Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
File: 6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json)
Hash identifier: qcF/+kg+BChw0CpXmcZmNTcq6UWoV+EtXeD1QXYM7h0=
Subject key identifier: DF:87:3D:74:08:0B:5B:41:8C:83:56:DC:E2:F0:34:39:12:45:5D:27
Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
Certificate issuer: /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Certificate serial: 01A0C09E7EC5E1793C3B47D87BD555CE7C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
Manifest number: 1A60
Signing time: Sun 20 Sep 2026 21:00:07 +0000
Manifest this update: Sun 20 Sep 2026 21:00:07 +0000
Manifest next update: Mon 21 Sep 2026 21:00:07 +0000
Files and hashes: 1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: fknGR+djV9lyKz+2sXuZ4gu973ntWJhFhBts/2O9B/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9e:7e:c5:e1:79:3c:3b:47:d8:7b:d5:55:ce:7c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Validity
Not Before: Sep 20 21:00:07 2026 GMT
Not After : Sep 21 21:00:07 2026 GMT
Subject: CN=df873d74080b5b418c8356dce2f0343912455d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:de:bb:8c:af:fb:92:ff:cb:29:03:fd:c0:
10:b1:13:d0:cd:f3:b7:29:99:9d:f7:d0:8a:6c:b7:
aa:fc:6d:49:30:c0:d8:68:36:72:f4:89:ab:9d:2e:
e5:54:b8:0f:40:20:02:67:e6:e8:ff:f0:0d:0a:63:
21:65:0d:39:5f:c1:66:5b:df:26:c6:a8:5e:4d:71:
e6:3d:78:b0:db:a2:f3:64:9a:d5:03:b1:9a:a3:44:
ae:07:4d:22:0a:c7:6a:20:5f:7d:09:be:28:eb:65:
c9:88:31:6f:c1:ea:96:8e:66:a3:91:32:3f:7e:0b:
57:03:7e:d2:fb:06:32:f5:c4:49:50:68:36:0d:e9:
bd:b0:5e:32:ed:43:e7:a6:d7:f1:93:9c:79:cd:52:
7b:af:5b:62:7d:14:a6:8a:40:7f:31:d9:58:ac:a9:
09:e3:3e:dd:ce:fe:62:25:ea:82:1c:62:84:e9:c4:
5e:a0:7a:5a:c5:01:00:29:20:43:4c:40:05:43:1c:
35:0d:08:0d:63:64:9d:99:c0:7d:9c:f9:65:43:bf:
78:19:9f:17:17:5c:c8:56:75:b7:c7:f6:33:bf:f8:
3d:0f:e7:8a:d7:84:87:a3:34:0d:dd:ab:fe:ee:82:
e4:e8:26:2e:96:d0:31:de:d0:73:f7:d4:a5:d2:b2:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:87:3D:74:08:0B:5B:41:8C:83:56:DC:E2:F0:34:39:12:45:5D:27
X509v3 Authority Key Identifier:
keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ed:33:7a:b5:24:54:00:6a:08:18:71:35:03:8b:0e:1e:ea:
11:0c:84:a5:8b:23:98:86:06:24:a5:8c:f8:7d:ce:cc:ad:d3:
fe:0b:c7:4e:2d:21:3b:06:c9:7c:83:f8:2e:34:e4:78:07:51:
8e:8d:26:06:1f:b2:9a:65:76:df:69:d3:d3:43:aa:01:22:d3:
fb:03:57:65:67:e0:bf:ba:7c:23:fa:f5:c5:04:91:48:c1:e8:
d6:4b:03:91:6f:0b:62:de:25:71:e5:4d:71:71:ad:df:e0:b8:
b8:69:a0:51:64:6b:e2:37:1f:d7:75:ed:ef:1e:4d:ef:8c:a2:
1c:54:19:40:74:e1:bd:a5:9c:f3:3a:9c:1b:2f:b9:b8:bd:93:
3a:1f:98:9b:1b:a4:df:b8:e4:5e:19:e0:c0:be:e2:0b:4d:32:
b8:87:20:67:e6:c8:dd:a9:9f:de:ca:59:b1:ac:44:8a:67:0b:
5f:1c:80:9c:32:46:18:d6:99:fe:d7:23:15:01:80:5a:10:23:
00:22:7a:58:a1:c9:aa:c0:4b:18:4e:1f:67:cd:2c:a4:b2:f9:
6b:44:c6:60:49:5d:d6:6a:e4:7f:4b:5c:79:0a:d6:fb:c5:55:
ef:67:a3:1a:58:76:ce:23:d1:20:c1:84:13:a0:b0:fb:7c:c5:
ec:16:bb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:30:46 2026 by rpki-client