Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
File: 6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json)
Hash identifier: mJpqI/3C3bNgQUZu4CfSineC7i4fd2+hmCwpGj8Sem4=
Subject key identifier: 18:AC:48:9C:AD:AB:69:73:01:9E:7D:E3:FE:54:89:76:53:0E:0D:63
Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
Certificate issuer: /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Certificate serial: 019FA8995BC42B5CF45EA28D41F0999DC52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 12:00:50 +0000
Manifest this update: Tue 28 Jul 2026 12:00:50 +0000
Manifest next update: Wed 29 Jul 2026 12:00:50 +0000
Files and hashes: 1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: VeNXL3PWUanr9DhlkRnWpV5SeUD5NuMAlAlDoLPWDP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:5b:c4:2b:5c:f4:5e:a2:8d:41:f0:99:9d:c5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Validity
Not Before: Jul 28 12:00:50 2026 GMT
Not After : Jul 29 12:00:50 2026 GMT
Subject: CN=18ac489cadab6973019e7de3fe548976530e0d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:17:8a:37:e5:5c:6d:b9:aa:b9:8f:b5:91:
d4:ca:b1:30:9b:93:85:21:9c:a4:b8:1d:05:bb:8a:
7e:45:5f:dd:2b:79:92:1b:ad:f8:ee:09:3f:5a:4c:
bc:59:4d:ee:91:9e:4a:43:9d:29:e3:00:88:0f:4b:
59:9b:c6:77:df:95:68:c9:42:cc:a2:82:40:1c:bd:
9e:7b:45:ba:8c:e7:30:3a:66:2c:7f:68:95:44:f2:
99:d3:0c:90:f1:99:0c:bf:4d:34:8b:20:8b:2c:2e:
f5:9f:98:93:1e:e0:58:27:1b:00:34:5e:c3:4b:a8:
e6:5b:77:da:90:67:0b:61:98:9f:e9:51:85:be:1f:
02:7d:ba:99:85:28:00:1c:30:82:00:07:e5:4e:2a:
ab:98:0e:b7:f1:75:48:80:12:2a:85:cc:ca:22:7e:
f9:e2:1d:65:02:33:e3:1a:7b:3c:10:b4:4b:85:4a:
67:cb:3b:3d:75:fa:7b:93:a8:9a:5b:2b:19:d2:d8:
77:32:f3:b2:f1:99:fc:1c:cf:3d:e2:cb:a7:7d:8b:
dc:32:d5:b4:d3:27:67:75:85:fc:9b:e7:8b:d1:04:
45:37:b6:7d:a0:d7:e5:3a:cf:a2:33:81:7e:17:06:
e4:61:21:37:6e:46:cb:2e:f1:a7:d8:06:a4:c2:21:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AC:48:9C:AD:AB:69:73:01:9E:7D:E3:FE:54:89:76:53:0E:0D:63
X509v3 Authority Key Identifier:
keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:39:2a:2f:8e:48:b7:bd:48:94:56:c9:21:04:ea:c5:2a:
39:f9:32:cb:2f:9f:fa:c3:11:4c:a5:83:8e:53:c2:65:f3:98:
1d:6c:ef:13:93:e3:76:0e:0e:e1:d0:58:9f:bf:99:8f:3b:5e:
9e:4d:42:cf:58:98:6d:74:54:e1:f3:34:e5:c5:26:0b:da:d5:
77:52:c3:39:78:8f:5e:19:20:7f:f1:05:11:8d:52:f9:c5:f1:
dd:08:2d:30:cc:92:0f:6c:dd:0b:07:29:93:b4:c0:cc:89:01:
74:97:ac:7a:39:5c:1e:30:f3:4a:36:ea:2c:22:78:49:a8:ac:
6f:f8:7e:bd:17:60:0f:7b:d6:26:3b:35:17:3d:c2:14:f8:21:
8a:03:fa:7e:9c:57:20:82:05:15:2c:2e:f5:84:4a:14:75:77:
cf:f1:9c:49:b7:11:ed:81:79:4d:2e:91:b2:c8:07:1c:e2:d9:
86:9e:30:f1:4c:a6:5a:01:ea:37:26:90:0e:46:fa:c1:9c:ee:
50:46:ad:9f:d5:f7:d8:07:5d:89:77:84:79:a5:04:00:b8:a5:
27:ba:53:fa:af:4f:86:db:5f:fe:42:07:73:e4:64:e3:16:0d:
61:24:33:f1:6d:a3:86:48:f2:8d:a3:d3:d1:13:b6:f2:28:fc:
e0:37:c9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:15 2026 by rpki-client