
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier: UpQs7NVZC/18ejRvbJ2JOeTt9OmwXsOp2bDVWwvBLrY=
Subject key identifier: 88:55:44:C0:3B:9E:44:B1:3D:0B:CF:3E:DF:41:C7:7B:C4:8A:78:C8
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer: /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial: 01A13DB8233C80568C6100AD09F73D137FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number: 123A
Signing time: Thu 15 Oct 2026 04:00:40 +0000
Manifest this update: Thu 15 Oct 2026 04:00:40 +0000
Manifest next update: Fri 16 Oct 2026 04:00:40 +0000
Files and hashes: 1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: R+zPLtRSc95h6rB8ju82coX0WWVydrnio1P23TU7gFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:23:3c:80:56:8c:61:00:ad:09:f7:3d:13:7f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Validity
Not Before: Oct 15 04:00:40 2026 GMT
Not After : Oct 16 04:00:40 2026 GMT
Subject: CN=885544c03b9e44b13d0bcf3edf41c77bc48a78c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:96:bc:97:2e:18:3d:8d:81:ca:3b:43:8c:
25:dc:4c:d5:8b:b5:4c:d5:53:f1:d7:a2:c1:38:29:
cc:ec:49:f4:46:1f:88:1b:58:3e:10:44:bd:6a:6c:
2e:69:e6:e5:21:48:5f:db:8b:1a:c9:b0:e9:be:3f:
d3:1a:54:67:a1:af:ad:56:2c:7e:14:0b:e1:e8:c9:
b4:fa:f3:26:7f:be:df:4c:51:b3:bd:ea:26:d2:1d:
67:8a:e8:53:bc:84:7a:b8:81:bd:53:89:a1:9e:cb:
79:67:57:60:99:26:ea:4c:51:60:ee:5d:f5:12:86:
63:32:cf:ad:d8:93:66:c4:b1:b9:f6:aa:cd:5a:1d:
87:8c:c5:4f:4e:eb:f7:d2:18:78:7c:c1:0d:5c:3e:
95:c0:0b:72:ca:c8:8a:3d:44:2f:15:d8:a0:47:e9:
f6:50:b5:bd:98:03:8f:d5:d3:de:a8:2b:95:9a:cd:
ce:1e:f2:6f:5b:51:25:96:df:19:85:2b:29:11:08:
8e:c4:8c:dc:11:42:d0:11:51:e6:90:c4:d9:47:42:
bc:82:5e:0b:0a:fd:0c:a9:d2:a6:fd:dd:bd:eb:a0:
fa:7d:6e:c9:99:18:c0:c0:49:fd:ac:15:31:a0:8c:
e5:16:f3:a9:03:e6:17:55:6e:53:9e:e0:cc:23:f8:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:55:44:C0:3B:9E:44:B1:3D:0B:CF:3E:DF:41:C7:7B:C4:8A:78:C8
X509v3 Authority Key Identifier:
keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b8:40:fb:6d:c0:36:48:bd:a9:62:9f:74:eb:90:9b:d8:cd:
05:40:14:3b:27:93:9a:4e:6c:50:3d:4b:b8:99:8a:e8:ac:3e:
89:5c:fb:32:c3:86:8c:05:41:4d:3f:28:2a:c2:b4:4d:b9:4c:
c6:29:24:85:18:1e:28:3d:8c:6a:54:83:cc:8e:b3:8d:2e:66:
73:c4:da:03:d3:c9:7c:e4:33:79:8e:69:14:77:dd:1d:c7:a2:
a6:e3:e7:71:45:1d:62:e5:fa:f2:23:4d:2e:20:bf:03:cf:2b:
36:00:61:6f:81:c3:72:d2:bd:e7:25:8e:f6:d0:c2:d2:d7:61:
bf:5c:cc:8a:de:ee:cb:55:9c:9f:94:b2:10:23:42:d8:ca:c5:
69:09:23:9a:ed:5c:e5:e3:54:37:83:46:c4:e3:6b:23:fc:07:
94:e2:a3:ae:24:9b:aa:ec:86:b1:d1:12:31:dd:2e:ec:ca:75:
41:cd:01:38:65:19:26:d6:92:b8:20:21:22:d2:5e:f8:7a:0e:
ee:4c:af:4d:a3:13:ae:5f:25:8b:b0:7e:3e:e9:33:06:40:41:
36:f6:8b:02:3b:af:bc:20:bb:05:27:b0:3b:06:3c:77:5c:59:
76:08:e4:cb:ad:fa:6f:75:83:a0:56:83:88:9a:43:e1:fd:62:
f4:7d:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:51 2026 by rpki-client