Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.mft
File: 6JI0wYCkzDSzuzF1cyszA8ES_DM.mft (raw, json)
Hash identifier: nEXbW8+oWmbSsyTUn5WhK8BrZ/BxCtisk9WL9MzqySc=
Subject key identifier: C0:41:57:FE:1D:88:3A:54:62:45:61:A8:D9:D0:EE:E1:09:44:46:52
Authority key identifier: E8:92:34:C1:80:A4:CC:34:B3:BB:31:75:73:2B:33:03:C1:12:FC:33
Certificate issuer: /CN=e89234c180a4cc34b3bb3175732b3303c112fc33
Certificate serial: 01A0404E77ABB63D1D231E8542A5E57AED55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JI0wYCkzDSzuzF1cyszA8ES_DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:19 +0000
Manifest this update: Wed 26 Aug 2026 23:01:19 +0000
Manifest next update: Thu 27 Aug 2026 23:01:19 +0000
Files and hashes: 1: 6JI0wYCkzDSzuzF1cyszA8ES_DM.crl (hash: PMdTXk8CBMM3MnyKroGgRG/w3/tFJIDirgE4PcGLJJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6JI0wYCkzDSzuzF1cyszA8ES_DM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:77:ab:b6:3d:1d:23:1e:85:42:a5:e5:7a:ed:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89234c180a4cc34b3bb3175732b3303c112fc33
Validity
Not Before: Aug 26 23:01:19 2026 GMT
Not After : Aug 27 23:01:19 2026 GMT
Subject: CN=c04157fe1d883a54624561a8d9d0eee109444652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:23:4c:ca:11:f3:62:07:34:84:8a:08:54:74:
74:ed:f6:87:e0:16:a1:8e:07:81:e3:e8:ad:16:7c:
b1:c4:e7:21:d1:34:80:fc:16:01:f2:86:ea:a3:21:
d2:6f:9f:26:5f:91:90:3d:b8:54:e5:a3:10:a7:27:
51:9c:ec:64:c4:16:0f:76:d3:ae:e0:5d:95:26:fe:
c4:da:1c:55:a7:09:71:11:94:93:6e:e2:5c:62:e9:
5e:52:d3:76:02:24:d0:46:79:72:6a:37:5a:64:32:
3e:99:1c:29:9e:81:cb:1b:76:30:3a:d4:1e:c6:88:
cc:a9:b1:9b:ce:0a:7e:3a:af:2b:3b:00:84:c3:7d:
f6:e3:5b:ae:48:e1:a5:ce:d3:78:10:17:f7:92:3b:
67:09:62:ef:ed:e4:93:51:74:ef:19:7d:ce:a3:f5:
51:6a:3b:68:28:87:5f:7f:77:9a:96:a7:4b:52:ba:
c7:f2:d8:83:0e:8c:3a:3d:74:da:de:ac:35:27:63:
e3:ac:45:86:bd:d2:d4:83:fa:15:ec:09:93:a4:60:
84:e3:2a:25:6a:91:ea:cd:11:3d:7b:44:52:52:7d:
65:d1:e4:57:40:4c:42:69:4b:31:86:aa:ba:25:09:
1e:e9:d8:79:9c:c3:bf:01:c2:21:93:86:07:52:1b:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:57:FE:1D:88:3A:54:62:45:61:A8:D9:D0:EE:E1:09:44:46:52
X509v3 Authority Key Identifier:
keyid:E8:92:34:C1:80:A4:CC:34:B3:BB:31:75:73:2B:33:03:C1:12:FC:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JI0wYCkzDSzuzF1cyszA8ES_DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/437332-d3c3-4e82-ad13-3388360fc844/1/6JI0wYCkzDSzuzF1cyszA8ES_DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fe:33:80:44:c8:f9:74:97:25:2c:05:01:18:4d:68:81:40:
80:44:df:75:f9:21:06:bf:bd:9a:19:97:77:26:c9:b6:28:06:
68:a8:42:e1:5e:37:db:60:e8:ac:c9:6d:e4:ad:26:70:4b:34:
1b:f7:68:79:49:3a:a7:16:b7:3d:5f:fe:56:a5:bc:67:6e:96:
1a:2b:c9:16:c3:91:43:4c:f2:cb:f7:29:82:07:51:07:04:79:
8b:60:c2:c2:17:40:79:d2:ec:aa:cd:bd:9a:51:13:b6:12:50:
08:e1:0d:f9:20:8a:69:f1:0b:4a:1d:f8:b8:5b:92:62:83:08:
89:fc:1d:f6:51:0a:4d:d4:d8:19:d5:32:72:80:6f:b3:3c:49:
31:c0:3f:25:b4:bc:d2:d9:67:cd:32:66:32:7c:dd:53:ea:8e:
60:e8:7b:94:3d:3f:e6:16:d2:3b:7e:f8:e0:c0:7e:15:fa:61:
96:f8:bf:0b:b2:23:f4:83:40:02:af:c6:32:3a:25:08:53:a0:
0b:9d:07:74:2c:cd:43:5c:64:cf:4f:fe:83:e4:22:e2:64:9d:
62:4d:27:e9:f2:40:a8:bf:26:3c:f8:14:b5:53:b2:ab:1d:76:
d7:36:cf:87:4c:af:cb:e3:ee:c7:ac:84:38:6a:c7:d4:23:35:
a2:e4:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:34 2026 by rpki-client