Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier: g6W38Ll5yTyJe6xM8Cigynfob6fq3IAG/lA7hOGiG34=
Subject key identifier: 0F:13:43:7B:CB:D8:03:01:51:15:34:A9:C2:F0:47:FF:66:3C:29:BF
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial: 019FA9ABE5167A72F92C47689596A436AEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number: 0DBB
Signing time: Tue 28 Jul 2026 17:00:42 +0000
Manifest this update: Tue 28 Jul 2026 17:00:42 +0000
Manifest next update: Wed 29 Jul 2026 17:00:42 +0000
Files and hashes: 1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: d3sCfAkW2EhIbVEZ4o0d9Zb0H+V26n1FUsoC2HyZ67c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:e5:16:7a:72:f9:2c:47:68:95:96:a4:36:ae:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Validity
Not Before: Jul 28 17:00:42 2026 GMT
Not After : Jul 29 17:00:42 2026 GMT
Subject: CN=0f13437bcbd80301511534a9c2f047ff663c29bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:69:26:ac:0d:63:14:fa:04:34:78:aa:0d:
d2:22:04:0f:16:d2:e8:00:fe:4c:1d:47:f4:be:5e:
c5:11:3a:ec:7c:cc:3e:bf:d5:02:a2:36:4d:d8:26:
d3:7e:ea:ca:0e:51:fc:75:f6:44:61:53:7d:ad:4c:
44:f4:be:c0:8d:6e:14:aa:64:a8:6b:12:be:76:66:
03:38:36:7c:b3:8f:58:d7:62:4e:37:01:b6:5b:0f:
8c:e6:f4:f3:dc:5c:e7:bc:1f:31:a6:88:0c:d4:69:
c2:d3:c6:35:13:3a:2a:a0:b6:48:ae:e4:93:d4:0a:
e5:84:fd:d6:98:45:a8:62:54:34:57:09:76:34:b3:
f4:be:d2:a0:df:19:c3:61:ae:a3:c2:3e:c1:3a:7f:
41:94:f2:9b:f2:32:00:95:a6:0e:7d:11:23:7e:94:
ec:1b:1a:a4:0c:42:6b:32:70:9f:7a:83:c0:5b:72:
8a:45:4e:70:15:5b:8c:70:d6:a9:db:e4:73:40:66:
f0:d9:7d:08:51:a4:20:9d:9b:05:23:58:3e:4a:1a:
1d:2a:ac:d4:1d:91:81:8d:c7:38:2f:26:37:cf:5e:
fd:66:fb:c8:89:9c:f5:a4:d5:4d:4f:11:5c:49:62:
fb:fe:82:03:e8:0f:bf:ab:df:b8:37:41:8d:5b:30:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:13:43:7B:CB:D8:03:01:51:15:34:A9:C2:F0:47:FF:66:3C:29:BF
X509v3 Authority Key Identifier:
keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:30:79:25:e0:7e:96:e7:6e:11:d6:8b:dc:d4:78:20:ae:73:
04:a1:41:ca:08:d4:d5:61:a7:fd:26:7f:49:34:4a:5f:da:dc:
16:da:1b:a4:9d:c1:30:07:01:f6:17:18:33:cb:6e:a7:3a:55:
0d:b0:9e:c0:66:8f:57:ba:19:5a:f4:77:f1:46:eb:43:2c:d6:
21:9c:dd:85:78:c2:0e:00:ce:57:13:c7:85:f0:ce:9b:ba:6b:
e2:b7:a2:6e:2f:f4:73:ae:c7:c2:a4:39:4d:c7:9c:d9:56:f6:
52:cb:7d:31:c6:52:05:0c:3b:b4:1e:3e:a9:94:0e:e6:3c:b3:
f3:d3:d9:a7:f8:ac:85:8c:79:0d:8d:58:00:f1:f8:9b:eb:50:
41:ac:93:ce:aa:f3:ea:8f:3c:27:ef:ac:4e:19:bc:96:04:d1:
3e:55:1e:71:f0:55:d9:49:51:9f:48:bc:b2:d6:4c:e8:c5:8b:
d3:bb:b2:32:eb:ba:ba:25:a2:d5:03:ea:ed:f5:7c:a3:34:1e:
86:7e:4a:cb:48:1f:48:9c:6c:c8:be:e5:cd:2a:53:6f:aa:33:
10:45:ee:b7:bc:c8:8d:2b:f1:29:75:33:d7:96:96:53:74:ad:
a5:67:09:c0:55:0a:c4:aa:bf:34:0f:5f:70:92:84:a8:a0:54:
70:3f:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:15 2026 by rpki-client