
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier: nTg5V9CoaAaDfVCjSUpGTHYuoekNfbilq9a06jGCXzk=
Subject key identifier: 73:F4:B8:7F:74:C6:9B:88:0E:C1:E8:2D:82:04:2D:2D:84:D2:33:0B
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer: /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial: 01A0C40E5801B3BD93BBF0E051667C3659A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 13:01:09 +0000
Manifest this update: Mon 21 Sep 2026 13:01:09 +0000
Manifest next update: Tue 22 Sep 2026 13:01:09 +0000
Files and hashes: 1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: cGGR2CFdwdQgYqKPmTDwIkXGotzK2I+/K1mZ1oTlWbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:58:01:b3:bd:93:bb:f0:e0:51:66:7c:36:59:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Validity
Not Before: Sep 21 13:01:09 2026 GMT
Not After : Sep 22 13:01:09 2026 GMT
Subject: CN=73f4b87f74c69b880ec1e82d82042d2d84d2330b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:41:56:1c:5c:f9:f4:85:d4:c4:39:84:0f:
28:a0:ea:6a:e6:6b:39:5b:82:67:9f:85:f5:30:cf:
ee:4f:cf:93:4d:35:f1:da:89:42:41:ad:4c:77:03:
9e:12:eb:a1:30:73:d1:81:84:d8:e6:c0:e9:4b:96:
d7:87:e6:28:25:d9:31:95:1e:57:c0:3d:87:9e:28:
0b:ca:2f:0c:f2:02:32:60:24:26:5b:09:8d:36:a6:
ae:d9:50:a9:41:36:35:e5:88:a6:af:c7:7d:b0:15:
f8:72:9a:96:13:52:a8:6d:ea:1b:37:64:62:9b:a5:
5f:50:b8:e6:c5:7e:bf:97:7e:a4:2e:f1:18:4e:2f:
d1:54:75:bc:c6:ea:1a:d7:e0:fa:8f:74:9b:b3:84:
65:9e:5f:04:02:86:56:43:66:80:19:1f:81:51:8e:
9f:30:32:07:d5:18:85:80:7c:96:29:01:66:6e:5b:
88:c9:4e:c7:01:cc:0e:14:b7:b1:ea:82:c5:8d:5b:
14:18:27:54:c0:3b:b2:3b:4f:90:cb:59:7d:90:e3:
74:fa:e6:04:b3:fa:cf:4e:7c:42:ac:68:05:c5:68:
47:66:f5:5f:e9:64:c9:78:88:b3:3d:0d:9c:7d:d2:
5c:1b:35:ac:07:81:c2:db:82:1d:ef:a9:cf:16:cf:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F4:B8:7F:74:C6:9B:88:0E:C1:E8:2D:82:04:2D:2D:84:D2:33:0B
X509v3 Authority Key Identifier:
keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5c:11:45:b3:a0:bd:77:17:06:5d:7a:fe:37:a0:8e:bc:f7:
dc:ca:bf:23:85:8d:4a:75:ab:52:e6:bb:f4:ad:88:e1:b1:1f:
ad:28:78:39:17:6f:47:1f:23:32:01:0e:bf:42:8d:98:c3:2f:
c8:c9:e9:77:22:cf:1a:14:24:db:da:03:a1:79:98:f0:d9:3d:
ca:06:e7:0c:ba:30:93:4f:c0:92:f9:9f:c5:b9:b1:ce:44:89:
0b:2e:63:74:f5:a2:53:d1:bc:c0:60:a1:33:5c:8d:c3:b7:74:
d4:af:ee:ed:13:58:75:f9:3f:fd:5b:13:19:8c:03:6a:57:21:
40:e8:84:45:0f:a9:b6:68:c3:c3:b9:9f:e6:df:95:6f:a9:85:
84:ff:98:bd:49:eb:05:ee:65:c0:88:af:b6:87:10:1e:72:ad:
62:d6:85:35:6d:43:be:2b:bd:67:3c:fa:87:15:77:8b:3c:b6:
be:03:59:29:b1:b5:70:5a:50:e3:9c:d7:5f:57:e1:9e:b9:2f:
46:5e:12:ee:d5:52:cb:a3:a9:b1:de:87:28:55:1c:49:dd:b7:
b1:ee:e1:36:42:7f:95:70:ff:40:75:c9:4d:33:3f:fa:0c:8e:
6a:23:2a:2e:09:e3:9c:28:6d:2d:78:41:80:ad:47:6e:01:33:
09:26:ed:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:03:02 2026 by rpki-client