Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File: 6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier: nPAuTuFBkCZPFNEFNAII1pmk6RXMQuiQakqv7YCajg4=
Subject key identifier: DC:4A:D1:52:A0:6B:14:21:AA:8F:B1:0E:B6:0C:BC:5A:AD:24:F7:E0
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer: /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial: 01A001A5BB8DF26DD1B4EEB590D0778626A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number: 153C
Signing time: Fri 14 Aug 2026 19:00:33 +0000
Manifest this update: Fri 14 Aug 2026 19:00:33 +0000
Manifest next update: Sat 15 Aug 2026 19:00:33 +0000
Files and hashes: 1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: HfuwqLe4IvtmfG5OJ2PAL//OX0KTsomyE8PoYAu5NeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:bb:8d:f2:6d:d1:b4:ee:b5:90:d0:77:86:26:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Validity
Not Before: Aug 14 19:00:33 2026 GMT
Not After : Aug 15 19:00:33 2026 GMT
Subject: CN=dc4ad152a06b1421aa8fb10eb60cbc5aad24f7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:47:37:ac:f8:19:4d:bd:39:25:64:b6:0b:
6e:4b:6b:e6:78:d8:0c:77:f5:83:d1:60:1b:b3:9d:
d7:f9:f1:ca:40:6c:03:b0:a5:08:a9:9d:7e:be:0c:
15:b9:12:63:18:05:01:07:61:f8:6e:8e:69:76:01:
f3:db:7f:dd:e5:f0:a1:56:e6:98:fe:e0:b4:fd:56:
ea:17:f8:06:ef:4d:2b:4f:3b:15:53:67:3f:64:db:
6f:16:04:c0:fe:d3:96:97:3a:9c:33:f5:52:ae:15:
3f:94:ab:8e:f0:b3:63:e2:4f:26:23:29:95:83:e3:
07:84:bd:f7:c5:15:db:27:5b:dd:e7:e0:a2:77:07:
ef:55:15:48:b2:19:59:9f:e2:a3:7c:35:33:02:05:
56:04:37:8e:46:8c:3e:3b:19:2e:bf:09:1c:36:e4:
3e:5f:66:2b:bb:1a:1e:3e:5e:df:0c:6d:f8:5c:05:
38:f2:51:86:94:85:bd:8b:ac:bf:55:14:36:d8:0b:
19:fe:2c:38:3b:4b:30:04:fd:48:8f:be:e8:16:ea:
f2:b6:4a:dd:fb:f7:b9:1c:79:8a:ad:07:b2:10:37:
34:80:39:b8:92:b9:b5:42:0a:39:78:52:29:9d:46:
6f:f2:b2:9a:cd:90:c9:0e:06:d8:ba:ca:a5:bd:5c:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4A:D1:52:A0:6B:14:21:AA:8F:B1:0E:B6:0C:BC:5A:AD:24:F7:E0
X509v3 Authority Key Identifier:
keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fa:5b:3f:f0:f1:2a:26:09:ab:45:29:4f:02:99:cd:3f:d9:
b8:4f:4a:46:d6:03:13:36:40:58:63:d9:40:30:f7:88:62:0d:
37:d7:9a:4f:35:36:61:77:47:75:1f:1f:74:3e:af:2a:2c:a2:
a1:ab:c5:50:e7:95:99:19:20:ed:8a:c3:f9:46:0b:53:43:19:
08:b5:1a:d2:ff:c5:b6:ea:d0:b8:9f:0a:45:c5:9f:cd:65:36:
d8:36:0d:8f:ff:df:34:d2:76:c4:1d:ff:ea:9c:77:94:66:8d:
86:e1:d6:7a:9b:c4:d5:84:77:76:c8:9d:a2:b5:4b:cc:92:0c:
ae:c0:ac:08:ef:4e:ff:64:7f:ba:54:6d:7a:5d:bf:1e:19:3c:
c6:29:c4:b0:d9:9b:61:21:f7:b1:9a:03:de:35:74:fb:8d:15:
f8:19:3a:98:c7:fc:9b:6a:28:08:aa:6a:51:5c:af:7b:f4:62:
4d:c1:a0:df:63:42:cd:b7:8b:86:90:7f:ac:c3:a2:43:6c:10:
3f:21:a1:07:e3:bc:ae:18:ce:c4:bf:e5:2a:27:07:96:73:8d:
09:40:f7:3a:6b:80:08:ba:da:13:51:23:74:31:5d:63:8f:e2:
ab:c7:e1:b4:e5:0e:e0:83:a3:79:51:ae:96:d8:a2:49:09:74:
b6:02:7b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:27:46 2026 by rpki-client