58C1401AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number: 1A43
Signing time: Thu 10 Sep 2026 12:00:49 +0000
Manifest this update: Thu 10 Sep 2026 12:00:49 +0000
Manifest next update: Fri 11 Sep 2026 12:00:49 +0000
Files and hashes: 1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: KYiVpYM7Uttzp/m0Ze0pRirSIIMSAALJdKdNKmD1LY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:28:45:95:07:1e:cc:64:f9:0d:58:c1:40:1a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Validity
Not Before: Sep 10 12:00:49 2026 GMT
Not After : Sep 11 12:00:49 2026 GMT
Subject: CN=6d0028237e03ec5ad7dea20a45e4c7bfcd2fa63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:0f:14:26:08:23:9e:52:b0:5f:0e:5b:f0:
d1:dd:18:ed:20:56:e8:5f:44:32:ae:e6:88:60:40:
0d:bb:00:c8:56:dd:42:bb:c9:88:8b:2d:b4:c7:69:
42:d8:24:4f:4d:ef:70:81:eb:f6:4e:fc:06:22:14:
e7:da:25:bd:3a:aa:bf:fd:a8:14:7c:60:43:24:5a:
87:46:f8:eb:ea:ec:c5:42:fe:53:b7:51:2c:72:b8:
20:c8:0b:db:23:80:a3:57:61:5f:67:c1:a6:6e:5c:
b5:c6:01:0a:70:9b:4f:53:48:56:b3:8f:43:1b:f8:
67:7d:46:81:09:75:74:38:1e:5f:96:0a:36:53:4b:
80:f5:b7:f1:44:b3:d4:0d:c7:1d:df:ac:ae:82:5f:
49:24:fd:ce:66:39:e9:25:5e:a0:15:ad:3c:c7:af:
fd:3e:aa:7e:4b:78:3a:34:af:14:16:95:fe:50:be:
b8:64:93:f0:43:3a:9a:2a:60:bf:51:7f:91:e6:b1:
93:ba:69:bc:e9:55:4e:59:5f:25:62:b6:b6:6a:97:
de:16:8c:ae:1c:74:c9:1a:65:04:50:22:74:73:ec:
d7:dc:70:3a:71:47:4a:4f:3d:0a:43:a5:07:05:ce:
40:42:eb:8b:ce:e6:d3:9c:9e:80:65:1c:51:18:73:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:00:28:23:7E:03:EC:5A:D7:DE:A2:0A:45:E4:C7:BF:CD:2F:A6:3D
X509v3 Authority Key Identifier:
keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7b:ad:7c:13:10:c3:13:19:53:31:71:0d:49:12:f6:be:9c:
ec:7f:00:21:e5:10:2d:67:70:b1:8d:41:7a:31:a2:64:73:24:
13:12:36:d7:ae:e1:28:e5:10:f9:8b:b9:30:7a:56:76:aa:7d:
0b:42:55:c7:b4:c1:b5:a7:5f:9a:e7:28:8b:11:7f:f0:29:1b:
a0:83:43:a0:4e:65:31:e8:8e:46:91:41:25:f0:41:5a:2e:69:
8f:c9:31:67:69:3b:2b:79:d6:e6:b3:1f:aa:4a:e4:7a:71:5d:
92:f0:54:66:4e:b7:52:ad:cb:2a:97:a6:e3:2c:dc:77:c8:14:
49:6b:95:25:64:b2:4e:ca:02:34:7b:29:5c:2c:5d:5a:bc:3c:
3d:ae:62:10:4c:b2:9c:c4:bd:60:88:95:f2:85:0d:0e:66:90:
d6:59:eb:47:ed:70:67:e7:16:5b:9a:b4:ca:89:6f:fb:a3:02:
42:ec:2e:8b:5c:7f:c5:c4:c3:35:fb:fc:e6:39:a1:40:e2:24:
e3:f5:5d:2d:93:40:c1:84:c6:1c:6a:81:52:69:88:49:14:19:
f0:59:a6:cd:d9:11:47:70:9e:7f:79:dd:f3:b4:68:0e:5c:b4:
54:54:a3:9d:b3:34:7d:f9:ec:41:a6:73:24:ce:3d:3b:19:df:
fa:29:68:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:23:42 2026 by rpki-client