Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier: 1PIWbwU7op/Bh2pU7+FxmYYtRWUImXZ8BVk2q+cIHg0=
Subject key identifier: 3D:5B:4D:0B:58:00:29:5E:62:95:8E:4A:6B:06:D3:CC:5C:27:9E:93
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial: 01A0C6D82789711692D36D16F82EC11F1447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number: 0B25
Signing time: Tue 22 Sep 2026 02:00:49 +0000
Manifest this update: Tue 22 Sep 2026 02:00:49 +0000
Manifest next update: Wed 23 Sep 2026 02:00:49 +0000
Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: WAm3CxhR96ljSddn4RQLbJgMBGOWiKUNNvTkBaBG16I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:27:89:71:16:92:d3:6d:16:f8:2e:c1:1f:14:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Validity
Not Before: Sep 22 02:00:49 2026 GMT
Not After : Sep 23 02:00:49 2026 GMT
Subject: CN=3d5b4d0b5800295e62958e4a6b06d3cc5c279e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:46:0f:6c:ca:ba:2b:3f:78:3b:61:af:ad:
71:6f:29:88:ef:4c:9e:b3:f2:e7:88:78:07:a1:a9:
52:86:f3:ee:63:8a:4d:c7:2d:c0:16:82:d0:57:f4:
dd:8c:25:6b:24:e9:b8:d9:47:40:8a:9c:dc:fe:5b:
bd:f9:54:44:85:cd:f0:e5:3b:43:03:91:1b:b7:13:
a3:f8:2d:9d:ee:2c:f3:9f:87:13:c7:63:ec:fc:68:
94:9e:32:b5:27:a9:a5:36:0d:3b:50:79:28:24:7e:
40:60:d6:f1:5c:6d:55:c5:0e:96:40:10:34:f6:fd:
88:a1:ab:31:59:96:38:7e:ea:af:f9:3f:9a:ff:63:
69:e9:42:90:2e:02:34:54:71:11:9e:55:b1:39:21:
7d:d2:fc:6b:66:0b:b4:71:4a:83:fb:64:c0:f0:05:
d7:73:08:56:07:eb:ad:28:95:f9:c4:32:f9:74:03:
a0:5c:df:6f:42:69:67:30:6b:8d:91:23:2f:ea:fa:
e9:70:35:a2:e8:f1:03:59:69:99:95:96:1b:73:0e:
0b:06:8b:d9:54:9c:f2:07:47:28:df:54:53:75:03:
96:cc:0d:bc:d2:40:05:54:f1:61:b1:74:ab:37:9e:
4d:cf:0a:53:2c:5d:88:f2:bf:6a:47:f3:a5:0e:59:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5B:4D:0B:58:00:29:5E:62:95:8E:4A:6B:06:D3:CC:5C:27:9E:93
X509v3 Authority Key Identifier:
keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9e:1c:43:d2:21:40:13:d2:99:32:17:1e:ca:68:73:8b:4a:
d5:d9:b9:84:44:f4:23:6e:cb:d0:a0:64:a3:cf:aa:cf:fb:12:
b2:4e:7d:26:0e:4c:1e:d9:66:6a:fd:b2:e9:cf:40:cc:9c:75:
6b:9a:47:ed:c1:ec:c9:d6:6c:29:80:83:4f:a3:d5:6a:65:d4:
a8:7e:c9:0e:57:e3:ba:c0:03:07:c8:0b:3f:df:54:93:ef:da:
9a:6a:96:8e:89:cc:76:71:f9:f5:36:c4:3f:db:98:04:04:dc:
af:99:81:83:ac:f2:aa:65:cb:d7:2b:4c:05:35:e0:d5:56:d6:
9e:e7:3c:ae:c2:88:e5:26:9f:5d:13:d9:ec:10:d3:17:b1:a3:
cf:f2:61:9a:f1:ff:24:1f:d2:24:6d:36:82:d1:19:25:7c:72:
d9:f7:ec:e0:43:c4:9c:74:b4:e5:08:1d:37:17:7f:09:17:c7:
19:63:25:e1:22:b7:58:e0:45:dd:04:17:47:69:3d:eb:ed:ed:
60:39:f8:c9:d6:ce:25:ec:ec:1d:f4:f3:11:c8:2f:04:01:c4:
8f:11:ed:cb:1a:d5:70:3d:ff:1a:a3:6d:19:74:3c:e1:71:9d:
9a:0d:78:19:09:58:14:87:57:83:bd:84:ff:9b:fa:12:f3:64:
df:b6:6e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:29:04 2026 by rpki-client