
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File: 6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier: AM6K1xB/LyTBKCfWic78nRlF38IatT7SXBeLrsPphN8=
Subject key identifier: F9:F3:74:DF:07:4C:6F:00:DC:5C:F2:7A:4B:32:42:FD:65:21:73:27
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer: /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial: 01A0C933E63277773B6F5B5FCF839FD5936D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number: 1771
Signing time: Tue 22 Sep 2026 13:00:16 +0000
Manifest this update: Tue 22 Sep 2026 13:00:16 +0000
Manifest next update: Wed 23 Sep 2026 13:00:16 +0000
Files and hashes: 1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: Pie2oSMkBL6C+sHc3w1F43hAotZy5riNgEAgln4/pTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:33:e6:32:77:77:3b:6f:5b:5f:cf:83:9f:d5:93:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Validity
Not Before: Sep 22 13:00:16 2026 GMT
Not After : Sep 23 13:00:16 2026 GMT
Subject: CN=f9f374df074c6f00dc5cf27a4b3242fd65217327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:9f:97:9e:0c:b0:8d:a2:92:77:93:84:5b:
2a:87:c3:c1:72:2c:16:2c:c2:a3:71:88:2e:7d:b8:
88:40:c4:5d:53:6b:8d:dd:46:8a:f0:05:22:18:cf:
2e:58:39:35:19:43:d9:d9:d5:c3:9d:e3:78:b2:72:
84:8b:a7:d3:7f:68:b2:63:2b:8a:26:38:97:25:ae:
5c:f2:fa:1b:42:ab:1a:1e:8b:ee:39:96:1f:8a:6b:
df:dc:d2:82:c0:87:e7:c4:49:56:5a:b9:49:e3:1c:
6a:70:1f:13:f8:3d:e5:80:b0:d6:e6:55:50:c1:ce:
38:b6:a4:46:2d:d4:96:44:f4:8a:cc:6d:c9:72:ff:
55:31:3a:2d:dc:39:53:97:a3:b4:40:a4:66:60:c0:
f2:ca:90:11:9b:43:2f:fb:0a:99:af:d1:ac:be:76:
ea:4e:95:f1:38:e6:94:fc:1c:a6:9d:e3:9f:ad:1a:
a7:aa:c0:2c:b1:5e:c4:15:d5:e7:fe:3b:d9:23:41:
20:24:1e:7d:28:b9:0b:47:3e:ef:bc:8f:36:e0:af:
4c:57:39:5d:65:50:e5:c7:63:b4:3a:3a:fe:ba:4b:
2f:72:60:c3:18:95:66:c1:57:bf:a3:b7:93:78:7f:
dd:e6:04:fd:de:a4:6e:2e:54:ab:05:61:c4:98:73:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F3:74:DF:07:4C:6F:00:DC:5C:F2:7A:4B:32:42:FD:65:21:73:27
X509v3 Authority Key Identifier:
keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:af:f3:fb:9b:d7:06:45:5a:fb:bc:62:c3:64:42:94:11:59:
1d:af:7f:3a:25:bc:65:00:ad:f3:8f:d0:53:7e:24:fc:47:55:
32:c8:2a:f7:27:df:ec:14:d7:84:93:e6:f2:5a:f6:c1:75:a3:
e8:2a:1a:bd:7b:96:f0:b6:44:15:0a:14:24:fe:5d:85:b8:cc:
11:32:53:1f:85:59:7d:00:a4:2d:99:ba:a6:32:3f:f4:81:d8:
d0:cf:c0:2b:e4:37:f3:fa:50:06:46:dc:d4:09:ac:4e:12:62:
f7:a0:f0:df:64:ed:30:0d:42:9a:78:ca:72:be:0d:fb:74:c7:
cc:8f:1e:a5:75:88:bf:58:cc:82:16:b5:d6:8f:e2:f1:90:85:
a9:be:c2:00:17:28:90:10:69:dc:d6:ef:92:fd:f7:04:88:57:
ab:fe:3d:6b:6e:a3:a8:a0:0a:97:be:17:b5:43:7a:12:38:67:
3b:2d:0d:20:03:67:28:96:ec:a4:94:55:85:49:52:12:f4:9c:
88:91:b3:b5:11:47:42:5b:02:30:c5:54:cb:d6:66:98:d6:21:
fc:5a:a1:3e:2a:fe:71:f1:ff:8b:b2:1b:1b:d7:c9:02:d2:6d:
0e:13:5f:29:ec:d1:68:58:af:b8:b5:5d:b3:0c:73:e2:bd:97:
83:09:c0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:10:34 2026 by rpki-client