Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier: /p+XXfEWmFCdROeTz+0CL4w18aeMHZ3LU7yxEDEOSeA=
Subject key identifier: D9:06:D3:7D:D1:0C:5C:D2:E6:54:FF:23:C7:FD:4D:E4:E4:2A:D5:CE
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial: 01A001DC977455F9FE0A315A4F735FDC2197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number: 0ABF
Signing time: Fri 14 Aug 2026 20:00:28 +0000
Manifest this update: Fri 14 Aug 2026 20:00:28 +0000
Manifest next update: Sat 15 Aug 2026 20:00:28 +0000
Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: M4s2ujO8/rhaMt2LxkSKA5wg/6HCuxmFzCbsTQcF8tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:97:74:55:f9:fe:0a:31:5a:4f:73:5f:dc:21:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Validity
Not Before: Aug 14 20:00:28 2026 GMT
Not After : Aug 15 20:00:28 2026 GMT
Subject: CN=d906d37dd10c5cd2e654ff23c7fd4de4e42ad5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:eb:25:7b:58:96:bd:0a:07:56:0f:13:83:5f:
92:5b:ee:b6:d8:9f:e1:1e:04:9c:8a:fd:33:69:2b:
89:36:2f:45:17:5d:e5:5c:e2:31:a6:30:25:3c:2a:
db:b0:09:37:57:1b:6a:a8:fc:d5:03:94:5a:80:d4:
31:09:d5:76:da:47:5c:6e:a9:44:dd:a9:68:fa:52:
dc:cc:a6:89:d8:2e:c7:85:0d:c6:e3:93:95:42:59:
77:da:a6:d5:01:cb:1a:cc:97:f7:de:32:97:05:a2:
9d:3d:9f:1c:b8:6e:27:f4:62:3a:b8:39:ee:7e:ed:
a4:dd:99:f7:c7:74:c4:f9:01:f0:64:67:1d:e6:79:
9b:1b:90:c3:20:05:53:60:95:03:5b:12:05:0e:9b:
21:89:ee:57:dd:61:ac:6e:a1:34:53:86:a8:3f:27:
59:15:99:5e:dd:75:73:3f:6c:f2:8f:aa:64:74:e4:
93:bb:64:b7:26:20:5a:d1:15:74:2b:2e:e1:21:8b:
d1:2c:58:e3:ef:e2:e3:5f:38:f0:b9:67:ab:b9:54:
7b:95:81:3a:3b:98:2b:47:a2:63:35:05:a0:18:2c:
cc:8c:87:7f:6c:e6:12:7f:ef:5d:c9:e8:76:71:17:
74:6e:0d:05:26:74:77:0b:30:25:4b:d7:73:4f:b8:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:06:D3:7D:D1:0C:5C:D2:E6:54:FF:23:C7:FD:4D:E4:E4:2A:D5:CE
X509v3 Authority Key Identifier:
keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6f:fc:a0:1d:b3:68:70:82:d8:99:bb:ae:9b:3a:79:92:f3:
cf:4d:c8:d2:83:d2:cd:8b:58:16:d9:a1:b8:53:70:12:b0:a5:
4b:0b:e9:10:43:d4:f7:3c:58:f4:16:a6:e0:e3:16:0c:65:2e:
6e:e7:63:1f:5b:44:5b:bc:14:8c:07:4d:d8:80:e8:5e:ac:8f:
57:14:60:91:f9:09:b5:2a:01:ea:b2:87:6d:ef:08:0b:52:0d:
d7:f6:d8:3b:64:b9:61:f6:71:88:69:30:0b:4a:c5:e4:50:64:
9a:7c:a8:65:57:c8:55:9e:2b:18:08:85:5e:b7:7c:23:a6:25:
a0:18:27:fd:4b:1f:bf:86:09:64:59:5a:0a:c6:a1:b4:a1:be:
cb:3c:db:3e:6f:79:28:b0:54:97:a4:ae:c0:91:d9:66:b7:cc:
0c:98:b3:33:8f:6b:ae:bf:a4:c2:ac:84:0b:27:47:61:fb:81:
0e:69:6d:f0:b9:c2:81:83:06:ce:4d:63:06:a0:41:ac:82:ca:
80:05:b9:46:91:62:4f:a3:12:83:af:08:16:89:80:37:59:4e:
11:7f:81:24:49:84:0b:2c:16:d6:30:44:ae:6c:03:4f:7e:4c:
15:c8:38:1f:ef:c8:07:78:18:1d:8d:00:fb:61:bb:fb:7c:2a:
ec:0c:f4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:32 2026 by rpki-client