Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier: Suqy/VmlMvdwKarRcj5pRlN8x43o9o1s7UWOb+wTSEs=
Subject key identifier: 0E:97:51:C9:7C:E7:CD:63:E4:EE:06:03:B3:35:38:D1:2D:53:B7:EF
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 019D9AE33D62AC0B4980D9B7278F37F6B5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number: 0CD9
Signing time: Fri 17 Apr 2026 10:01:16 +0000
Manifest this update: Fri 17 Apr 2026 10:01:16 +0000
Manifest next update: Sat 18 Apr 2026 10:01:16 +0000
Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: Wni+WccgVzDQLSctPbVCXKevbu6ILM6YvpVwygyvCX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:3d:62:ac:0b:49:80:d9:b7:27:8f:37:f6:b5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: Apr 17 10:01:16 2026 GMT
Not After : Apr 18 10:01:16 2026 GMT
Subject: CN=0e9751c97ce7cd63e4ee0603b33538d12d53b7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:cc:a0:7b:79:af:47:d6:6b:eb:f1:07:e4:
e0:7e:be:2d:2c:0c:c6:0b:f4:35:6b:2d:ee:f3:50:
8f:2e:17:c7:37:98:be:f3:1d:52:9f:03:d8:ca:cd:
b1:89:19:35:e6:ae:ec:00:57:47:a5:c3:52:19:8b:
5d:71:54:58:03:72:1b:9b:e7:ce:b9:b6:d2:94:41:
44:5e:50:7d:4b:3c:75:e8:c9:62:4b:d8:cb:be:84:
bf:44:b8:58:23:db:4e:c2:d6:2c:61:91:5c:13:f7:
8e:21:5b:b1:31:63:bd:4c:22:db:d3:78:ec:a9:38:
c3:69:86:10:57:f0:3c:34:3a:68:dc:79:44:46:c4:
ae:4a:ac:da:08:8a:9c:5d:28:4b:53:e1:16:85:a9:
0c:af:af:46:81:a2:0f:6d:e2:e8:b0:21:bc:03:23:
f1:e5:14:c2:f5:a4:89:7c:c4:c2:f8:e4:63:99:5c:
13:ba:7d:89:ea:f8:bd:13:0f:7a:51:a9:e1:f3:3f:
06:d1:b7:35:a5:e9:53:d4:ea:5e:fe:4d:e1:14:ca:
9c:5f:2d:6e:11:40:2d:0c:9b:2e:a1:a6:bb:63:69:
61:0f:bb:5a:38:75:dc:05:13:8f:25:1e:7a:d7:02:
89:c8:da:f7:36:9e:62:69:c2:7f:a1:f7:30:f6:a1:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:97:51:C9:7C:E7:CD:63:E4:EE:06:03:B3:35:38:D1:2D:53:B7:EF
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:08:88:b4:f0:33:b9:94:db:44:26:f6:78:2e:96:69:2a:fe:
eb:2f:d8:01:28:37:4d:b0:6a:38:6a:ae:69:8a:9d:55:3c:a8:
06:ae:97:94:7c:84:c7:6b:11:f9:1d:b4:d7:46:1a:77:51:eb:
99:cc:2c:46:75:26:1a:81:e4:06:55:8d:28:0d:cd:5f:c7:2f:
4e:aa:e1:16:ff:38:f8:f0:6e:db:3f:2c:87:47:00:7e:2f:eb:
90:3b:63:72:22:61:71:2e:42:ff:9b:6c:06:23:43:66:18:a5:
9d:51:6a:83:8a:ed:e4:c4:8e:20:7e:1c:69:11:5e:a5:35:00:
ec:8a:84:4f:e5:2b:8a:56:22:73:08:53:25:0a:a5:18:68:40:
c0:88:9a:21:9d:02:58:a6:1a:64:ee:35:f3:4d:84:ac:b0:5b:
f5:88:07:d8:5f:e1:0a:e8:d3:a9:e2:d2:85:a4:71:04:3f:30:
d2:1f:6c:b1:ae:73:9f:20:41:d6:d6:f9:44:ff:6b:a0:c7:33:
bb:42:94:6e:05:07:19:45:e4:b6:51:b0:a4:96:73:94:78:cc:
61:da:b6:1d:89:cf:4b:5d:e6:2f:75:d1:27:8c:c9:42:b3:37:
f7:a0:d9:42:02:f3:d5:8f:a6:ec:18:9f:d8:86:6c:c0:c4:1f:
bd:2a:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:56 2026 by rpki-client