Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier: zIugXaMSO+lvyn5/XUo/n4Y6YDaOOlvzCONq3bWtI68=
Subject key identifier: 90:D5:98:C1:32:BA:47:57:3A:B7:74:7C:11:6B:2F:4A:9F:C6:BC:43
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial: 019FA9077082F2A00E4FC44E7EDACBB261A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number: 0A91
Signing time: Tue 28 Jul 2026 14:01:04 +0000
Manifest this update: Tue 28 Jul 2026 14:01:04 +0000
Manifest next update: Wed 29 Jul 2026 14:01:04 +0000
Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: X7rHaqpL3K1XMnoO9xQE66vbH7KGQ958GXwXlL3Tp7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:70:82:f2:a0:0e:4f:c4:4e:7e:da:cb:b2:61:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Validity
Not Before: Jul 28 14:01:04 2026 GMT
Not After : Jul 29 14:01:04 2026 GMT
Subject: CN=90d598c132ba47573ab7747c116b2f4a9fc6bc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:56:aa:1f:02:05:12:ab:7a:2a:4f:0d:e8:
b6:41:46:a8:b9:04:a9:2f:8d:72:58:c8:de:b8:a8:
e9:02:a7:78:cd:ef:00:8b:da:c5:a2:ea:91:3d:9b:
36:87:c9:0e:90:51:e4:ed:11:f9:28:6f:ae:de:42:
3d:61:53:07:c0:b1:dc:71:06:7a:1d:b9:64:54:83:
28:a3:95:1c:b1:0f:5e:cc:17:10:36:4a:ff:62:5d:
37:61:6e:9d:88:1b:86:fa:97:62:ef:e5:7c:06:35:
78:2f:fe:0a:06:ec:c9:1e:5f:83:d2:c7:b6:2d:70:
0c:82:21:df:e1:73:d9:44:c0:27:9d:07:00:d5:73:
62:cd:ed:18:cc:57:1a:b2:5e:e7:32:1d:c2:7a:a5:
7c:6d:b3:0b:6b:81:4d:51:ff:74:cf:9b:3d:83:8f:
06:e6:cf:4e:90:ee:1c:6c:7b:c0:84:db:90:44:e2:
29:93:87:55:cb:8f:8b:43:54:5e:40:eb:51:dc:8e:
64:61:08:dd:a5:f3:bc:17:c0:4b:d8:5b:9a:5b:4f:
7a:35:e1:a7:e9:94:ff:b2:df:bf:5d:d7:fb:ec:14:
06:0a:b3:45:5b:3a:27:cb:3e:9c:f5:4b:6d:7d:a5:
75:6f:51:39:a9:ca:3b:58:3b:c8:38:4d:aa:d0:8c:
d3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D5:98:C1:32:BA:47:57:3A:B7:74:7C:11:6B:2F:4A:9F:C6:BC:43
X509v3 Authority Key Identifier:
keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c6:b3:df:d6:c4:8d:90:8d:2a:6f:65:47:2d:c1:c5:79:d7:
66:04:08:e2:c0:fe:6c:d7:df:b3:ab:7a:1d:9e:20:64:74:0a:
0a:f3:ef:f6:be:5c:59:a6:c0:e4:94:32:44:09:20:b2:81:be:
02:b1:9a:8c:81:41:77:6f:96:bd:ab:33:be:c4:91:1d:58:87:
da:f7:d7:71:dd:9b:47:b2:1d:99:47:a8:a6:f0:0a:4c:21:a7:
95:6f:42:44:1e:16:43:06:37:a2:59:0d:01:75:d6:1e:df:ef:
b6:a5:ac:38:7d:60:db:58:4f:7c:7a:07:3f:53:fa:39:04:c6:
35:91:cf:d0:2b:8e:8f:c7:0c:1b:cf:7f:12:63:6e:ac:61:fb:
ec:19:5b:00:2e:b0:f5:93:0e:74:f5:1b:3b:bd:0f:53:de:9d:
67:14:94:c4:6e:ff:d4:03:71:c8:f9:9a:8f:4d:93:38:42:e1:
e3:86:ef:81:a6:e1:c7:e1:f4:0c:1c:52:fd:43:91:6e:f3:3e:
e9:21:a8:e6:e9:e1:6c:d9:c0:27:c0:9c:c4:82:2b:72:16:b5:
cf:8f:db:42:d7:b2:04:49:6b:4e:5f:74:8a:fc:94:40:98:89:
c9:6f:eb:33:f8:ec:ed:c2:50:76:ca:9c:85:b8:34:4d:83:d1:
30:b7:4c:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB3CC8qAOT8ROftrLsmGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzJhNmMyZWJlYTQ2NDEzMDcyZjkwZGQ1MjZkNzhmMTEw
MmY0ZjIwHhcNMjYwNzI4MTQwMTA0WhcNMjYwNzI5MTQwMTA0WjAzMTEwLwYDVQQD
Eyg5MGQ1OThjMTMyYmE0NzU3M2FiNzc0N2MxMTZiMmY0YTlmYzZiYzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFJWqh8CBRKreipPDei2QUaouQSp
L41yWMjeuKjpAqd4ze8Ai9rFouqRPZs2h8kOkFHk7RH5KG+u3kI9YVMHwLHccQZ6
HblkVIMoo5UcsQ9ezBcQNkr/Yl03YW6diBuG+pdi7+V8BjV4L/4KBuzJHl+D0se2
LXAMgiHf4XPZRMAnnQcA1XNize0YzFcasl7nMh3CeqV8bbMLa4FNUf90z5s9g48G
5s9OkO4cbHvAhNuQROIpk4dVy4+LQ1ReQOtR3I5kYQjdpfO8F8BL2FuaW096NeGn
6ZT/st+/Xdf77BQGCrNFWzonyz6c9UttfaV1b1E5qco7WDvIOE2q0IzTzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDVmMEyukdXOrd0fBFrL0qfxrxDMB8GA1UdIwQY
MBaAFOlypsLr6kZBMHL5DdUm148RAvTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMt
NGY5NzRjOTc3OTQ1LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMtNGY5NzRjOTc3OTQ1
LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcaz39bE
jZCNKm9lRy3BxXnXZgQI4sD+bNffs6t6HZ4gZHQKCvPv9r5cWabA5JQyRAkgsoG+
ArGajIFBd2+WvaszvsSRHViH2vfXcd2bR7IdmUeopvAKTCGnlW9CRB4WQwY3olkN
AXXWHt/vtqWsOH1g21hPfHoHP1P6OQTGNZHP0CuOj8cMG89/EmNurGH77BlbAC6w
9ZMOdPUbO70PU96dZxSUxG7/1ANxyPmaj02TOELh44bvgabhx+H0DBxS/UORbvM+
6SGo5unhbNnAJ8CcxIIrcha1z4/bQteyBElrTl90ivyUQJiJyW/rM/js7cJQdsqc
hbg0TYPRMLdMjQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:13 2026 by rpki-client