Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File: 6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier: HMI6ceJocfbAmdfhLYio/nyc0HZChpNMP6z3bQW4MJ0=
Subject key identifier: 87:CF:7B:33:A6:8E:BA:FF:22:70:20:D5:9A:8B:1D:4E:CE:BE:3D:99
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer: /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial: 019FAA1A7F9A576F8824F5799F4F206C615A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number: 09FA
Signing time: Tue 28 Jul 2026 19:01:30 +0000
Manifest this update: Tue 28 Jul 2026 19:01:30 +0000
Manifest next update: Wed 29 Jul 2026 19:01:30 +0000
Files and hashes: 1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: AbGayieXyUl1fjQCPIyK0IoVbQOsWBw60I1DSZ9gJy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:7f:9a:57:6f:88:24:f5:79:9f:4f:20:6c:61:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Validity
Not Before: Jul 28 19:01:30 2026 GMT
Not After : Jul 29 19:01:30 2026 GMT
Subject: CN=87cf7b33a68ebaff227020d59a8b1d4ecebe3d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:7a:fa:a1:e6:b7:91:50:3c:4f:ea:c0:fc:
3f:6e:5a:da:9d:99:bb:02:4f:aa:f3:b1:37:96:c5:
8b:31:ed:23:1d:b8:93:c3:53:f8:8b:24:f7:e6:13:
73:27:44:25:5f:0f:eb:4e:90:e0:85:d5:10:10:64:
a3:c1:6d:6f:e1:1e:f5:6a:d3:77:a9:81:38:dc:9f:
ef:90:89:11:7b:8b:18:15:0c:e5:1c:ed:2d:6e:f7:
b4:34:0b:12:c3:2e:4f:c5:4e:da:8a:6d:f5:a1:1e:
6f:ea:dc:cd:9f:48:17:6f:8f:60:bc:08:86:7d:0d:
80:fd:b8:f8:4d:b7:c3:04:8e:f4:3b:4c:e5:01:95:
63:c9:a5:44:b9:1a:b2:e6:cb:1b:a5:ea:83:02:41:
25:3f:79:18:7b:a4:e7:d3:5c:32:8f:f8:73:7e:b7:
18:f6:4a:3e:3d:55:7e:48:59:28:a0:85:4a:64:cc:
fb:89:7b:71:08:3f:09:f7:6f:8c:9b:16:49:f7:c9:
d0:57:84:41:59:49:d2:dc:57:0f:e7:8e:a5:ae:82:
1f:93:23:db:48:79:cd:3a:d6:8d:6f:d2:f8:ba:9b:
66:41:95:45:3e:da:a7:1a:37:c2:e4:6e:6c:b3:fd:
96:2a:3d:a5:f8:51:7b:4b:15:f3:80:f0:b0:26:0c:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CF:7B:33:A6:8E:BA:FF:22:70:20:D5:9A:8B:1D:4E:CE:BE:3D:99
X509v3 Authority Key Identifier:
keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:98:e0:c9:8f:ea:e8:5a:15:08:e0:63:c4:d3:9e:7d:c2:d7:
c2:2b:6a:8d:69:5d:f1:19:f4:e8:c6:17:2b:5a:77:32:46:8b:
42:50:e0:8c:1a:27:1b:59:2d:e6:d4:b2:f7:68:26:da:7d:78:
9c:69:9a:08:8d:dc:e6:be:f5:4d:9c:72:e1:ac:77:7c:07:d3:
b1:32:d5:83:22:35:17:95:c6:ac:00:b2:09:05:32:1b:9d:31:
fe:d7:a2:05:10:13:ec:a0:d0:9f:13:f3:41:1c:72:44:83:68:
6a:c3:90:88:8d:4b:1f:f0:c0:1d:37:eb:8a:3a:1c:76:fb:53:
62:7b:95:8e:f2:2d:15:12:18:68:03:e9:09:54:60:9f:c4:30:
6e:f1:8e:03:31:b3:b9:cf:89:2a:f7:f5:09:c8:11:a4:0f:3f:
3a:54:f1:fc:70:25:3d:e7:da:0a:1f:1a:de:63:bc:e1:41:7f:
4d:79:73:2b:51:6b:24:3d:e6:36:47:f9:92:34:3c:9e:83:8c:
5d:0a:2e:0d:2d:57:a0:39:fb:15:3d:ee:59:0d:11:ae:fd:2c:
65:4f:8a:ae:a4:17:a3:19:ad:13:a0:f7:0a:ef:01:23:d2:c5:
21:e7:f1:f4:24:5b:74:2c:fb:f2:4d:2a:8f:e7:f0:60:fd:e7:
73:39:42:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:13 2026 by rpki-client