Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: AUcoUitH4ZRggyPRVeyrX+tU7+8yb3WLPpnNm6GqW1U=
Subject key identifier: 1C:8C:86:58:F2:B0:F3:EE:9A:81:3A:B7:6D:A7:BB:88:DF:0E:AA:8B
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 019CA97D8562ED2BF2A83FD1CEC50BBAE8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 0F62
Signing time: Sun 01 Mar 2026 13:01:41 +0000
Manifest this update: Sun 01 Mar 2026 13:01:41 +0000
Manifest next update: Mon 02 Mar 2026 13:01:41 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: VDEt/aejZs7nX2JtUVRBMKtVVk6Y3fcygvkZcUUrR9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:85:62:ed:2b:f2:a8:3f:d1:ce:c5:0b:ba:e8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Mar 1 13:01:41 2026 GMT
Not After : Mar 2 13:01:41 2026 GMT
Subject: CN=1c8c8658f2b0f3ee9a813ab76da7bb88df0eaa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cb:68:54:f7:ea:e4:31:b7:e2:72:de:cb:8f:
35:ac:cd:54:33:1b:56:d6:8d:64:92:53:1b:ee:7f:
3c:2e:68:4b:3a:d0:86:29:9e:ce:f5:b6:db:29:d3:
11:e8:9d:1c:d5:46:62:21:8b:68:cc:ea:2d:15:08:
89:96:8f:c6:90:28:da:9e:14:ac:dd:d1:22:43:c7:
45:5d:87:3f:34:d6:ad:89:77:25:3c:c5:ca:b4:90:
2d:13:4f:e9:89:1e:ff:1f:57:53:0f:3a:72:ef:26:
a0:25:ce:6f:0f:ea:78:0c:e7:b2:9a:2f:ea:1f:cf:
54:81:09:c6:c7:46:44:b3:ff:57:2f:40:e9:3e:03:
67:e9:1f:62:9a:9d:63:43:32:c3:42:7f:1c:81:86:
29:1b:31:32:ab:33:38:b9:b3:eb:ff:45:01:83:86:
6d:51:ae:bd:03:11:08:33:01:15:b5:0d:8d:da:cf:
98:3f:2a:b4:38:15:e1:25:db:5d:ee:04:9f:e2:85:
00:61:73:2e:a0:0a:5d:1d:5e:df:2a:84:17:22:19:
0b:70:3c:0c:f0:64:67:81:cb:0b:f2:51:bf:dc:7e:
5e:cf:14:1c:5c:dd:ab:52:42:5f:08:2e:73:4a:e0:
78:92:6a:40:4b:2b:25:b0:ec:6c:8c:11:ab:49:4b:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8C:86:58:F2:B0:F3:EE:9A:81:3A:B7:6D:A7:BB:88:DF:0E:AA:8B
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7d:1c:27:1a:18:7c:00:44:eb:6c:54:d0:85:05:dd:cd:a2:
5f:5c:0f:16:cb:53:e9:c4:fe:7b:92:09:ed:4e:79:c3:74:bf:
87:27:fd:65:43:f9:08:09:a0:9f:f5:55:59:53:3d:5f:2b:4d:
97:bc:34:6d:e3:4e:3e:61:0e:78:b2:c5:3f:fb:e3:74:e0:ea:
00:98:a7:b1:9d:9c:65:b3:d5:45:dc:59:76:7b:ff:98:a7:20:
c1:d0:e0:b9:ff:15:85:be:63:6b:7a:61:f1:30:c1:26:ff:83:
03:7d:66:94:5d:1b:24:d9:7a:c1:a6:af:00:1e:f0:8a:33:1d:
bc:5f:e0:68:c1:2e:8a:18:97:ea:08:11:dd:b0:aa:10:e8:87:
81:6d:b8:e0:73:ce:0a:b1:c9:6b:9e:55:6d:96:86:92:a0:77:
2c:7d:cc:ee:7c:d2:e5:fb:6e:77:7d:eb:ef:b8:34:19:46:62:
b0:51:2d:dc:1d:c0:2c:9f:11:e4:5e:01:37:c5:51:ed:f4:4d:
d2:27:46:39:02:5d:e5:a7:58:ec:ab:71:47:fd:6a:1d:2d:37:
39:45:e0:07:7e:51:3b:a8:a4:19:d9:35:f7:4a:4d:ec:d7:69:
53:f4:21:62:3f:d2:d1:3b:e2:f2:e0:70:b9:e5:e9:9a:29:81:
8d:60:a7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:27 2026 by rpki-client