Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: ymorfMTN9/VUhuROxwnyyssuaeqH1mezcGGJl4ap4Vw=
Subject key identifier: 83:0A:C2:97:6A:B1:38:E6:BD:7F:DA:7B:1D:04:91:82:27:E7:BC:FA
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 019D99D0617E3317F86DA356260D941FA1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 05:01:03 +0000
Manifest this update: Fri 17 Apr 2026 05:01:03 +0000
Manifest next update: Sat 18 Apr 2026 05:01:03 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: 1crMSteE44lRYw4VxNlkcWiaX0F18R1ST2IuCFpZ3iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:61:7e:33:17:f8:6d:a3:56:26:0d:94:1f:a1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Apr 17 05:01:03 2026 GMT
Not After : Apr 18 05:01:03 2026 GMT
Subject: CN=830ac2976ab138e6bd7fda7b1d04918227e7bcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:b0:c5:05:36:ae:66:81:44:72:45:bb:4b:
99:82:45:bb:e2:06:4b:92:67:b7:df:65:a2:3a:b4:
cd:e4:00:60:38:dd:a1:b2:73:ad:49:17:8e:19:d7:
67:7d:3b:8d:3e:a2:cd:6d:66:ad:b0:d0:fc:b0:46:
4d:64:a7:0c:64:f6:4a:53:72:7d:bd:27:6e:a3:d4:
10:6a:7a:2d:e0:76:97:0f:6d:74:cb:7f:97:bd:8f:
e4:f5:fe:e0:d8:b8:99:fd:fa:00:0b:a4:00:8a:75:
8c:68:06:d3:4c:6c:e2:f7:c8:e0:5b:f0:20:1e:c7:
95:8d:03:e6:d3:b8:db:8f:a0:87:3c:1d:01:38:2e:
f4:d1:90:35:7e:c9:b4:c7:1f:24:71:79:c8:e8:ee:
15:28:18:27:ba:4f:ef:96:69:6f:10:9a:ee:6b:e4:
06:a8:3f:51:c1:04:66:f3:ac:e4:fe:2b:37:f6:d1:
65:17:22:b0:c9:90:bc:4b:58:2a:98:92:07:94:3a:
21:54:c7:3c:1d:20:9b:d1:6b:83:c4:56:73:c2:97:
d1:7f:f1:79:ee:79:3c:9e:c0:3c:21:7d:ec:34:69:
af:f9:da:95:75:4a:df:3c:24:83:26:1a:3b:33:6b:
a9:e0:fc:2e:55:47:d5:e6:37:bd:dc:6c:63:a9:3a:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0A:C2:97:6A:B1:38:E6:BD:7F:DA:7B:1D:04:91:82:27:E7:BC:FA
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7d:a2:3a:09:3d:26:f6:46:34:af:c8:d7:af:6a:7e:48:7e:
0c:61:c6:b3:fa:d7:12:b0:6c:49:00:84:75:cc:57:5b:bc:11:
ec:da:31:c6:35:c1:b9:a2:64:05:a6:a2:aa:33:2f:1f:ac:03:
7f:46:2b:e2:d6:d9:57:23:55:d0:4d:84:9a:18:6b:e0:fe:80:
e7:36:80:83:7c:64:64:8e:8d:f3:a7:94:df:ce:0b:f6:30:bf:
b2:c3:a7:54:39:c3:92:4c:76:92:b1:91:f9:d2:35:a4:a0:61:
7c:fd:44:15:55:e5:a9:ca:c6:a5:fa:5a:a0:3e:0e:ad:67:52:
32:22:ad:02:6c:f3:51:26:5a:25:02:95:53:60:d2:ac:77:7d:
af:13:df:37:e9:3b:88:b6:83:ad:9d:f3:af:33:05:03:2a:8e:
a9:09:d4:89:63:b0:f2:9a:b9:7e:5f:bb:11:0f:1b:c4:06:a9:
75:29:1c:ab:6e:2c:33:1a:be:4e:e7:2e:42:d0:66:bc:96:85:
6a:38:5d:81:bb:d8:92:77:2d:96:8b:e4:b1:ef:68:a7:2e:48:
40:ed:b6:a2:b3:54:d9:56:08:ac:34:7e:41:79:ac:68:aa:4e:
f8:d1:71:5c:ba:15:75:67:95:83:a6:de:e1:c1:09:52:6a:e5:
39:03:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:47 2026 by rpki-client