Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier: fFvLuTto6kyvBCYuwLsjuwKUq7QkmEAwj6OM+lmBYBU=
Subject key identifier: 6A:38:83:B3:C0:BE:32:B8:A4:EC:67:2A:81:CD:6E:11:03:4F:9E:9F
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial: 019F18312485A293E94D035AC9AACE37FDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number: 0A46
Signing time: Tue 30 Jun 2026 11:01:41 +0000
Manifest this update: Tue 30 Jun 2026 11:01:41 +0000
Manifest next update: Wed 01 Jul 2026 11:01:41 +0000
Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: hniHH1dbmdri4QzYlRDhxz/CjuTJMvpUCXip3xXxRV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:24:85:a2:93:e9:4d:03:5a:c9:aa:ce:37:fd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Validity
Not Before: Jun 30 11:01:41 2026 GMT
Not After : Jul 1 11:01:41 2026 GMT
Subject: CN=6a3883b3c0be32b8a4ec672a81cd6e11034f9e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:21:0b:8c:08:0e:dd:9d:6e:f1:4f:7e:47:
b1:f2:ac:bc:c3:e8:6e:b5:f0:01:00:5a:b6:30:ff:
0f:b1:0f:92:ce:02:eb:25:94:23:ea:f3:d7:31:dd:
fc:33:0e:63:9f:cb:0d:ca:27:03:2a:63:3b:5c:f3:
e9:2d:41:0e:cd:2c:d9:36:b3:e0:71:b8:70:a1:2d:
2d:51:a6:0b:97:b2:6a:47:e9:dd:a6:97:1e:96:6b:
d4:73:2b:6b:cd:a0:b1:ca:83:81:f0:07:b2:e9:93:
8c:e5:a9:fc:43:26:cd:af:43:bf:c9:7a:1c:35:e7:
bc:64:7a:10:90:74:3e:b5:7e:a3:d4:8e:f1:08:6f:
0d:f2:6d:8c:9c:a5:83:91:ef:fb:6a:e4:b5:0d:4a:
ca:f3:4c:f1:48:8f:f7:f0:ed:9c:fa:28:37:fc:37:
d4:9a:57:bb:9e:fa:94:8d:d5:8f:09:7b:c9:7e:66:
5b:f8:dc:52:23:a4:b3:37:a8:d2:fb:1b:be:94:02:
3f:af:55:a2:ec:49:b4:b9:2f:c6:36:03:0f:41:58:
62:16:22:8a:73:cb:32:3e:2a:c0:60:29:23:e5:e2:
19:70:d4:8a:db:fe:96:7e:e3:c2:c4:4b:f4:b6:84:
0e:5d:6f:21:bf:d0:83:f3:87:17:e7:c1:48:1c:3f:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:38:83:B3:C0:BE:32:B8:A4:EC:67:2A:81:CD:6E:11:03:4F:9E:9F
X509v3 Authority Key Identifier:
keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2c:41:d6:c4:3e:3e:ef:dd:ae:22:b4:c5:4f:f7:86:a6:81:
40:82:4c:a0:7b:cb:5e:4e:a4:18:27:81:96:54:52:01:4e:a1:
21:bd:1c:62:95:de:f8:b1:f9:05:2b:ce:d4:22:c7:0a:11:18:
dd:3d:20:c3:c9:55:0c:47:c8:81:6d:9f:14:de:96:43:3f:fb:
f2:a7:76:48:17:e6:e2:5a:fb:6d:de:40:71:43:4a:18:95:e3:
95:ba:e6:f3:58:1f:2c:0e:a4:41:ff:06:21:b2:f5:7a:1a:93:
fb:11:5c:00:1a:bc:2a:c5:99:cd:79:54:92:36:6d:ef:aa:93:
f7:5a:e4:ec:6b:40:03:b5:2a:3f:46:61:4d:6d:56:57:dd:4b:
04:48:ae:da:84:06:f1:df:58:45:c0:48:01:7f:57:f1:e9:f9:
38:7c:be:64:59:6d:98:0f:0a:27:23:c0:5f:87:d1:eb:64:c8:
dc:6c:d9:c5:6c:25:0f:98:f5:73:84:7f:2c:57:85:f3:4e:79:
1e:5a:79:26:ef:50:4d:ff:87:61:20:36:bc:ca:9f:ad:fb:c4:
4c:95:b7:9f:d9:cf:1c:ea:31:5d:03:5d:f5:63:94:17:67:aa:
45:b2:89:38:ab:6c:03:64:58:0d:80:d6:a7:07:4f:10:73:46:
a1:fc:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:23 2026 by rpki-client