Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier: FnHH+XAX2GEtBTqfLIN4PMAG0wFNomKtcF0rbURAySg=
Subject key identifier: 58:63:65:DB:2D:87:25:94:55:A4:D3:54:D8:91:3B:34:90:DA:E4:A3
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial: 01A13E94B385AB0A1F5696F4671EA328E0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number: 0B63
Signing time: Thu 15 Oct 2026 08:01:35 +0000
Manifest this update: Thu 15 Oct 2026 08:01:35 +0000
Manifest next update: Fri 16 Oct 2026 08:01:35 +0000
Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: wWcmpuCCBAFMTb8w5jFvzuGMDtZ39oEUy23yDgEdUwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:b3:85:ab:0a:1f:56:96:f4:67:1e:a3:28:e0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Validity
Not Before: Oct 15 08:01:35 2026 GMT
Not After : Oct 16 08:01:35 2026 GMT
Subject: CN=586365db2d87259455a4d354d8913b3490dae4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:79:28:c6:1f:69:5f:b2:c8:b4:bb:4a:f1:
0c:a8:58:77:c3:ef:64:fd:54:d5:68:7c:a5:a8:f5:
f3:71:2d:28:80:17:d4:8c:20:31:63:9b:41:44:88:
ab:11:b8:bf:c3:f3:98:de:fa:44:d7:8b:5a:99:00:
14:57:c9:63:9c:5d:57:dd:94:56:30:90:59:88:12:
03:df:d9:08:c8:e2:d6:e3:db:2e:76:00:6b:5f:9e:
8b:2c:a1:1d:d5:3a:1b:6a:db:c8:3e:37:f1:e3:c6:
71:67:87:f7:6d:f4:39:dc:9f:78:7a:3e:fd:44:4f:
1c:cf:99:04:e5:2c:6c:b7:81:a8:da:8f:3a:01:b9:
d1:0f:b4:37:af:6d:de:e6:a2:70:0d:be:7a:77:37:
a8:ac:66:1e:68:f9:93:86:f7:60:f9:3d:da:3e:0b:
fc:d6:fa:ad:08:e9:85:3f:f6:f0:4e:22:26:b6:7e:
e3:39:65:77:e2:29:9c:37:5a:87:6e:0f:e0:ea:5e:
98:bf:38:c6:b9:be:5b:c0:3d:e3:24:aa:00:3a:45:
5d:6c:8e:10:d8:cb:35:dd:07:a3:cd:06:f9:be:a2:
9a:65:b3:ea:04:02:83:03:b4:ba:be:c6:00:68:3c:
91:82:c1:92:a6:7d:35:4e:10:b4:5c:7b:46:1b:a5:
f3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:63:65:DB:2D:87:25:94:55:A4:D3:54:D8:91:3B:34:90:DA:E4:A3
X509v3 Authority Key Identifier:
keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:56:f1:3a:e9:99:09:e5:19:1b:72:16:7a:b6:00:6d:a5:db:
29:f1:58:2b:9f:53:b5:1c:d4:81:73:0a:a7:cf:31:38:f8:09:
90:26:4b:9f:bc:c8:9c:69:59:e4:45:d4:92:a0:a4:c9:94:e0:
27:f3:73:1c:d8:3c:71:ba:76:f3:fd:50:fd:4c:2c:16:72:4d:
9a:ca:85:f4:9f:ad:a6:2b:9f:b5:83:59:ee:73:36:34:17:a0:
a2:42:65:de:6f:4b:a2:9d:f5:64:a8:73:2c:54:e3:f7:3e:e4:
e0:92:c3:42:08:e3:1b:39:a8:a0:43:16:63:a3:54:1f:cd:31:
eb:35:18:a3:d2:f2:f4:2c:52:80:b9:f7:2f:c7:f9:88:ed:bf:
21:0c:01:bd:21:be:b6:c1:b6:04:68:fb:55:58:88:d0:9c:f1:
d2:83:3f:1f:37:4a:bb:34:3a:f0:2e:b3:2d:39:76:e6:54:8c:
70:84:34:1d:12:d7:58:8c:cb:24:c4:f0:86:f6:3d:cc:fc:0a:
1c:93:01:1b:e2:b5:cf:bd:93:f1:ce:e4:7c:6d:28:80:b1:12:
2d:d0:47:f9:74:0c:b8:35:50:1e:63:7b:58:ee:a4:3f:08:57:
d3:27:0f:fd:ca:05:8b:e3:95:59:b4:9f:4c:60:57:1c:7f:6e:
e3:cb:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:17 2026 by rpki-client