Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File: 6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier: vkhMZXFMWUgmFhNusNWzinw+nr9FZQWrBJEO4+x5KO0=
Subject key identifier: B9:3C:F9:D9:6D:91:72:42:FA:E6:49:FF:82:AB:77:56:A7:C0:D0:6B
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer: /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial: 019D98F4549278C0D45F1B4AB58BBE378B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number: 08E8
Signing time: Fri 17 Apr 2026 01:00:42 +0000
Manifest this update: Fri 17 Apr 2026 01:00:42 +0000
Manifest next update: Sat 18 Apr 2026 01:00:42 +0000
Files and hashes: 1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: xAKP0osDhdo4VdZ6O+46o/PbjOAPDIiKVoQDx+Z8k5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:54:92:78:c0:d4:5f:1b:4a:b5:8b:be:37:8b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Validity
Not Before: Apr 17 01:00:42 2026 GMT
Not After : Apr 18 01:00:42 2026 GMT
Subject: CN=b93cf9d96d917242fae649ff82ab7756a7c0d06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:63:9d:54:35:6e:7a:b5:5a:64:20:22:95:
07:73:ea:de:87:88:70:92:e2:4c:60:97:f7:45:44:
43:a5:2d:a3:d1:40:58:a3:cd:32:f3:c8:9d:ac:64:
af:8e:80:98:97:77:73:ae:ab:0c:fd:60:c7:bf:0a:
f8:68:8b:dd:bd:c1:14:d4:aa:af:65:bc:ce:46:2a:
6d:1a:ce:39:81:61:3b:de:1b:60:bc:84:1f:3a:9f:
fb:b2:1c:b1:81:61:e5:d6:7e:6d:08:1e:ea:21:8f:
a6:9e:76:9a:0e:e7:81:97:f5:86:44:e7:e1:7a:02:
89:0a:86:57:3b:6d:f5:23:f6:ae:9d:d8:f3:25:f9:
0b:e1:df:21:a2:af:62:08:a5:88:ec:ca:fd:32:e1:
bc:47:8f:ba:b7:73:00:26:aa:45:72:74:3f:63:4c:
0a:1d:8e:b2:f6:cf:32:c0:23:95:82:70:5b:51:e6:
f5:1c:e5:6b:a5:92:08:2a:0e:7b:f9:31:d0:ea:cf:
6f:cc:de:00:e3:87:29:78:ba:0e:4e:80:44:d4:7e:
46:64:e0:f2:b9:76:ef:7c:77:a4:4e:cb:02:0e:ca:
6c:d4:b4:68:5f:68:94:7d:0e:9c:e9:cc:46:f2:13:
c4:56:2d:12:a5:f0:f3:31:b3:64:07:24:15:5d:15:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3C:F9:D9:6D:91:72:42:FA:E6:49:FF:82:AB:77:56:A7:C0:D0:6B
X509v3 Authority Key Identifier:
keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:01:da:d0:61:6c:55:3b:6b:40:f0:ab:21:72:37:75:70:3e:
a8:ed:6e:7c:4c:ab:1b:20:f6:52:25:f6:f8:94:1b:fd:e6:65:
22:84:83:d1:e1:2e:ad:17:b6:ab:45:6c:b4:7f:a1:09:15:e7:
e8:6e:06:b3:ce:bc:d1:3f:1f:b0:a1:04:93:1d:ca:04:17:af:
e0:31:14:fc:cf:88:09:89:bd:0b:35:e3:8d:04:bb:68:06:04:
08:6c:e1:5e:b6:23:c2:50:c5:e9:5b:d7:8e:89:71:a2:76:fa:
d0:49:99:4f:eb:51:71:89:db:d2:b9:60:74:b9:90:a1:af:b9:
e1:eb:e3:a0:d6:a8:74:28:cc:22:c9:8e:c2:6f:5b:c0:28:a3:
41:12:2a:13:01:2f:f4:97:e3:24:7f:f8:a0:1b:c5:4b:30:ba:
8f:ae:45:1f:56:51:d7:c3:44:e8:ac:86:b0:9a:a1:fb:2c:ae:
74:f2:a5:15:52:0e:a4:cf:f5:2c:a4:d2:fc:ca:6a:4b:41:dd:
71:81:d7:0a:73:35:67:a6:d9:2b:ba:31:82:1b:bf:49:b3:e1:
0b:6f:5d:8e:8b:56:ef:31:8d:03:23:84:06:7c:eb:72:5b:76:
7a:e0:5d:65:dc:2f:fa:f0:4e:2d:95:ea:d7:ef:4a:72:25:bb:
91:70:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:13 2026 by rpki-client