Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File: 6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier: xPDmxpMTfAvpP6W749OFLoTgppkIE9hGGdpZBZrmBiM=
Subject key identifier: EB:D8:A1:7F:29:00:FB:C7:57:FE:04:1B:1C:E6:66:33:88:C0:F2:D4
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer: /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial: 019F178C1C46AE8715F9B6F49B7CDCAB4263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 08:01:25 +0000
Manifest this update: Tue 30 Jun 2026 08:01:25 +0000
Manifest next update: Wed 01 Jul 2026 08:01:25 +0000
Files and hashes: 1: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: WzFViuxfwMKMlqAmm4lIeIlixLsFiEmbJcZ8boC6QlE=)
2: NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa (hash: b2x0KyvUzCbJHB1hWOnKC2ju1PwOkyG9Q3mb0qlRsLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:1c:46:ae:87:15:f9:b6:f4:9b:7c:dc:ab:42:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Validity
Not Before: Jun 30 08:01:25 2026 GMT
Not After : Jul 1 08:01:25 2026 GMT
Subject: CN=ebd8a17f2900fbc757fe041b1ce6663388c0f2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c7:ad:2a:3f:92:e1:a5:44:c1:30:97:b5:10:
44:d0:c7:8c:c2:c1:b8:4e:c8:fc:34:3c:06:b7:4d:
d5:41:0f:6e:db:8b:14:80:26:57:2b:bf:76:cf:ea:
33:43:1d:fe:26:6f:1e:df:36:c8:87:6b:86:21:32:
ef:ea:3c:84:c1:5c:3e:c9:b4:e5:d7:a5:a8:71:d3:
21:86:18:9f:9a:a9:a6:a0:f0:b8:2e:8f:fc:a6:cf:
c5:c3:b0:03:12:69:00:f6:c9:b6:b6:6e:9d:a1:6c:
08:ab:eb:1e:4f:fe:43:c2:48:22:66:1e:b2:79:01:
02:b7:53:72:7d:22:cd:41:cc:c1:d0:f2:4c:f2:20:
be:fe:01:0e:02:1e:23:d2:29:2b:bc:8c:ab:e1:c8:
28:a3:f5:31:2d:19:6f:9b:33:8b:0e:d3:6e:21:57:
81:4b:21:b1:8d:6c:d3:cf:66:85:c7:cb:cb:0c:24:
51:fb:e1:39:2c:3e:5d:45:1f:46:b0:eb:58:46:2e:
1e:9a:8f:9c:53:9f:e4:fd:8a:b9:90:a1:3b:41:bd:
7f:54:ec:23:25:7a:4f:d5:d4:77:61:ff:f9:8a:92:
c4:05:29:ff:58:d5:57:68:0c:bf:91:a8:85:4b:8f:
c0:ff:bd:ac:9b:5f:6e:93:ee:06:7a:e5:18:51:9e:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D8:A1:7F:29:00:FB:C7:57:FE:04:1B:1C:E6:66:33:88:C0:F2:D4
X509v3 Authority Key Identifier:
keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:48:f5:9c:d7:50:14:61:bb:e8:bc:8f:50:a2:e6:c7:dc:fa:
6f:b9:96:25:3a:64:1d:f5:3f:13:3d:5c:39:d5:26:ad:f2:3a:
e2:9c:8d:41:37:e7:f9:ea:cb:60:06:b1:1a:34:63:d9:04:9a:
82:41:90:04:b0:78:b8:bd:1c:bd:e7:a9:b3:cb:ec:f6:9c:26:
0a:c3:d0:a3:eb:b2:11:c6:91:b3:0f:45:37:3b:fc:85:72:ae:
1d:ca:b4:f3:62:94:bf:b4:78:2e:65:3f:85:79:c9:54:d3:44:
0b:04:ef:0a:94:e9:ef:03:c9:99:0a:07:d5:56:6f:3e:91:9a:
8a:9e:0f:c9:8e:0a:a4:28:91:f7:b8:63:cb:d2:8d:4d:9f:34:
dc:c6:f7:aa:c6:cb:aa:7b:cb:07:85:63:a8:3a:0e:4c:47:ae:
14:31:49:31:80:b3:5a:0a:68:44:ac:54:78:39:5f:f3:2b:c6:
52:00:d0:4c:2d:e1:8f:d7:38:b3:e4:1c:43:4c:7b:8b:15:da:
d3:98:5a:ff:1c:68:1f:db:64:e0:4f:f8:6c:a7:49:87:86:b1:
5c:e0:fc:ac:9e:5c:14:14:d9:c5:80:66:c1:32:4a:c4:91:75:
3d:ce:98:54:36:ab:8d:f3:20:b3:79:7c:27:08:c2:65:04:c0:
9c:df:69:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:08 2026 by rpki-client