Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File: 6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier: NQCjOcHnHdPX3riIvRe0yw312XSMaZ5CV8KrudaeVIk=
Subject key identifier: 81:9A:3B:61:CD:A8:74:9D:50:47:76:C7:72:EF:6F:12:DB:15:7F:F5
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer: /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial: 019FAABEC7E3C25C5CE92AF103BFB0E2E972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number: 150F
Signing time: Tue 28 Jul 2026 22:00:57 +0000
Manifest this update: Tue 28 Jul 2026 22:00:57 +0000
Manifest next update: Wed 29 Jul 2026 22:00:57 +0000
Files and hashes: 1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: vJ++oBx98tTAYRzk/77tJJYWWR7k2oaQvCgoQzSQR3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:c7:e3:c2:5c:5c:e9:2a:f1:03:bf:b0:e2:e9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Validity
Not Before: Jul 28 22:00:57 2026 GMT
Not After : Jul 29 22:00:57 2026 GMT
Subject: CN=819a3b61cda8749d504776c772ef6f12db157ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:bc:06:aa:3b:f8:0d:55:4a:24:6f:f0:8c:
72:b0:d2:c5:79:57:61:3a:ab:e2:7d:d7:9a:bb:fd:
1f:99:0f:f2:5b:16:23:7c:35:49:a0:29:9a:05:ce:
a4:ff:bc:37:86:79:17:a0:b9:4d:db:b9:68:d6:0e:
35:14:9d:b3:45:89:d9:b2:55:8b:6a:29:0d:68:f0:
f2:36:0e:65:fe:f3:94:39:28:f5:47:1e:ed:b0:7f:
2e:3e:cb:c0:05:18:95:74:cf:03:7c:21:f3:86:9c:
19:a9:f3:06:3b:15:b3:1e:fe:a5:a4:76:71:7b:54:
a1:8e:8c:33:16:c2:8a:b6:8e:b4:8d:ff:b6:b2:86:
f2:80:5f:98:dd:b3:89:74:41:b8:e0:dc:dc:aa:6f:
33:b9:03:52:4a:1f:f1:54:98:55:1d:93:1a:18:7a:
e5:8c:b5:32:39:6c:16:c2:08:b9:84:7a:c8:0d:49:
80:a2:fa:0b:56:7d:0e:7e:4a:df:1c:37:5f:a2:77:
a3:16:e9:46:a9:84:d2:22:63:79:71:f6:c6:c5:da:
f6:7e:00:2c:68:ea:be:fc:76:cb:bc:9a:5c:89:d1:
52:9c:3a:90:0b:28:66:d6:73:de:97:93:4f:80:ac:
aa:61:8b:99:c3:6f:20:3f:10:13:82:ad:00:83:47:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9A:3B:61:CD:A8:74:9D:50:47:76:C7:72:EF:6F:12:DB:15:7F:F5
X509v3 Authority Key Identifier:
keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:42:8e:11:d0:e6:ec:a8:5c:e4:9b:f1:7a:4a:49:25:63:b6:
57:48:76:50:4e:84:0b:66:7c:fa:42:4d:a0:ef:66:95:51:43:
39:02:02:77:8e:26:f3:53:cb:aa:0d:75:b2:48:ff:09:8d:1e:
82:77:00:19:e2:c2:7b:63:7a:57:83:b0:11:0b:63:55:f6:ac:
da:73:47:b2:69:45:a1:10:1f:c2:29:2c:c1:da:20:5b:bf:26:
46:79:a0:9f:5b:f2:97:83:d7:4a:f4:3f:21:3b:ac:e7:7d:4d:
48:79:ff:b2:8b:41:ae:13:b0:59:6a:2b:7e:ec:68:29:e6:39:
ed:35:73:dd:14:16:fc:4b:cd:92:57:8d:13:86:07:4d:3c:eb:
de:7f:17:bd:f6:cb:d4:e8:ad:03:fc:ce:fe:55:9e:c5:93:d1:
a5:9a:75:a7:e3:85:0d:5b:9e:ac:a8:35:ab:06:59:83:ae:06:
82:5c:c6:27:67:6c:f2:70:4b:c9:11:19:b9:2d:c2:5c:bb:97:
ba:b4:3d:f6:e7:48:e7:19:ec:1a:a5:42:a4:88:bb:27:ce:e2:
2a:68:e9:8b:fd:1b:5e:2c:ea:d7:2b:8e:b2:78:2e:f3:bf:58:
9f:a7:00:14:d3:b6:b9:95:61:5d:79:53:87:b8:89:78:a8:9f:
17:2f:a6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:47:55 2026 by rpki-client