Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: xaE4lklUXAM1OOrYbag/uYHxeJ1i6jzl3Sne9pKy6co=
Subject key identifier: 4E:D7:41:26:32:B0:B5:1B:10:68:74:CF:37:3C:BB:50:10:3F:DF:8F
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 019FAA1966B58F213ED3F2DB34E9A4E7A139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 10F0
Signing time: Tue 28 Jul 2026 19:00:19 +0000
Manifest this update: Tue 28 Jul 2026 19:00:19 +0000
Manifest next update: Wed 29 Jul 2026 19:00:19 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: BUr3hGiavupcLVDA0xhX9H+sQscn8H9h5HboP5vvqZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:66:b5:8f:21:3e:d3:f2:db:34:e9:a4:e7:a1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Jul 28 19:00:19 2026 GMT
Not After : Jul 29 19:00:19 2026 GMT
Subject: CN=4ed7412632b0b51b106874cf373cbb50103fdf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:e9:55:7a:56:d0:9b:8b:ef:3b:f0:65:d1:
08:14:48:2f:c1:62:57:c3:d0:54:b0:20:90:2b:5b:
81:d2:45:1c:fc:1f:5a:88:35:27:7d:61:bb:77:25:
cc:7a:bb:ff:b0:c0:f3:00:cf:a4:47:2f:43:86:44:
5c:3e:48:86:43:6e:0c:26:df:f7:89:ad:18:90:76:
e6:12:e7:09:ea:07:18:91:0b:f1:d1:3e:27:bf:53:
0b:80:30:3a:08:23:01:77:70:3f:e2:e8:80:31:d1:
ee:41:19:9d:df:5e:5c:4a:5f:09:73:77:e6:f9:f9:
0c:06:d0:18:54:36:3d:2f:9c:4f:2d:92:e5:4a:f0:
db:76:cc:74:9f:44:17:e1:8f:a3:59:83:28:ca:07:
2f:a0:3d:79:99:bf:02:8f:b2:3f:d1:9b:68:40:78:
7d:0f:4a:ac:07:b6:3a:ff:a5:ab:0e:3e:94:10:63:
87:6f:b7:5e:ee:2d:e3:3f:b5:4a:de:19:8b:4e:85:
42:b8:af:7d:e0:c0:fb:dc:0b:fd:38:80:ff:b0:19:
23:82:a4:c3:8c:64:1d:e8:6d:2c:b0:5a:0e:5b:54:
9f:cf:f5:09:e2:8e:ac:23:e6:cb:64:73:5c:bc:57:
db:cf:10:f3:98:32:33:a1:ef:9a:e6:19:28:c5:fb:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D7:41:26:32:B0:B5:1B:10:68:74:CF:37:3C:BB:50:10:3F:DF:8F
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3d:f2:7d:79:15:4f:5c:18:49:e1:f2:d8:23:31:82:22:84:
12:34:82:f0:c7:41:33:26:a2:5b:06:2d:d4:12:c4:13:03:31:
58:4c:4f:c8:53:bd:60:da:8d:fe:7e:a6:e6:ea:0a:fd:c9:9c:
25:4f:e2:41:f7:af:ef:fc:2d:41:20:d3:8c:fe:8b:14:de:c9:
f8:3a:f8:5b:61:eb:03:29:99:ce:15:0b:23:92:e7:94:cd:f0:
11:b5:8b:a1:58:82:18:cf:44:d0:67:ef:01:78:69:47:90:af:
cd:54:e5:11:25:2a:0e:af:e3:73:fa:cd:b4:fe:d1:8c:ce:54:
89:75:f4:96:53:f8:cd:4f:ca:dd:44:c4:3f:1a:a4:4a:82:f1:
a5:ec:c7:3b:80:7c:7f:ab:7a:d1:49:88:9a:f4:9b:e7:86:b4:
43:51:4d:64:78:18:5d:b2:64:a0:25:bb:51:0c:1d:32:61:8c:
ad:ed:de:17:f1:52:73:62:1a:1e:14:37:68:da:4d:d0:a6:3e:
a2:c1:92:e0:e7:0d:4e:d6:2e:2d:88:23:67:78:e4:96:c1:f5:
b5:45:47:2e:ff:e6:6f:80:87:b2:7d:e1:a5:d7:d9:59:ee:a1:
b2:26:65:8a:0e:ad:af:a1:9c:d0:e5:a4:4e:36:1a:6b:86:15:
04:a5:91:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:40 2026 by rpki-client