Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
File: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft (raw, json)
Hash identifier: ZcsM9SiYPfRnNizuz7lCiBPtcgJ+N9NMzH+mDKMdJhU=
Subject key identifier: 17:3F:80:01:32:D2:D3:45:59:ED:26:D1:15:AB:DD:DF:5C:1F:63:00
Authority key identifier: 98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50
Certificate issuer: /CN=98ae843e7bc8748d015bc47f635b17561be72850
Certificate serial: 01A08C0D0966B00FCE0BB07E3D83A3F9C09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
Manifest number: 1A43
Signing time: Thu 10 Sep 2026 16:00:59 +0000
Manifest this update: Thu 10 Sep 2026 16:00:59 +0000
Manifest next update: Fri 11 Sep 2026 16:00:59 +0000
Files and hashes: 1: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl (hash: QQ5hE5d5XqGhsrdwJt0QCAOdmw0y7FO7IREh3cBvDsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:09:66:b0:0f:ce:0b:b0:7e:3d:83:a3:f9:c0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ae843e7bc8748d015bc47f635b17561be72850
Validity
Not Before: Sep 10 16:00:59 2026 GMT
Not After : Sep 11 16:00:59 2026 GMT
Subject: CN=173f800132d2d34559ed26d115abdddf5c1f6300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:c5:23:e1:c4:6e:eb:f8:dd:25:79:55:bb:
38:f8:ee:da:6c:c4:46:ac:68:6f:a1:28:d4:d6:ca:
01:7c:a9:07:f8:9b:09:cb:bb:5d:eb:de:d1:06:e3:
c9:2f:d5:9b:be:b4:e8:dd:80:07:d6:6c:b5:ac:9f:
06:d2:f0:0e:5f:90:0c:fb:44:47:9d:38:ca:85:be:
fa:ac:dc:d7:23:2f:44:de:53:ee:42:c9:72:54:e3:
98:d0:3f:77:9a:e4:1b:2e:82:1e:bc:8f:57:fb:ad:
b3:a4:09:02:a1:7d:01:1d:43:33:63:c4:a3:cb:03:
48:ab:16:cf:c8:42:1b:11:18:99:36:d1:df:75:2b:
75:3e:49:ef:03:54:4c:b6:a4:04:8d:fc:6c:29:98:
0e:d2:5a:6c:8f:af:0e:bf:16:e2:4f:df:4c:13:d1:
58:a3:11:1f:e3:a6:66:7b:7c:84:1e:d4:0b:d3:a2:
01:31:1a:bb:d7:b3:17:4b:4f:05:f7:96:ce:e4:9f:
54:c2:a6:c3:ba:f3:f7:ad:46:c7:0c:c2:77:29:0f:
b3:10:50:7b:f8:48:a9:3f:59:0c:db:2b:50:af:76:
e2:91:b3:c9:3f:0a:d8:9f:ef:87:cd:07:18:d6:e9:
de:cd:38:7e:22:cc:bf:09:1e:f6:63:8b:9d:bf:4a:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3F:80:01:32:D2:D3:45:59:ED:26:D1:15:AB:DD:DF:5C:1F:63:00
X509v3 Authority Key Identifier:
keyid:98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9c:c8:6e:2b:f4:9b:92:40:c4:e1:61:1f:87:6f:87:aa:6b:
75:3b:a1:50:16:65:ae:a3:8e:ad:0c:af:19:0c:6a:40:b4:5b:
1d:53:ff:1d:2f:8b:8b:32:b6:4a:92:bd:86:9d:f0:9f:d3:89:
ab:8b:28:3a:e4:85:53:5e:f7:56:df:f1:3e:31:64:77:41:75:
c8:c4:8e:78:64:c8:77:ce:34:81:b4:29:ac:df:3a:9b:1c:c7:
81:07:fd:5f:aa:fb:e6:b6:57:ff:da:fe:73:ed:23:3d:77:04:
1f:98:f6:cb:5e:5c:e4:79:49:52:9c:0a:00:92:d3:56:4b:15:
27:69:be:b8:35:5b:20:d2:66:e1:dd:80:76:5c:12:5d:b5:a5:
1b:3b:ea:16:32:64:db:bc:bd:9a:fb:08:e0:5c:c5:26:55:7f:
7a:9b:69:54:31:25:ee:0b:df:14:46:f3:be:e5:8c:76:e9:a1:
9d:f7:56:bf:1d:43:44:3b:00:ee:e6:9d:1e:61:a0:77:12:e1:
2f:a0:44:7c:ba:ab:5e:aa:27:02:5c:dd:f6:1e:97:8e:06:e8:
96:0f:5f:4a:93:41:ef:c6:d6:9e:c2:1e:9f:8d:94:ee:23:e1:
c6:c6:8b:9c:91:3a:de:f8:e4:8e:e5:c3:f8:c8:c8:12:75:e4:
80:28:c5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:35:42 2026 by rpki-client