
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier: mw5jyOiV91NxwGaNOv5YbdL/irIBphgHFpGKWNRTDsU=
Subject key identifier: 42:BC:79:D7:5E:D1:59:B4:27:56:20:EB:01:F1:C0:A4:51:09:F1:DA
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial: 01A13D49ECB4A87E33E707B2420E29BE65F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number: 0E8C
Signing time: Thu 15 Oct 2026 02:00:16 +0000
Manifest this update: Thu 15 Oct 2026 02:00:16 +0000
Manifest next update: Fri 16 Oct 2026 02:00:16 +0000
Files and hashes: 1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: C4uHKaR3+0beWWI0WmsR4lXI9tab3DSucwxe1DorY4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:49:ec:b4:a8:7e:33:e7:07:b2:42:0e:29:be:65:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Validity
Not Before: Oct 15 02:00:16 2026 GMT
Not After : Oct 16 02:00:16 2026 GMT
Subject: CN=42bc79d75ed159b4275620eb01f1c0a45109f1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:00:11:d8:2a:5f:39:8e:27:80:40:f8:40:
e5:e3:38:51:fe:7e:5b:a1:2d:fd:77:30:af:60:39:
91:7c:45:e7:68:a5:0b:ae:01:3f:1f:bd:65:f3:32:
d1:01:9d:5f:fc:36:e2:a3:08:8e:47:d4:85:0d:71:
9b:09:83:5c:ba:2a:87:f6:63:7e:d5:45:06:28:b0:
44:55:67:42:b6:e5:8f:1c:34:8e:62:cd:8b:15:86:
29:56:3a:41:17:da:39:d1:9e:4c:9a:d2:c7:3e:22:
2d:6a:8f:c3:97:a2:4c:17:01:c7:a5:ce:ec:3e:ff:
62:bb:e4:89:5c:45:df:53:8a:3e:e9:b9:bb:af:7d:
a0:5b:f9:56:6d:8d:f7:d1:da:4d:a7:55:72:78:d9:
5a:58:a6:99:ff:4e:59:c1:af:44:a4:e9:41:85:42:
86:30:1b:30:26:35:e8:51:f5:eb:2a:40:4e:20:7e:
ba:31:1a:aa:58:b9:55:db:41:a6:ff:3e:51:cb:a5:
40:ae:b9:bf:f0:35:c6:58:2f:d5:ed:a8:e8:ef:4d:
30:2e:52:11:6f:f0:60:33:14:1b:49:2b:33:10:9b:
87:f2:e6:69:96:f7:27:a5:00:17:06:4d:f7:86:b2:
d7:94:a7:1d:59:d9:a1:05:18:8a:fd:b6:56:f7:7c:
59:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BC:79:D7:5E:D1:59:B4:27:56:20:EB:01:F1:C0:A4:51:09:F1:DA
X509v3 Authority Key Identifier:
keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0c:1c:fd:b9:6c:77:3d:3d:a2:dc:55:08:84:37:50:4f:89:
4e:f1:44:2b:e6:ca:97:ab:79:12:bd:9b:89:53:ad:13:f7:85:
5a:22:9b:af:32:f7:fb:b8:be:20:07:d0:a5:31:5f:14:55:14:
cb:bd:b5:68:87:69:aa:55:65:af:4e:01:23:c3:df:91:45:44:
3c:ba:e4:ee:af:34:f8:50:b4:2c:a7:a6:d6:48:c2:1a:24:a1:
64:fa:6c:22:1d:1b:45:69:0f:e6:8e:2c:ff:e8:c7:18:e0:bc:
b2:c7:4d:01:0e:55:a6:c5:a4:41:23:0f:3d:f8:b7:79:f6:3c:
93:6b:74:8f:8d:41:77:25:e0:e9:ab:3f:bb:c7:2a:e5:b0:17:
57:a0:64:db:4a:4e:8e:34:f5:3b:28:69:2d:c4:38:a4:1b:2d:
ce:e5:2e:2f:9a:36:b4:10:83:94:c3:40:8a:6a:05:06:42:7b:
e1:e0:78:0d:cb:b6:9b:6b:32:d7:c5:6e:7e:59:d1:95:0c:fc:
fc:7f:e7:c2:45:59:2d:55:f0:87:0d:bd:d0:01:ef:99:6a:30:
02:c8:7a:99:c3:0b:c1:28:5e:22:29:2c:04:ec:81:da:ee:48:
a9:53:3a:a5:80:a1:25:a3:fa:d8:08:22:3b:6a:9b:1a:73:2c:
60:9e:df:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:07 2026 by rpki-client