Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File: 6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier: vVBZ6SshNbeW7RuILKvu0vGrJe6aTURkKHFX8XLGYs0=
Subject key identifier: D5:27:FF:D6:98:42:CE:57:8D:49:1D:BE:D4:79:20:D5:D3:21:97:A2
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer: /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial: 019D97AAA5CD447B7D1B3E58DE9872561837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number: 13FC
Signing time: Thu 16 Apr 2026 19:00:36 +0000
Manifest this update: Thu 16 Apr 2026 19:00:36 +0000
Manifest next update: Fri 17 Apr 2026 19:00:36 +0000
Files and hashes: 1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: fOGC+NTg98pTtY1bFMVyqlyNSvHReoDIRXBtVqtMvMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:a5:cd:44:7b:7d:1b:3e:58:de:98:72:56:18:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Validity
Not Before: Apr 16 19:00:36 2026 GMT
Not After : Apr 17 19:00:36 2026 GMT
Subject: CN=d527ffd69842ce578d491dbed47920d5d32197a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:f1:da:62:36:42:10:7a:dc:b7:6e:39:4a:
23:28:f7:9a:f4:9b:fb:bb:f1:e5:77:99:37:b5:fc:
cf:bb:07:15:0f:1f:43:4c:27:4b:ce:51:01:31:5f:
d3:59:73:25:6c:4a:9d:95:34:f6:7d:f0:43:68:e1:
47:5e:29:22:11:0d:a2:3d:de:fa:f0:4f:42:67:1e:
49:a9:f2:b8:b7:1e:e0:21:d5:33:69:e0:07:3b:ea:
cc:df:35:b6:97:82:49:d5:56:e5:dc:67:1f:59:f0:
d7:27:83:0c:86:67:bf:71:98:c0:9e:b2:da:62:08:
23:96:b0:51:5e:f3:b6:cb:b1:df:aa:c1:8c:49:e5:
c2:95:8f:51:6a:0c:24:ab:80:30:3f:8e:22:e1:cf:
13:16:1d:ed:61:73:d4:a6:22:31:86:57:8c:2a:98:
09:9b:38:40:cb:e5:bc:37:74:4d:21:93:18:60:e6:
3e:5d:c3:63:92:67:20:e1:a1:3b:6e:c4:80:d6:c1:
fe:21:06:c0:40:48:bc:b7:f4:b1:ed:da:02:9a:f9:
e2:74:b8:40:74:a3:80:66:7a:1b:60:c8:91:3c:b1:
f7:cc:27:75:51:94:b1:25:0d:6a:87:8f:ed:c9:cc:
1b:f0:3e:1d:3c:a0:6b:4f:6e:50:5f:45:26:f1:8a:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:27:FF:D6:98:42:CE:57:8D:49:1D:BE:D4:79:20:D5:D3:21:97:A2
X509v3 Authority Key Identifier:
keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9f:1e:d2:e8:f1:3d:d9:71:d2:12:9e:dd:e6:6e:d7:41:c6:
28:99:02:da:db:9a:b8:82:e1:63:83:c4:b7:11:34:e7:b8:ff:
71:0c:5a:a7:19:4a:f9:18:a8:16:04:e0:3c:85:4a:ff:2f:e9:
26:6e:4b:3b:09:a7:75:fa:ee:01:e2:45:a8:a1:30:97:63:54:
78:af:56:10:4b:9a:fd:c4:af:e2:ae:87:39:9e:8c:6a:96:69:
78:a7:33:48:fa:d1:db:ea:a5:a2:8c:0d:3d:cf:38:94:e1:25:
b7:49:ff:e2:98:eb:81:79:a4:78:d3:7a:46:09:af:0d:91:9c:
d7:37:03:5c:ec:e1:41:00:95:ea:97:23:64:ec:78:a1:fe:f7:
1e:45:d2:a1:f2:90:1c:74:11:2e:39:4d:04:d3:09:e6:91:06:
68:27:4f:97:98:bc:f1:60:d0:54:57:e2:9f:5d:9c:51:36:64:
04:a7:72:2c:93:24:91:28:1a:d4:04:a2:8d:f8:49:74:bd:cf:
bd:a8:13:15:2d:78:4c:20:a9:df:f3:8c:04:c8:a6:2a:a3:f1:
5a:7b:74:15:2f:78:b8:b0:a8:65:5e:f7:ec:12:51:c3:b3:5d:
76:67:09:e4:c1:25:af:21:3b:a1:6e:f3:0d:c6:ca:f7:57:48:
8e:b5:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:10 2026 by rpki-client