Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: wqgYZQbzb269AZZYyByYlOggWmEd+23frwwkzgqN+e8=
Subject key identifier: DC:0C:0C:7A:6E:23:8E:45:DE:2B:37:2B:4A:D4:A6:D9:B4:EC:28:70
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 01A0C40E9AAD69CDA30D00007E36C1D5D70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 1182
Signing time: Mon 21 Sep 2026 13:01:26 +0000
Manifest this update: Mon 21 Sep 2026 13:01:26 +0000
Manifest next update: Tue 22 Sep 2026 13:01:26 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: CyOrx5OSdzXTLvbsfjv3yC5Ddod6aEERh9VMRstD3Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:9a:ad:69:cd:a3:0d:00:00:7e:36:c1:d5:d7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Sep 21 13:01:26 2026 GMT
Not After : Sep 22 13:01:26 2026 GMT
Subject: CN=dc0c0c7a6e238e45de2b372b4ad4a6d9b4ec2870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:d5:ad:c2:ff:ce:db:f7:ea:50:50:05:11:
00:00:b4:20:c5:c6:86:35:f3:02:ec:8d:35:cb:ca:
d4:71:53:d9:9e:78:e9:01:9b:aa:a2:94:e7:36:6e:
63:8b:8c:f8:0e:3f:53:2d:5f:36:56:ad:66:34:c1:
ed:7a:59:99:03:bd:29:52:43:24:6c:ad:d4:c2:b0:
f2:5c:f0:54:bb:66:cf:89:4e:51:86:b7:03:27:64:
18:f4:b7:f8:ba:c4:82:4d:21:2b:19:6e:85:b6:ee:
e3:5d:91:35:a5:ef:33:76:df:d3:46:36:a5:2a:e9:
3a:83:36:ed:99:70:1d:b1:b4:47:b1:db:16:f0:a8:
85:21:3b:7d:a8:d1:0f:11:ae:70:57:62:e9:b2:63:
6d:7a:d1:af:64:22:fa:60:a8:c5:d1:4b:48:08:59:
89:f7:4d:b4:15:ca:4c:19:fc:3b:05:83:ee:75:e3:
a8:bc:d9:10:9e:b0:4e:21:49:bf:96:90:af:2f:42:
1e:3a:38:3c:82:b6:22:2e:95:07:09:06:37:ce:ce:
c5:c9:32:4b:28:1c:57:88:ca:4c:14:5e:60:20:44:
87:7e:1a:ba:23:98:33:ba:81:dc:ec:4e:d9:78:67:
8a:d2:4a:7b:e8:0e:eb:29:9e:2e:8d:ec:fb:6e:43:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0C:0C:7A:6E:23:8E:45:DE:2B:37:2B:4A:D4:A6:D9:B4:EC:28:70
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ea:f1:70:0a:2c:a4:ff:a2:15:5b:a2:6f:26:77:2e:d8:e3:
db:af:6b:93:09:85:0b:bc:ef:26:f3:88:e3:42:c8:b9:42:0a:
2f:59:91:e3:df:08:1d:65:30:9e:e5:0c:f6:a3:83:2e:47:89:
e5:49:da:05:c4:07:4e:30:88:d2:08:e0:4c:fd:f9:3e:91:51:
f5:78:cd:85:b2:af:51:46:cd:87:7b:2e:ec:d4:5c:fe:92:2c:
1d:34:3e:af:a5:71:e7:2e:76:f0:52:a2:22:00:2c:30:f5:11:
e3:af:c4:b1:b6:1d:90:4d:f3:14:43:b2:94:fc:6f:26:7f:07:
f2:e5:d2:47:44:b3:bd:78:80:76:17:0b:cf:75:0b:91:04:5a:
f8:d9:49:87:1e:d6:18:78:90:df:e6:a2:fa:dc:44:bf:dd:cf:
94:d1:a4:72:07:42:2d:cc:e3:21:f7:13:46:53:0e:ea:95:de:
b0:25:ae:fb:85:d7:a3:42:40:aa:8b:b6:4f:8d:38:5e:aa:9d:
27:9b:d1:20:75:42:e7:04:b4:72:85:cf:b1:6c:06:2f:67:03:
90:47:a6:3f:ff:b7:57:4e:b6:b0:86:c4:6d:81:6a:39:14:b9:
43:ac:37:10:dc:2b:87:87:c0:b3:26:ea:5c:cc:b2:b4:8f:fb:
cb:a2:6a:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDpqtac2jDQAAfjbB1dcPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMDFjYWZmODkzNTQ2OTEwYTI1ZmJjY2ViODYyMzU1Zjdh
MzcyNjAwHhcNMjYwOTIxMTMwMTI2WhcNMjYwOTIyMTMwMTI2WjAzMTEwLwYDVQQD
EyhkYzBjMGM3YTZlMjM4ZTQ1ZGUyYjM3MmI0YWQ0YTZkOWI0ZWMyODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltnVrcL/ztv36lBQBREAALQgxcaG
NfMC7I01y8rUcVPZnnjpAZuqopTnNm5ji4z4Dj9TLV82Vq1mNMHtelmZA70pUkMk
bK3UwrDyXPBUu2bPiU5RhrcDJ2QY9Lf4usSCTSErGW6Ftu7jXZE1pe8zdt/TRjal
Kuk6gzbtmXAdsbRHsdsW8KiFITt9qNEPEa5wV2LpsmNtetGvZCL6YKjF0UtICFmJ
9020FcpMGfw7BYPudeOovNkQnrBOIUm/lpCvL0IeOjg8grYiLpUHCQY3zs7FyTJL
KBxXiMpMFF5gIESHfhq6I5gzuoHc7E7ZeGeK0kp76A7rKZ4ujez7bkO3/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwMDHpuI45F3is3K0rUptm07ChwMB8GA1UdIwQY
MBaAFOoByv+JNUaRCiX7zOuGI1X3o3JgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYt
MmU5ZWRhMTk5YTc4LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYtMmU5ZWRhMTk5YTc4
LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkurxcAos
pP+iFVuibyZ3Ltjj269rkwmFC7zvJvOI40LIuUIKL1mR498IHWUwnuUM9qODLkeJ
5UnaBcQHTjCI0gjgTP35PpFR9XjNhbKvUUbNh3su7NRc/pIsHTQ+r6Vx5y528FKi
IgAsMPUR46/EsbYdkE3zFEOylPxvJn8H8uXSR0SzvXiAdhcLz3ULkQRa+NlJhx7W
GHiQ3+ai+txEv93PlNGkcgdCLczjIfcTRlMO6pXesCWu+4XXo0JAqou2T404Xqqd
J5vRIHVC5wS0coXPsWwGL2cDkEemP/+3V062sIbEbYFqORS5Q6w3ENwrh4fAsybq
XMyytI/7y6JqHQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:58:34 2026 by rpki-client