Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
File: 6YMf0OexWxfgoKfcz8q7Bj18R8o.mft (raw, json)
Hash identifier: Pcl8eaBSCf7iYRMaH49krvCWEViS2Zob4i42aoUB7kc=
Subject key identifier: 85:DE:76:BF:F9:F3:96:2C:B0:91:C2:0D:5D:12:CB:9F:F3:66:B4:9A
Authority key identifier: E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA
Certificate issuer: /CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
Certificate serial: 019D98F4FF35D377F821CCA98C8D9A39852A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
Manifest number: 06A2
Signing time: Fri 17 Apr 2026 01:01:26 +0000
Manifest this update: Fri 17 Apr 2026 01:01:26 +0000
Manifest next update: Sat 18 Apr 2026 01:01:26 +0000
Files and hashes: 1: 6YMf0OexWxfgoKfcz8q7Bj18R8o.crl (hash: muXs6UD6mBXaAoupuLki9sbGoNg6QjZlao0sm9fXhV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ff:35:d3:77:f8:21:cc:a9:8c:8d:9a:39:85:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
Validity
Not Before: Apr 17 01:01:26 2026 GMT
Not After : Apr 18 01:01:26 2026 GMT
Subject: CN=85de76bff9f3962cb091c20d5d12cb9ff366b49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:33:24:30:60:f3:57:28:6a:fb:05:01:57:
d8:3a:b8:6c:c3:08:03:0d:09:ac:d2:64:9a:ad:d9:
5a:de:9b:60:2c:44:2f:1d:12:05:c5:5c:60:48:63:
72:d1:64:6a:0d:60:14:a4:d4:e6:31:16:af:8c:3b:
b9:3c:cf:79:11:db:d1:0e:5d:35:e2:40:7f:25:b1:
1f:8b:7d:87:00:d2:b7:fa:27:a3:0b:be:40:69:86:
88:96:be:86:e9:2b:4b:82:5a:48:39:8d:57:27:49:
c2:d5:72:4e:07:bc:47:38:56:a1:6c:4a:4a:28:bf:
65:7f:6b:90:11:f2:b4:df:3c:fc:18:76:95:8d:1c:
e6:a7:71:6e:70:c2:7c:27:aa:d9:58:1f:37:4c:00:
46:0b:13:2b:2b:24:98:0a:24:e4:d6:2f:8d:cc:87:
44:23:86:4b:83:59:95:ca:6a:e6:0c:40:dc:16:96:
ba:f6:b8:56:0d:16:f5:d2:c6:c1:a0:3e:42:11:a0:
71:4a:0f:83:ad:4b:c8:5e:92:02:87:ce:b9:ce:74:
c2:f6:82:71:7a:76:e4:a2:f9:3c:51:64:3d:b5:58:
78:58:9a:95:84:c0:e0:33:cb:56:80:b7:d4:b6:34:
6a:73:e6:67:e5:bc:24:db:5c:e5:e1:7f:cd:7b:3b:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DE:76:BF:F9:F3:96:2C:B0:91:C2:0D:5D:12:CB:9F:F3:66:B4:9A
X509v3 Authority Key Identifier:
keyid:E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b4:9f:81:86:3e:7f:9d:cd:81:39:2f:c0:d2:ba:e6:57:03:
9d:d1:09:ed:20:18:b9:1a:8e:8d:e2:50:c3:b0:20:fe:2a:6e:
18:34:cb:4c:9c:90:99:ef:6b:8c:40:27:db:bf:ae:a6:ea:7c:
83:7f:7a:5e:2a:3e:e5:c8:9c:f8:ec:90:5a:08:7a:5b:ab:8f:
e2:35:cf:8e:95:04:79:36:db:7c:91:37:87:c1:46:fc:74:61:
05:06:83:6e:11:b6:fa:82:66:55:56:36:66:02:3a:22:fc:ec:
d3:31:ab:6e:67:91:79:39:67:ef:c1:f8:11:d0:d3:cc:fa:cb:
c5:c2:a7:10:91:35:dc:7b:fd:74:29:97:c9:f9:d9:1b:91:6e:
92:00:33:1d:fc:35:cf:cb:7d:8c:da:e4:ae:8b:29:71:49:4e:
38:1f:fd:d0:97:c0:c0:16:d9:99:31:b4:b0:4c:04:2b:29:38:
af:32:8f:9c:ca:64:cc:7d:c0:0c:c4:cf:28:ab:47:a0:5e:b2:
59:8e:d0:4e:d1:a9:95:d1:b7:38:e4:14:20:6f:97:9e:4e:31:
4a:48:d4:04:9a:61:82:47:62:b1:02:40:7d:16:5e:b9:f7:50:
00:83:ad:31:dc:44:44:ee:44:a7:82:9d:96:c0:67:84:e8:8a:
e6:c4:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:24 2026 by rpki-client