
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: +2jkSurWLPMrd4u7W7dXmSF4hGUn961W5nUq1j9Tdlw=
Subject key identifier: 0E:0C:B5:A4:17:BC:E0:11:19:6E:0B:84:7D:7D:EA:A6:C7:CB:AD:BA
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 01A0CAB46C4CEA7FC3F14BD9F9FD742F11E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 1A65
Signing time: Tue 22 Sep 2026 20:00:16 +0000
Manifest this update: Tue 22 Sep 2026 20:00:16 +0000
Manifest next update: Wed 23 Sep 2026 20:00:16 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: 5Q2Hb0Vp9DJbka+dy66VPLX9BmuMlzX0MKTLucdQhx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:6c:4c:ea:7f:c3:f1:4b:d9:f9:fd:74:2f:11:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Sep 22 20:00:16 2026 GMT
Not After : Sep 23 20:00:16 2026 GMT
Subject: CN=0e0cb5a417bce011196e0b847d7deaa6c7cbadba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:8d:bb:85:77:47:e2:ef:ab:8e:7f:93:25:
f3:79:15:55:45:1c:40:e2:a9:16:42:a2:2c:ab:2d:
f7:74:53:59:3e:88:a7:26:df:7b:e2:4a:7c:f1:e5:
b9:a7:95:52:47:93:d3:7b:09:af:dc:e6:0f:f9:23:
c1:22:18:db:b8:d7:f5:4e:b8:21:a5:7e:1e:e2:2c:
e7:81:44:a8:9f:52:29:d7:74:d4:25:0e:28:3c:f0:
b2:53:50:e2:54:8b:32:f2:24:d1:50:bf:91:c3:b1:
12:e1:a0:65:db:98:0f:36:99:61:c0:38:c6:8c:48:
0b:ad:43:e3:5e:d2:d4:08:dc:01:0f:c9:84:33:34:
cc:ad:b8:71:85:90:66:a6:94:90:6c:2e:5d:3b:e7:
67:8b:20:af:7a:18:92:82:4f:28:78:fd:cb:a2:a4:
a1:0a:48:d6:f4:03:1b:e9:3b:7d:c5:a0:8b:5a:02:
ad:9a:81:58:c4:db:b5:51:c3:37:e1:b9:1b:7e:42:
1b:ca:05:bb:fc:a2:43:f5:7c:64:6e:1f:28:16:71:
6b:3f:e8:b1:0a:3a:34:b8:99:57:a8:4e:2e:14:08:
ad:97:05:5b:7e:2d:c8:64:c8:82:aa:53:a5:5f:93:
8a:e0:23:43:30:a6:fc:90:27:0f:c0:21:5d:96:23:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0C:B5:A4:17:BC:E0:11:19:6E:0B:84:7D:7D:EA:A6:C7:CB:AD:BA
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d9:90:84:8b:dd:7b:54:e3:9c:92:c7:a7:13:92:f2:51:ab:
71:00:0d:9c:13:f7:d6:dd:16:6a:2f:80:2e:1c:76:0e:ed:6d:
d0:27:a9:dc:df:b6:37:06:49:ea:95:1c:a4:e0:f0:d1:9b:de:
5e:3d:ac:91:60:03:a6:7f:8b:08:3f:3d:a2:df:9c:bb:ed:ed:
10:57:6a:6a:c0:b5:8d:b2:68:0f:36:ed:a8:dd:28:a7:4d:64:
7c:16:fc:89:7e:71:d6:c3:6a:c3:1f:4e:68:73:b6:78:04:76:
d6:f1:0f:bb:8a:73:01:c3:f8:4a:19:61:9f:86:cc:86:18:0e:
00:3d:ac:3b:9a:96:0d:24:b7:7c:66:d5:93:7f:5a:72:fa:1b:
af:21:24:60:16:22:52:a8:df:d5:8d:5c:42:72:c5:80:8d:bf:
99:b7:0b:74:13:2a:90:a0:08:56:88:31:2d:24:57:b4:c0:2c:
e8:7c:41:0e:11:40:aa:48:2b:f7:57:0a:11:a5:89:b2:88:bf:
69:3b:7d:5d:d8:ff:37:31:af:bd:4d:5d:e3:28:42:6d:99:f9:
cc:93:da:95:51:f8:03:c8:69:d2:a1:f9:49:51:f8:37:c4:80:
61:68:68:71:46:1d:0f:60:e7:78:1e:ee:a7:d2:91:48:eb:26:
67:0b:47:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:38:33 2026 by rpki-client