Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier: tPRBhQ09WC6JDt18dFQIgXhc9wU6MqHZDTUjd1Qm5nc=
Subject key identifier: F1:33:3E:B5:8F:A1:D2:51:38:F0:78:8E:44:EB:65:03:4C:60:51:0C
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial: 019E307216C93F3BC7377F5C11871E4B8FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number: 09CE
Signing time: Sat 16 May 2026 11:00:43 +0000
Manifest this update: Sat 16 May 2026 11:00:43 +0000
Manifest next update: Sun 17 May 2026 11:00:43 +0000
Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: p6FrBBFHzMLEE9TjOyN/KmCN8LvtiE2jZSB76hTEZBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:16:c9:3f:3b:c7:37:7f:5c:11:87:1e:4b:8f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Validity
Not Before: May 16 11:00:43 2026 GMT
Not After : May 17 11:00:43 2026 GMT
Subject: CN=f1333eb58fa1d25138f0788e44eb65034c60510c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:2e:46:1f:1d:b6:91:e1:b2:8b:92:6a:93:
0d:74:e2:33:1a:43:25:be:19:b0:5a:c5:11:d2:91:
40:e2:2e:66:56:e5:7d:44:9b:64:ae:e3:d4:42:27:
68:5e:4f:5a:61:06:70:7e:01:72:7b:7d:67:50:39:
db:54:70:e3:26:7c:60:4c:7f:bf:81:43:fc:d0:18:
9d:fc:69:45:be:ac:99:f2:e4:a3:61:fe:7a:ab:49:
66:e3:8f:a3:4b:c8:7f:36:77:f9:2c:16:64:c5:2b:
d2:00:6c:6e:ed:5b:47:b9:c2:95:26:86:59:ec:3d:
31:63:3b:e4:28:93:d5:8e:73:33:37:95:a1:c9:07:
de:ff:d0:8e:37:c1:cd:09:d0:4e:0f:5a:0d:bd:7a:
9a:80:b0:ec:71:1d:d9:b0:ae:6d:6e:de:83:0f:d2:
88:bc:38:22:a9:e0:6d:28:72:1b:25:51:a1:60:14:
54:c1:4c:00:40:01:58:8c:00:6f:6f:04:f3:2e:3d:
68:6c:dd:9a:f0:7e:db:09:df:43:a6:d1:bc:ea:24:
94:b5:39:b6:e6:84:19:c1:11:46:fc:8a:79:7f:3a:
b5:48:29:65:99:cc:ba:12:bc:e3:2d:51:46:6c:01:
51:b1:0e:dc:e3:cf:23:ba:50:86:c4:a0:b7:46:46:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:33:3E:B5:8F:A1:D2:51:38:F0:78:8E:44:EB:65:03:4C:60:51:0C
X509v3 Authority Key Identifier:
keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:69:80:bb:14:22:e6:ed:86:85:1e:9d:09:89:db:1a:58:71:
c1:41:d7:4d:c2:0b:b5:e6:1b:dc:83:dd:86:73:77:89:52:88:
b8:0d:86:64:c4:0c:9f:a2:34:b2:15:f6:e7:cc:67:ac:10:b7:
37:04:7d:c4:b4:16:67:0c:91:29:ad:e6:d2:1b:cd:14:2e:86:
39:d5:fd:5b:ae:c2:fc:ac:ab:eb:45:47:23:eb:7b:1f:89:34:
04:ab:99:e2:f6:fe:d3:34:5c:1e:ca:97:d7:05:49:74:cd:5f:
80:52:98:15:43:5a:42:8b:fb:0a:8a:09:c4:6b:30:75:83:d5:
4c:15:2f:4f:98:30:1c:74:98:b6:a0:a5:9b:5a:d5:fe:d7:e6:
1f:35:bb:63:28:e5:a6:8a:5c:f8:34:4a:68:a0:6c:5c:30:ee:
45:50:82:04:59:09:26:fd:56:92:72:99:03:ae:0d:66:22:b8:
61:5f:8b:5a:6b:0d:3d:f9:3f:c0:25:c8:db:7c:7b:e8:01:42:
da:3f:5f:98:09:8d:d3:71:90:30:fb:e4:c6:87:e3:d5:60:e0:
03:18:d2:15:12:6d:b9:b1:a3:70:25:19:e6:ae:d8:62:94:8c:
8e:4b:c9:94:da:c2:33:e5:58:a6:8b:5e:1e:ef:c5:d8:3b:76:
36:82:fd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:38 2026 by rpki-client