
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier: OlOyzbwW+2ItZq6re8lP/Z8x8VETqh98IffABPywn1A=
Subject key identifier: F7:30:FA:5D:50:48:60:9B:07:2E:B3:FC:93:00:0D:A9:45:2A:3C:EA
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer: /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial: 01A13DB8CFB890B260C4B8222573347B2779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 04:01:24 +0000
Manifest this update: Thu 15 Oct 2026 04:01:24 +0000
Manifest next update: Fri 16 Oct 2026 04:01:24 +0000
Files and hashes: 1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: v5uIWgPscpQvkqf/IV0T5LXbbn5Yq2mf19ew85wY70A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:cf:b8:90:b2:60:c4:b8:22:25:73:34:7b:27:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Validity
Not Before: Oct 15 04:01:24 2026 GMT
Not After : Oct 16 04:01:24 2026 GMT
Subject: CN=f730fa5d5048609b072eb3fc93000da9452a3cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:cf:f8:c4:69:eb:c0:82:e5:fd:33:f3:2f:
3a:69:e9:ba:cb:c4:de:c0:f4:63:8c:c2:7f:e9:20:
40:ae:b6:51:7b:db:d4:1b:56:30:8f:d9:a6:30:f5:
f5:07:95:b7:1c:32:f3:9f:ec:3b:3a:67:85:05:6e:
cb:56:4c:18:80:b1:ae:98:45:b8:84:11:96:3a:52:
16:43:92:ea:08:50:f0:ef:46:cc:f7:42:18:50:6e:
5d:c0:e8:4b:83:4d:55:38:47:65:61:d0:a6:a9:a1:
ef:53:c4:ba:15:20:ef:d2:5f:87:54:21:bb:61:86:
62:2b:24:dc:17:56:cf:18:bb:ac:9d:0c:ac:85:40:
b6:a2:07:ec:b9:2a:6f:db:93:d1:6d:f7:0d:aa:82:
4e:b5:7a:97:2f:01:66:db:95:a8:e1:f2:b4:9a:a0:
f0:53:0f:cc:7c:d9:fc:06:7d:2e:6a:e0:9f:3d:8c:
4d:83:82:28:44:c9:46:a0:aa:86:41:ce:93:91:11:
60:45:33:a9:37:c6:1a:56:43:66:b5:de:6f:f4:3b:
10:1f:f3:7f:71:51:4b:81:9c:31:71:e6:79:c9:cb:
7b:3f:d5:b8:4f:8b:65:02:cf:73:21:fb:56:57:2c:
d1:50:cc:1a:4c:2f:96:9c:72:39:8a:fa:f3:65:75:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:30:FA:5D:50:48:60:9B:07:2E:B3:FC:93:00:0D:A9:45:2A:3C:EA
X509v3 Authority Key Identifier:
keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:58:73:38:eb:a9:ae:ff:d4:2c:bc:c0:1b:fe:a8:6a:f6:07:
b2:c0:55:59:4b:ba:bf:e2:5c:93:fe:d2:b1:45:8e:e5:4d:f5:
60:1c:08:b9:8b:8d:61:a8:f2:14:03:44:48:75:b0:26:c1:8b:
7a:3c:3a:7f:76:53:e2:5b:10:6a:e0:d4:3d:1a:82:6f:6e:fa:
7f:c3:84:ca:1a:9b:91:46:cf:65:ad:22:6a:2b:84:0e:50:df:
58:c9:8f:d0:39:38:b4:bd:9f:74:79:92:e3:0e:e3:9a:37:bb:
04:bf:3c:80:ee:62:bf:e9:e4:14:b4:f1:79:f0:d0:3f:5d:87:
52:e1:ae:33:82:d7:c3:ab:20:37:8f:f0:72:33:b0:9c:24:a0:
67:a0:7c:81:02:77:0f:d8:44:de:5f:1d:86:ff:52:5c:ca:ab:
6d:d6:92:a7:fc:94:88:db:67:3b:00:f1:7c:d9:f8:25:49:d1:
04:10:b0:7a:f6:ee:19:ec:70:ce:b0:65:68:8c:31:f3:74:ec:
11:4f:c6:0d:79:ec:9b:56:86:08:5e:6f:7c:de:a7:ef:3e:ce:
ba:23:5a:84:77:5c:fc:4f:3d:78:77:d5:88:fe:c4:b6:b1:3f:
04:c3:0a:50:51:54:d2:5d:da:15:21:f0:ef:75:0b:8a:f2:a8:
22:aa:7d:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uM+4kLJgxLgiJXM0eyd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWJjMmVhNjI1MjM4YmI0ZTI4MjFhMThiZDVlZWVhM2E2
OGE3ZjkwHhcNMjYxMDE1MDQwMTI0WhcNMjYxMDE2MDQwMTI0WjAzMTEwLwYDVQQD
EyhmNzMwZmE1ZDUwNDg2MDliMDcyZWIzZmM5MzAwMGRhOTQ1MmEzY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRHP+MRp68CC5f0z8y86aem6y8Te
wPRjjMJ/6SBArrZRe9vUG1Ywj9mmMPX1B5W3HDLzn+w7OmeFBW7LVkwYgLGumEW4
hBGWOlIWQ5LqCFDw70bM90IYUG5dwOhLg01VOEdlYdCmqaHvU8S6FSDv0l+HVCG7
YYZiKyTcF1bPGLusnQyshUC2ogfsuSpv25PRbfcNqoJOtXqXLwFm25Wo4fK0mqDw
Uw/MfNn8Bn0uauCfPYxNg4IoRMlGoKqGQc6TkRFgRTOpN8YaVkNmtd5v9DsQH/N/
cVFLgZwxceZ5yct7P9W4T4tlAs9zIftWVyzRUMwaTC+WnHI5ivrzZXWZxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcw+l1QSGCbBy6z/JMADalFKjzqMB8GA1UdIwQY
MBaAFOsbwupiUji7TighoYvV7uo6aKf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8xM2Y1M2MtMmFhMi00N2M2LTg4Y2Et
NTg5MjIyNzJiYjE3LzEvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8xM2Y1M2MtMmFhMi00N2M2LTg4Y2EtNTg5MjIyNzJiYjE3
LzEvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1hzOOup
rv/ULLzAG/6oavYHssBVWUu6v+Jck/7SsUWO5U31YBwIuYuNYajyFANESHWwJsGL
ejw6f3ZT4lsQauDUPRqCb276f8OEyhqbkUbPZa0iaiuEDlDfWMmP0Dk4tL2fdHmS
4w7jmje7BL88gO5iv+nkFLTxefDQP12HUuGuM4LXw6sgN4/wcjOwnCSgZ6B8gQJ3
D9hE3l8dhv9SXMqrbdaSp/yUiNtnOwDxfNn4JUnRBBCwevbuGexwzrBlaIwx83Ts
EU/GDXnsm1aGCF5vfN6n7z7OuiNahHdc/E89eHfViP7EtrE/BMMKUFFU0l3aFSHw
73ULivKoIqp9eA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:03 2026 by rpki-client