Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
File: 6kHoOY_3zvtSIWNusighJuv-O3g.mft (raw, json)
Hash identifier: +RXQXKqLottn9NVJJULq17mXLA/pcJLKVzylHnfB7kk=
Subject key identifier: 9A:1D:3F:15:1D:6A:50:D9:0E:24:E2:3D:32:02:78:6F:B6:A8:16:36
Authority key identifier: EA:41:E8:39:8F:F7:CE:FB:52:21:63:6E:B2:28:21:26:EB:FE:3B:78
Certificate issuer: /CN=ea41e8398ff7cefb5221636eb2282126ebfe3b78
Certificate serial: 01A1268BBB2C2CCA708157BA643E8F69FBFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
Manifest number: 06E7
Signing time: Sat 10 Oct 2026 16:00:53 +0000
Manifest this update: Sat 10 Oct 2026 16:00:53 +0000
Manifest next update: Sun 11 Oct 2026 16:00:53 +0000
Files and hashes: 1: 6kHoOY_3zvtSIWNusighJuv-O3g.crl (hash: 2PfpKIyO+NLPpjmTIFxDLYR0D9RY/0sR4o9P+msSY60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:8b:bb:2c:2c:ca:70:81:57:ba:64:3e:8f:69:fb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea41e8398ff7cefb5221636eb2282126ebfe3b78
Validity
Not Before: Oct 10 16:00:53 2026 GMT
Not After : Oct 11 16:00:53 2026 GMT
Subject: CN=9a1d3f151d6a50d90e24e23d3202786fb6a81636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:04:f1:e6:b7:e7:3a:71:ea:11:0f:e7:ff:
fa:9a:7b:5a:58:26:0e:77:80:02:53:59:bf:0c:37:
c8:44:26:07:e1:d2:46:29:38:bb:ca:21:37:55:ad:
72:7d:ed:8a:45:9f:91:f6:92:06:96:42:af:af:d5:
71:0f:8d:98:cc:40:89:5c:0d:a7:7b:8e:bb:1a:8c:
4d:6a:fc:eb:1a:65:42:60:02:5c:83:18:41:21:41:
5e:a7:ac:45:5b:71:3d:79:56:45:70:45:70:6e:07:
8f:9f:bb:e9:ad:b1:fb:db:5f:88:a7:35:06:b3:a6:
6a:4a:b3:cd:2b:01:58:1b:0b:78:93:c2:2e:88:76:
c9:03:dd:6c:d8:9d:d2:f9:a2:21:69:59:bc:f1:89:
2e:bd:16:49:16:90:6e:5c:7b:ef:d7:95:e7:af:57:
7f:3a:9d:36:4b:34:59:4c:3e:2a:dd:bd:59:c0:23:
88:25:ba:04:fc:a1:d0:07:c6:34:a7:6d:bc:f2:3f:
d2:e4:93:b7:b5:4a:6f:f1:d1:4a:6a:a4:f2:9a:bb:
a5:60:a2:c0:a2:59:c6:e2:5d:47:89:f5:68:ee:13:
85:7b:c1:e6:84:16:9f:0b:55:ee:85:68:d5:bc:cc:
5a:5a:6c:e8:81:c6:fd:e2:db:e1:6e:85:2b:ad:d7:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:3F:15:1D:6A:50:D9:0E:24:E2:3D:32:02:78:6F:B6:A8:16:36
X509v3 Authority Key Identifier:
keyid:EA:41:E8:39:8F:F7:CE:FB:52:21:63:6E:B2:28:21:26:EB:FE:3B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ad:0e:ee:3c:d4:36:14:2b:e3:c5:27:ac:d4:0a:7f:73:85:
e8:f9:6c:75:37:0d:d3:a1:90:37:b1:f9:60:42:05:69:a2:b6:
e4:21:79:5b:f6:76:95:05:05:5a:57:34:2d:5d:18:d7:2e:03:
f3:f7:e1:74:ec:37:a2:aa:02:34:35:73:24:55:a5:9a:c2:61:
95:eb:1b:37:d2:92:20:90:93:a7:f6:f3:8c:ad:7b:08:8a:59:
e6:b8:9b:3d:ce:44:6e:7f:f6:fc:7b:7f:f0:00:8c:86:e3:60:
32:74:c4:b8:d0:05:9b:c8:53:07:95:9d:a8:d7:8a:b3:85:46:
2e:8e:a5:a7:82:12:e9:b1:66:26:ce:47:d8:a7:a6:37:92:7e:
7c:99:f4:7b:c1:e4:9d:73:de:a7:0b:d0:48:79:c4:f3:ed:8b:
48:1e:46:74:35:46:9b:7e:b6:ef:d5:6d:be:1e:b6:4c:6b:31:
5c:0f:06:9d:f7:20:2c:b5:fc:96:af:62:76:84:98:58:e5:95:
ee:e2:87:79:c7:f9:82:26:fe:e6:80:1c:71:de:7a:e5:69:87:
f6:1e:b0:10:8c:62:6a:82:3a:ba:03:b6:de:59:ab:14:93:a2:
50:f4:f6:59:43:6f:77:56:d3:a6:e9:94:d4:94:f2:31:75:90:
b5:ae:74:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:37:08 2026 by rpki-client