Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File: 6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier: nIs4ESyIuqoiIaJfPAgz96ZjQDRStxYsvy6nx7eAPmE=
Subject key identifier: C3:4E:65:BF:44:A7:46:30:2A:96:17:4C:B1:21:6D:44:62:E7:D4:E7
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer: /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial: 01A13FA72DABD245CEE452ABEEBAC9F92AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number: 0ACC
Signing time: Thu 15 Oct 2026 13:01:22 +0000
Manifest this update: Thu 15 Oct 2026 13:01:22 +0000
Manifest next update: Fri 16 Oct 2026 13:01:22 +0000
Files and hashes: 1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: /LOD4mtjJ1JVqpA/l0ecZQZemHo3sZSGWffw5GvGnFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:2d:ab:d2:45:ce:e4:52:ab:ee:ba:c9:f9:2a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Validity
Not Before: Oct 15 13:01:22 2026 GMT
Not After : Oct 16 13:01:22 2026 GMT
Subject: CN=c34e65bf44a746302a96174cb1216d4462e7d4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:1d:37:a4:1e:e2:64:59:c4:b4:b3:03:1d:
ad:c0:9e:64:35:63:56:d8:e3:6e:ae:59:1c:2c:57:
36:f4:71:06:7c:20:a4:26:aa:2f:fd:79:11:5c:ec:
69:fc:fb:a2:32:30:e7:7d:82:72:1c:a2:48:c4:3f:
6b:9d:1e:b9:53:92:11:4c:67:54:46:4f:d4:64:7c:
2f:07:4f:02:b2:d4:14:42:05:32:76:45:26:dc:e4:
a3:c9:75:7a:ca:7a:41:e4:6e:86:31:1b:06:eb:b1:
ff:c1:bc:44:67:12:cf:32:17:e2:79:1f:6f:dd:b6:
c6:68:97:56:7a:74:de:db:8a:b8:fb:91:c9:c3:76:
d4:f7:59:d2:77:6f:96:13:c7:35:22:b6:5e:c8:16:
40:7d:08:71:d4:d1:58:74:62:56:54:ab:be:f2:d5:
6b:0b:b6:ef:c0:a1:8b:44:63:da:fb:07:a5:0f:16:
70:ca:eb:83:e2:84:13:4d:71:73:ff:0b:d1:2e:92:
60:43:b2:fe:b3:a7:32:10:5f:a6:a1:39:7b:9b:55:
36:56:ff:94:d4:b9:23:9c:3c:bd:8f:f5:3a:d4:45:
64:99:85:1b:e9:ef:99:f6:3d:80:29:85:e6:81:81:
59:96:57:49:67:0e:8a:b3:79:58:e1:d3:74:c0:aa:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4E:65:BF:44:A7:46:30:2A:96:17:4C:B1:21:6D:44:62:E7:D4:E7
X509v3 Authority Key Identifier:
keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ae:c0:d8:ea:9c:42:bb:e9:cb:ad:a9:3c:32:b0:bf:c0:2b:
4a:32:bf:9b:fd:4d:13:98:7b:07:af:34:0e:7a:8a:85:f0:c7:
1f:3e:93:d1:f4:01:97:f2:06:d2:c3:60:79:b8:da:6f:d7:99:
2f:1b:c2:42:32:27:46:9f:68:57:c3:19:6a:0f:7f:ac:04:fd:
0c:9a:3e:6e:ed:5d:3e:f0:69:ba:9d:09:c0:56:ee:fc:0e:11:
28:04:e7:30:f0:3e:e6:b4:18:c9:3d:e3:b3:dc:5e:97:19:4f:
34:22:c3:d7:1b:6e:7b:f8:f2:9c:4b:67:4b:b5:f2:bd:6b:fa:
ab:6a:ab:2b:a3:1f:ca:96:31:04:df:57:fb:e2:ce:83:88:d7:
05:43:93:9f:02:e5:4f:67:b3:d7:39:f3:6d:41:41:01:52:c9:
37:88:85:7f:37:c0:c0:6f:28:1b:df:ba:d6:24:d9:ca:38:b2:
f2:23:6d:a7:01:24:af:36:1d:c9:ab:71:32:6b:44:e1:74:d0:
3b:27:54:4c:03:7b:4e:fe:43:b9:8e:2f:6d:2c:3c:c1:1d:64:
20:1d:1a:24:85:be:c2:7e:24:66:9d:72:b1:3b:b5:14:f7:79:
99:86:3e:da:b2:52:a4:83:cc:8b:71:db:5c:1c:ef:93:72:e8:
00:6b:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:46:56 2026 by rpki-client