Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier: jRooXeUQP98AcBVAut9N2grPi/BGzXnmxi5ARl79YKc=
Subject key identifier: 09:CB:B8:0B:9B:C0:68:B8:B9:7F:29:AC:10:84:FD:0B:75:51:CD:E5
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial: 019DA3784494C6320B9C81687DECB6AA5A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number: 0985
Signing time: Sun 19 Apr 2026 02:01:01 +0000
Manifest this update: Sun 19 Apr 2026 02:01:01 +0000
Manifest next update: Mon 20 Apr 2026 02:01:01 +0000
Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: Jf/07QHbEAAham8I5vZ0ZumRhGLrugNRdP14covnzzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:44:94:c6:32:0b:9c:81:68:7d:ec:b6:aa:5a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Validity
Not Before: Apr 19 02:01:01 2026 GMT
Not After : Apr 20 02:01:01 2026 GMT
Subject: CN=09cbb80b9bc068b8b97f29ac1084fd0b7551cde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:5a:01:98:98:37:cb:d9:e5:14:80:86:ef:
74:8c:fb:21:d0:d1:91:67:f3:59:f5:1d:b2:76:2d:
c9:a6:23:9e:68:a2:85:b7:1c:a5:1c:eb:3d:e1:5c:
2d:f0:21:87:d2:ba:0a:41:aa:c4:a1:80:16:df:0c:
2a:bf:e2:bf:58:03:aa:9b:49:49:f5:d3:ec:1d:e9:
fc:ea:63:f4:4a:11:da:fc:d8:a0:61:bf:7e:c0:8c:
a9:f4:40:73:a6:ae:85:be:9f:37:7f:ae:d5:95:85:
55:bd:dd:9c:c0:e2:15:7c:05:b6:56:b9:d9:72:89:
2c:48:e8:58:63:06:73:4f:e5:80:3d:4f:1f:71:5a:
42:9c:65:d8:96:cb:0e:2b:14:92:3d:60:e2:ad:71:
84:30:f9:0d:d0:1f:ea:7f:80:1d:52:b9:91:19:ec:
6b:62:bc:57:de:56:0a:b8:73:30:52:35:46:23:8f:
ed:1a:0b:64:de:15:08:a0:a8:3a:25:db:d7:f4:61:
47:78:4f:f4:7f:8d:2f:2b:41:90:3d:64:73:30:48:
97:8a:c9:de:3d:b9:0b:e8:86:b3:1c:65:78:5e:29:
0a:1a:7f:3f:85:95:4a:c3:5a:5a:fb:dd:ae:0d:7d:
78:83:17:10:c8:c6:fe:96:42:65:63:0b:05:7f:af:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CB:B8:0B:9B:C0:68:B8:B9:7F:29:AC:10:84:FD:0B:75:51:CD:E5
X509v3 Authority Key Identifier:
keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:81:81:cd:3b:2c:b0:4a:a3:2c:56:1f:4f:e2:bf:e3:cb:b8:
36:54:9f:dd:ce:08:8d:20:be:49:b5:ff:70:ee:c3:42:b7:2f:
89:a4:42:e0:97:2d:23:53:35:20:c9:b0:61:96:2a:e9:f2:16:
6e:f9:ed:b2:9b:60:92:f5:98:cc:c1:6c:d1:be:94:67:c1:dd:
45:3d:1f:82:ce:d2:59:7a:c8:42:a7:71:cd:26:e2:91:d2:77:
d5:7c:43:32:e7:8a:f6:f2:e6:a2:6e:6c:de:6f:76:91:2e:c1:
60:4c:81:4f:1c:2c:da:c6:2e:ec:5d:2d:19:de:e2:eb:04:13:
cb:0b:de:1f:b5:eb:b8:19:1e:6c:a8:58:37:b7:7f:e8:bc:bd:
17:ee:01:2f:6d:c7:70:65:61:72:fc:7b:79:91:b9:1b:70:b4:
1d:39:83:e3:ad:8b:c7:a0:64:fd:6f:6d:52:e6:cf:70:28:df:
40:6a:9c:15:9a:20:67:2d:82:8d:7c:8c:0f:01:5a:1c:1a:ba:
43:01:d8:b1:da:12:ff:e5:cf:f2:a5:b5:70:c7:f4:27:23:40:
e3:ae:0a:78:7c:c7:51:fe:24:6f:e8:af:94:4d:c5:65:63:e7:
a1:92:d5:60:98:53:50:8a:4a:d1:a2:65:0e:c7:53:21:af:6c:
62:92:c5:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeESUxjILnIFofey2qlo8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzJhNmMyZWJlYTQ2NDEzMDcyZjkwZGQ1MjZkNzhmMTEw
MmY0ZjIwHhcNMjYwNDE5MDIwMTAxWhcNMjYwNDIwMDIwMTAxWjAzMTEwLwYDVQQD
EygwOWNiYjgwYjliYzA2OGI4Yjk3ZjI5YWMxMDg0ZmQwYjc1NTFjZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv91aAZiYN8vZ5RSAhu90jPsh0NGR
Z/NZ9R2ydi3JpiOeaKKFtxylHOs94Vwt8CGH0roKQarEoYAW3wwqv+K/WAOqm0lJ
9dPsHen86mP0ShHa/NigYb9+wIyp9EBzpq6Fvp83f67VlYVVvd2cwOIVfAW2VrnZ
coksSOhYYwZzT+WAPU8fcVpCnGXYlssOKxSSPWDirXGEMPkN0B/qf4AdUrmRGexr
YrxX3lYKuHMwUjVGI4/tGgtk3hUIoKg6JdvX9GFHeE/0f40vK0GQPWRzMEiXisne
PbkL6IazHGV4XikKGn8/hZVKw1pa+92uDX14gxcQyMb+lkJlYwsFf695+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnLuAubwGi4uX8prBCE/Qt1Uc3lMB8GA1UdIwQY
MBaAFOlypsLr6kZBMHL5DdUm148RAvTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMt
NGY5NzRjOTc3OTQ1LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMtNGY5NzRjOTc3OTQ1
LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4GBzTss
sEqjLFYfT+K/48u4NlSf3c4IjSC+SbX/cO7DQrcviaRC4JctI1M1IMmwYZYq6fIW
bvntsptgkvWYzMFs0b6UZ8HdRT0fgs7SWXrIQqdxzSbikdJ31XxDMueK9vLmom5s
3m92kS7BYEyBTxws2sYu7F0tGd7i6wQTywveH7XruBkebKhYN7d/6Ly9F+4BL23H
cGVhcvx7eZG5G3C0HTmD462Lx6Bk/W9tUubPcCjfQGqcFZogZy2CjXyMDwFaHBq6
QwHYsdoS/+XP8qW1cMf0JyNA464KeHzHUf4kb+ivlE3FZWPnoZLVYJhTUIpK0aJl
DsdTIa9sYpLFAg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:35 2026 by rpki-client