Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: Aa9XbiOKbJBCz9ViqTesENSVJRYI40/PIAkI61w0lfE=
Subject key identifier: 2C:FD:C6:53:D9:37:28:AF:AC:9D:F4:6A:7C:FA:DF:13:FE:39:C0:03
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 019D98F4DD145C8086C4DE2A2DF7A445845A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 0FDE
Signing time: Fri 17 Apr 2026 01:01:17 +0000
Manifest this update: Fri 17 Apr 2026 01:01:17 +0000
Manifest next update: Sat 18 Apr 2026 01:01:17 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: UKIaOXU1QzRfcA0VTVrQV70hYO+ifHUdPlTgrMAYP0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:dd:14:5c:80:86:c4:de:2a:2d:f7:a4:45:84:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Apr 17 01:01:17 2026 GMT
Not After : Apr 18 01:01:17 2026 GMT
Subject: CN=2cfdc653d93728afac9df46a7cfadf13fe39c003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:48:12:f4:c0:cf:2d:b7:7f:f1:1a:1d:b0:
4d:cf:b3:69:f5:39:63:c8:ca:e4:b9:7e:74:45:3f:
9e:00:e8:b0:ba:3e:1a:ae:49:e2:83:7d:6e:d4:2c:
81:57:6c:e5:60:09:0b:13:ae:93:30:53:fd:dc:bc:
5b:b4:a3:be:2c:85:34:c4:2f:cf:22:26:e5:92:25:
b0:af:e4:8c:2f:7d:b6:ec:d4:6e:2c:42:54:03:97:
01:69:fa:39:f0:11:db:c7:27:5a:02:5f:4f:19:ef:
4b:ed:69:a5:10:a6:36:09:36:45:2a:d1:2a:29:3a:
d8:8c:4a:21:76:be:73:c4:09:7c:b0:d3:16:59:f3:
8c:ce:16:1a:7e:47:8d:46:da:76:69:4c:80:c8:22:
bf:1e:88:16:ad:e0:2f:bb:09:e6:95:80:22:2f:e7:
fb:a5:42:84:51:0f:35:85:d5:c0:9a:6c:9c:14:0d:
79:eb:25:ee:f2:61:9d:eb:ed:5a:d3:82:fa:48:20:
04:36:67:a4:fe:a8:39:79:6d:39:b6:06:44:79:ff:
ac:67:f6:e8:09:80:0a:a9:15:24:8f:0f:6e:26:e0:
5c:dd:ab:c5:91:c1:38:98:be:7a:43:ba:0e:9c:3a:
14:39:c0:8f:d5:1a:8b:b0:85:e9:dc:f4:4b:81:45:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FD:C6:53:D9:37:28:AF:AC:9D:F4:6A:7C:FA:DF:13:FE:39:C0:03
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e5:23:fe:ae:fe:ee:a4:87:96:c9:25:5e:3f:4b:54:33:7d:
ab:12:17:d3:78:85:1a:e1:15:17:4a:12:af:90:c3:35:4d:52:
c4:65:18:23:25:f9:b9:97:d1:0c:08:8b:43:fe:7a:77:4a:e4:
28:a0:93:e9:eb:b1:79:d2:db:7f:7f:07:7f:d8:1e:4a:95:1d:
0d:35:87:7e:e2:b3:e7:56:1f:6f:bd:28:1d:2b:57:9a:d8:30:
0e:6c:a5:6d:ab:e4:fd:81:c8:da:bc:66:5f:53:06:88:f7:84:
2e:8a:0d:24:26:12:5f:ff:aa:0d:1e:b9:21:1b:8e:39:5e:2c:
46:0e:3a:cf:06:24:24:4e:28:9b:07:fe:f6:11:ab:6f:61:d3:
5c:3c:5d:bc:e7:90:64:72:18:0a:e6:ae:17:ee:a1:a2:0d:32:
ce:2c:53:56:f0:6b:fb:21:1c:9d:b1:d1:61:95:c6:62:06:e0:
31:93:07:47:81:8f:a8:a8:5b:55:65:f5:71:a4:b7:44:47:db:
d7:4f:a6:b9:7b:2a:a7:96:e3:61:d3:a1:eb:9e:02:05:d6:14:
5d:53:ea:19:a1:51:67:b8:2e:db:ee:47:18:b2:13:2a:d2:2d:
05:c4:db:88:9f:7f:ba:84:03:07:63:ea:76:ad:d3:6c:5f:a8:
07:b9:2e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:18 2026 by rpki-client