
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
File: 6IgY9AA6SCbnpomKFDYfjaWQVk8.mft (raw, json)
Hash identifier: R6RnudvQa5YguVXCvrip3ZZLnyKW99MHrpRcuz7y1O8=
Subject key identifier: 2C:78:EB:D3:B1:71:52:D7:B0:DC:83:BD:AB:38:F5:35:39:00:96:A1
Authority key identifier: E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F
Certificate issuer: /CN=e88818f4003a4826e7a6898a14361f8da590564f
Certificate serial: 01A0404DDC24D19BE314C115E216DB6C856A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
Manifest number: 04D5
Signing time: Wed 26 Aug 2026 23:00:39 +0000
Manifest this update: Wed 26 Aug 2026 23:00:39 +0000
Manifest next update: Thu 27 Aug 2026 23:00:39 +0000
Files and hashes: 1: 6IgY9AA6SCbnpomKFDYfjaWQVk8.crl (hash: V2NcDylHJk2WNzls/LvwZCchn6zBAwsb6uCIueiMp0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:dc:24:d1:9b:e3:14:c1:15:e2:16:db:6c:85:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88818f4003a4826e7a6898a14361f8da590564f
Validity
Not Before: Aug 26 23:00:39 2026 GMT
Not After : Aug 27 23:00:39 2026 GMT
Subject: CN=2c78ebd3b17152d7b0dc83bdab38f535390096a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:ee:c1:c1:36:5d:9e:0f:1c:10:e1:ec:2d:
89:dc:4b:ad:c6:dc:8c:6c:49:45:84:84:0c:f5:2c:
18:b0:a8:76:e1:2c:0b:e1:aa:32:dc:7b:f0:a6:36:
54:ff:8d:61:82:9a:37:18:3a:7a:18:c7:8d:e3:03:
17:d6:bd:dd:d9:b6:ab:4e:d0:eb:93:f3:af:e5:47:
5b:23:d2:e9:b2:13:33:73:55:a5:b1:0a:fd:a1:c9:
63:95:57:a0:f9:62:4b:ed:81:8b:2f:b1:1e:fc:e0:
c5:f5:42:c0:cc:88:62:e6:ae:d0:10:c7:02:99:47:
75:f8:d2:bc:fe:33:b2:71:57:de:4c:30:c3:e2:15:
07:88:97:4e:4f:c0:da:24:96:55:c8:14:4e:cb:9f:
84:d5:7e:a5:67:ca:84:12:e3:b3:1d:85:e3:6f:43:
c8:e6:76:07:10:d0:7b:74:dd:e5:a5:26:40:77:4f:
62:d3:d9:64:40:21:99:a6:5d:eb:9f:d5:04:00:71:
a3:06:a6:33:1f:f9:d0:0f:51:4c:6b:b8:da:10:77:
1f:79:e9:98:a9:f8:2f:24:94:f2:c3:6f:36:74:ef:
42:02:0b:a7:96:c8:33:dd:53:08:a2:d2:72:16:4b:
48:88:17:43:b5:a3:30:69:1a:6a:d3:82:66:63:4d:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:78:EB:D3:B1:71:52:D7:B0:DC:83:BD:AB:38:F5:35:39:00:96:A1
X509v3 Authority Key Identifier:
keyid:E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d2:54:b5:1c:5e:af:6f:b5:7c:df:41:d0:6c:4f:ae:74:5b:
34:01:a7:fb:01:0b:10:24:5c:3a:59:a1:df:c7:ae:e2:3a:9b:
c9:f9:6c:fd:8e:49:81:74:b3:1e:32:64:32:85:78:1c:d4:0b:
43:a8:f5:5d:00:29:d9:eb:ba:aa:8c:8d:c6:a5:0b:9c:51:bc:
1a:ee:c4:16:df:ff:e3:94:33:c2:b4:5d:40:f1:21:da:29:75:
e9:22:fc:9a:7c:1e:c2:53:18:e8:d8:bf:45:6e:e4:f2:3f:6e:
51:be:31:96:53:fe:33:9c:fd:f6:c0:d9:72:d5:22:7c:ac:9c:
80:9f:3c:54:ce:c3:29:3e:66:6c:d6:28:ab:c8:64:7d:36:1e:
07:56:cc:2f:75:a2:54:b7:9b:9b:52:f1:cb:fc:45:c8:cd:01:
1b:1c:fb:38:b1:d6:58:a7:0e:7b:52:be:52:69:9e:a1:12:28:
e9:6f:9b:3d:b9:0d:a5:6a:73:21:32:58:80:20:40:f2:43:da:
b0:c5:a8:2f:36:f5:0b:09:df:89:02:f4:f7:e5:36:c1:67:9d:
fb:55:c5:07:42:84:f6:2d:7f:5f:36:74:d5:d9:34:b8:20:29:
2a:95:94:f8:5e:66:df:45:a4:9a:11:59:cb:9e:c5:de:19:16:
e7:22:40:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:23:23 2026 by rpki-client