
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier: 2RMgKnGicAUTWRvIUJKe88NupdnqzK46z6dKYk1nz4M=
Subject key identifier: A8:2D:61:F1:63:90:40:CD:CC:C7:4F:D5:D1:97:04:16:D6:F9:A8:1E
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer: /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial: 01A13DB863A792D1416E7F75F2B2EF024528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number: 0B2B
Signing time: Thu 15 Oct 2026 04:00:56 +0000
Manifest this update: Thu 15 Oct 2026 04:00:56 +0000
Manifest next update: Fri 16 Oct 2026 04:00:56 +0000
Files and hashes: 1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: F9jCGWSo0fbwFtQ0qSBvTKrm9ZhRthVj89MThC/HRS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:63:a7:92:d1:41:6e:7f:75:f2:b2:ef:02:45:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Validity
Not Before: Oct 15 04:00:56 2026 GMT
Not After : Oct 16 04:00:56 2026 GMT
Subject: CN=a82d61f1639040cdccc74fd5d1970416d6f9a81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:88:7b:9e:2d:25:99:06:b0:7a:e7:8d:d1:
80:c4:8c:8b:52:44:9d:2f:a8:7c:9d:a5:3c:c1:0b:
7d:21:0d:3f:15:16:1e:f2:f8:ec:32:2f:f8:6f:5f:
57:72:8d:87:91:33:47:9a:53:80:4e:93:9d:ad:80:
b1:41:e3:11:7f:a4:fb:e4:30:b0:9f:85:e2:5f:a6:
23:81:da:e9:e2:47:10:a4:84:66:46:f1:25:95:d4:
82:c2:1a:98:b1:1b:66:2b:f4:c7:43:ab:ec:8a:4c:
f9:2a:25:ad:d6:1c:74:1b:12:37:09:06:ed:00:46:
10:a5:9d:cf:e8:03:9a:20:c2:91:19:18:48:e5:90:
da:35:04:b8:08:b7:68:eb:45:c0:39:31:53:1e:21:
a6:b4:9f:7b:8a:0e:d3:56:f6:c7:ed:45:23:be:60:
c5:90:ba:b2:63:70:ec:57:f4:7a:ff:ba:df:89:a7:
05:ab:e1:2a:8b:8a:ae:2e:aa:c9:ad:69:0c:7e:06:
3d:41:d1:fa:ac:a2:8e:ae:2c:06:0b:8f:c5:27:57:
f1:fc:34:4b:bf:a5:78:e0:95:79:5f:dd:99:dd:7b:
a1:0b:78:48:fd:d3:ab:06:ae:38:fb:58:27:5f:6b:
59:fd:13:91:99:c7:bf:c1:5e:e5:50:48:bc:04:80:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2D:61:F1:63:90:40:CD:CC:C7:4F:D5:D1:97:04:16:D6:F9:A8:1E
X509v3 Authority Key Identifier:
keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b3:f7:a5:1d:7e:d7:36:f4:5e:78:b9:89:79:54:d7:9d:db:
27:a3:33:a5:09:89:05:06:9c:72:a8:ff:74:f2:1e:2d:b6:0a:
89:34:e8:d7:cb:2c:ac:e2:1d:bf:59:cd:42:18:ae:d7:d0:7f:
f6:03:24:50:51:92:30:de:6a:9f:53:f9:ec:3d:d4:10:a8:aa:
96:03:ff:e2:e6:c5:ce:5e:42:87:38:dd:8b:b8:c5:d1:a8:83:
c1:23:90:33:68:cb:bb:8d:0a:6e:b0:04:bc:bd:26:22:da:18:
75:54:e6:93:a7:f2:4c:c1:b1:14:93:94:02:ea:08:f3:99:73:
c6:a7:06:86:5c:aa:2d:a9:a9:f6:4f:3b:4a:84:d8:0b:7b:65:
1d:62:b4:77:a6:fc:6d:2f:87:f2:fb:dd:d3:b2:99:a6:56:50:
ea:28:cf:44:88:08:5d:39:b8:30:d2:7a:2a:7a:43:04:fb:ec:
0d:b8:f7:f8:3c:37:bf:ff:23:83:a4:8c:34:4d:5a:05:1d:2d:
49:ba:19:ec:7e:9b:94:b8:72:59:d4:2c:56:5c:5b:f5:b7:c4:
b7:3b:f4:ad:e3:47:72:37:b1:0b:7f:cf:2f:8e:57:95:50:25:
78:38:89:fc:c3:6b:8a:1a:7b:7b:93:e2:74:d7:01:26:42:51:
b4:2d:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:24 2026 by rpki-client