Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File: 6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier: IN0/U6HAClz1zkHemQyeEIgM1wukVoSfFuSac31AI3A=
Subject key identifier: 80:11:87:CD:57:48:5D:5C:5E:62:3B:A8:5D:23:CF:76:30:7D:BA:DA
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer: /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial: 019D386619021A150CF2ACD5BBAA72AE49D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number: 08B6
Signing time: Sun 29 Mar 2026 07:01:48 +0000
Manifest this update: Sun 29 Mar 2026 07:01:48 +0000
Manifest next update: Mon 30 Mar 2026 07:01:48 +0000
Files and hashes: 1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: +RDHaGPW1JvFmAGc00es9ZxGkAVgr/C4xRBQjBgxI2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:19:02:1a:15:0c:f2:ac:d5:bb:aa:72:ae:49:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Validity
Not Before: Mar 29 07:01:48 2026 GMT
Not After : Mar 30 07:01:48 2026 GMT
Subject: CN=801187cd57485d5c5e623ba85d23cf76307dbada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:66:c8:be:d4:08:98:e6:e8:66:d6:20:4b:
2e:8c:9f:d3:6a:bc:dd:4f:81:6c:d0:d4:99:1d:da:
6e:ea:7d:9c:b5:95:c1:e5:26:b9:d1:f6:51:f1:92:
2b:b6:0e:10:63:f9:e2:97:b2:c4:c0:3c:11:6e:91:
35:57:c0:5c:7f:54:7f:2b:f4:67:ae:a0:ca:f9:a3:
a0:04:87:17:37:05:5d:4b:52:4c:0e:8e:1b:db:77:
33:44:0d:b4:bb:25:c7:10:c2:6f:fc:4d:3c:9c:45:
18:c4:ca:1d:9e:5f:9c:ae:02:bd:72:88:76:b7:aa:
a7:7b:f3:8e:42:5b:0c:92:da:64:63:39:c7:dd:b1:
f7:a1:ba:27:64:ab:15:08:b8:9f:fe:b6:62:e7:3c:
59:08:33:cb:05:7b:d7:48:61:78:37:9a:81:04:01:
66:be:83:7e:a4:f8:f4:91:92:d2:31:5e:a4:7a:62:
a4:cb:82:01:f6:d0:fd:76:f8:e0:f7:37:55:f7:c7:
49:f9:bd:8e:a9:26:de:a1:37:3b:2d:7e:6f:9b:d2:
8a:03:50:c0:e1:8a:62:cb:2b:f2:13:17:7f:bd:dc:
1e:08:2a:e6:87:f1:77:fc:32:59:44:18:b1:f1:5d:
bc:29:ea:09:e4:ef:27:93:ee:69:62:fa:06:3a:c1:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:11:87:CD:57:48:5D:5C:5E:62:3B:A8:5D:23:CF:76:30:7D:BA:DA
X509v3 Authority Key Identifier:
keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3d:34:f6:db:14:28:c7:1a:8c:aa:1b:b4:05:17:ac:f3:b9:
8e:27:14:f6:ef:b4:b3:27:44:d7:06:54:9e:ad:be:a3:c5:a8:
7b:10:65:9a:6b:b9:f5:2c:58:86:f8:8a:56:ae:b6:93:28:bb:
46:4f:49:d5:fa:96:ca:fa:18:78:a0:3e:b4:32:18:60:00:c4:
86:12:01:2f:a8:70:79:35:22:11:5b:e3:75:da:de:8e:80:4b:
ae:02:78:bd:ce:ef:13:1d:4b:9e:a3:b7:c0:39:2b:d1:07:1a:
9f:29:71:15:c3:84:d5:ed:96:0e:d5:3b:ac:07:e2:4b:e7:2e:
b5:5d:32:da:5a:bd:ef:08:66:2a:ce:d1:fc:e5:79:3e:94:ae:
7a:f8:b7:e2:2d:72:39:16:b6:d5:0e:dc:04:74:94:1b:d6:be:
cd:36:91:8f:36:35:7b:e5:53:96:d2:73:03:37:f8:d0:d8:52:
34:7b:49:09:3e:f2:96:42:b3:47:b4:19:29:64:91:47:30:79:
0b:a1:76:91:48:01:7e:1e:a4:6e:08:dc:2c:d8:0e:23:49:1b:
c5:cd:a4:1c:30:8d:d8:9f:ba:bc:9f:6c:1e:de:97:21:c2:46:
a2:1c:4f:2e:2d:d1:41:e0:c1:ef:28:14:2b:d2:67:6f:1f:41:
57:7d:66:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:32 2026 by rpki-client