Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
File: S6TRDarjyS2n0u6XO3SMsflJIuk.mft (raw, json)
Hash identifier: bcuhcZK9og5iMaMfDMfSZKDYu2w0+F6DLIPGOTlpRPQ=
Subject key identifier: 80:6A:C6:3D:8B:CC:0E:D7:18:B7:67:68:F8:B0:F3:B9:E6:86:B7:7B
Authority key identifier: 4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
Certificate issuer: /CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Certificate serial: 019EB8B3C36E60D89A8AD6172B5F1822B324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
Manifest number: 0CFA
Signing time: Thu 11 Jun 2026 22:00:49 +0000
Manifest this update: Thu 11 Jun 2026 22:00:49 +0000
Manifest next update: Fri 12 Jun 2026 22:00:49 +0000
Files and hashes: 1: S6TRDarjyS2n0u6XO3SMsflJIuk.crl (hash: 9NI4EI+5vuNRvcR32b/kuOk0QlIAnzPdlWmKoSJE2KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b3:c3:6e:60:d8:9a:8a:d6:17:2b:5f:18:22:b3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Validity
Not Before: Jun 11 22:00:49 2026 GMT
Not After : Jun 12 22:00:49 2026 GMT
Subject: CN=806ac63d8bcc0ed718b76768f8b0f3b9e686b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:e3:08:ab:2c:7a:82:c2:8d:ea:0b:76:d4:
d1:7f:a0:83:1a:61:0c:9f:87:da:73:24:f8:cb:4b:
a2:f0:69:1f:0b:7a:72:e6:a6:f8:0b:f5:75:c0:79:
56:0c:8d:00:3f:fb:58:7c:67:74:4d:37:da:d9:84:
b6:ca:7c:d0:1d:d8:54:d5:8c:cc:04:c4:2f:1c:6a:
fd:79:aa:4e:98:5a:97:89:60:98:4b:48:00:39:ee:
83:57:87:de:79:e2:f1:ab:9f:d4:7e:85:f5:01:e5:
b3:e2:7c:a9:03:a1:5e:52:7b:ce:00:43:df:d5:36:
ac:61:69:2e:42:93:ca:72:99:1d:fd:ac:79:cc:93:
94:a9:4d:dd:84:d6:9b:c7:20:c0:0c:63:a6:ad:af:
c7:2f:af:be:27:ac:53:1d:c2:9e:39:03:70:f0:95:
82:06:27:45:59:cd:66:98:31:06:74:ec:b5:d2:1f:
e0:43:9a:ff:64:22:5e:cc:32:b6:30:06:c1:82:8f:
69:98:1e:de:14:3e:5c:13:a0:de:49:9c:0f:4e:df:
41:2d:ac:22:bd:2b:80:1c:f7:8c:9c:14:68:29:18:
bd:96:36:b3:f2:10:a7:cd:9d:4d:2e:8a:06:54:85:
d3:d5:52:be:6e:56:e5:27:2c:43:f7:ed:5d:08:9d:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6A:C6:3D:8B:CC:0E:D7:18:B7:67:68:F8:B0:F3:B9:E6:86:B7:7B
X509v3 Authority Key Identifier:
keyid:4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:39:e1:e2:2d:86:b3:b6:cf:b0:38:49:32:af:a6:01:52:e0:
6a:57:44:8d:13:d0:82:43:93:e9:e2:f4:92:2e:84:b6:d6:aa:
29:3c:71:c9:5a:e1:81:5d:f4:05:9b:36:0e:0d:d6:56:c6:c2:
d3:b4:45:de:b0:ca:3a:fd:f7:6f:e9:80:2c:59:f1:b0:7d:00:
27:6b:ed:df:7e:a0:85:5e:d8:ea:ee:c4:58:cd:31:f2:c8:9e:
a9:36:c9:dc:fa:c6:51:7e:4f:57:06:78:41:73:dc:bd:8d:80:
9e:07:ba:4b:4e:12:c7:4f:3f:2a:f8:6e:26:6c:79:ec:6e:68:
09:e6:6f:11:02:96:83:9c:00:87:6e:81:f7:df:cc:9c:9e:6d:
1c:53:a7:99:04:5d:33:f1:73:74:fb:4b:c3:4c:2e:de:5b:12:
dc:7c:76:c1:59:bf:77:31:31:6b:9e:b8:d2:1e:21:3f:89:78:
4c:df:a0:04:3c:f3:c7:5a:59:57:94:86:11:b5:ea:96:75:0c:
f1:70:da:09:15:9a:78:4a:9d:6c:71:06:0f:16:b2:44:60:b3:
0d:89:fc:a4:88:a5:28:fb:cf:2e:3a:e0:8d:8d:6c:2b:f4:4b:
94:49:e8:b3:fb:51:0b:0a:ce:a5:bc:77:01:ce:d6:62:a3:ee:
cb:0e:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:28:31 2026 by rpki-client