
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier: Io472JfQoM/Ut5tucY9fEVFrajwe3bxMmONGiPpHrho=
Subject key identifier: 98:48:31:EA:3B:A2:61:0E:79:14:F6:81:F2:52:DD:75:C9:1C:80:76
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer: /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial: 01A0C21F7161D209FF56A109A35DE2DCA58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number: 0AEB
Signing time: Mon 21 Sep 2026 04:00:35 +0000
Manifest this update: Mon 21 Sep 2026 04:00:35 +0000
Manifest next update: Tue 22 Sep 2026 04:00:35 +0000
Files and hashes: 1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: 9URynKWvhlNVDfgccNJiWbABgxxARNhpaMSlXECzOrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:71:61:d2:09:ff:56:a1:09:a3:5d:e2:dc:a5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Validity
Not Before: Sep 21 04:00:35 2026 GMT
Not After : Sep 22 04:00:35 2026 GMT
Subject: CN=984831ea3ba2610e7914f681f252dd75c91c8076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:21:60:b3:d9:0e:7e:cc:62:c2:b7:5f:17:
7b:4f:2e:18:ff:66:8f:d6:a7:ca:eb:38:d7:8d:b5:
9d:4c:04:51:f2:05:50:e3:e3:c2:11:88:d7:bd:73:
21:5f:83:f7:e0:f8:89:71:71:41:bf:cf:61:d9:3c:
9d:f1:0f:22:41:50:c9:91:94:a1:3a:e9:58:ae:99:
e5:24:c5:72:a7:3c:c8:bb:78:53:75:e5:bd:49:d4:
f3:ac:36:d4:ff:bd:7b:bc:c0:e5:98:7b:11:bf:62:
42:f1:3e:5e:03:94:5a:78:79:dc:ee:5b:c5:bf:21:
f0:99:4d:c4:3e:8d:15:d7:26:90:83:85:da:bb:28:
fe:a5:b6:4e:8f:aa:ed:8b:0a:6d:fb:b2:af:1c:54:
84:c3:bf:9a:83:a0:2e:db:84:2f:e5:c8:9e:0b:10:
0c:c0:f0:a1:1a:c6:8a:df:50:c1:bd:7f:da:67:b5:
47:95:e5:c9:85:c2:17:e4:0d:e8:85:b5:2f:20:0b:
0c:e5:0e:6e:14:bf:61:41:d2:96:4e:ca:8b:83:48:
6e:ed:ab:e1:87:a0:c5:bf:c3:fd:f0:fa:c6:67:2c:
94:70:f5:e1:ad:1f:b9:eb:18:71:f9:90:07:a4:9d:
24:0d:df:fd:34:0d:77:70:01:d2:2f:01:cc:8b:50:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:48:31:EA:3B:A2:61:0E:79:14:F6:81:F2:52:DD:75:C9:1C:80:76
X509v3 Authority Key Identifier:
keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dc:95:09:b7:9d:6e:63:e2:09:42:75:14:6e:8e:13:c2:6b:
16:df:a5:df:9f:10:8b:79:c4:1b:59:8b:47:0b:ad:fe:2e:4b:
ff:1e:c8:be:8b:25:00:75:95:14:74:9b:14:80:aa:d8:62:a5:
df:b2:4a:4b:ae:1a:00:39:e9:16:c4:8e:3b:b8:9e:32:cf:63:
3f:fa:12:25:c4:9b:26:8d:55:8f:c0:94:da:dc:c5:43:78:06:
e1:5d:3e:94:65:52:6c:c2:83:51:95:1c:00:b6:d6:b4:bd:d9:
dd:b8:43:27:49:96:72:71:81:1f:3c:f0:4b:82:ea:9f:4e:7d:
05:71:53:31:23:dc:6b:95:da:96:6c:ea:3b:9d:86:2b:4e:ab:
3a:ee:29:6d:a0:7b:1b:e9:3e:a0:bd:76:ff:f8:8a:29:63:a8:
29:8a:02:b6:70:59:77:cd:b5:a0:73:17:c9:ba:22:ff:88:ec:
7a:65:a7:d7:64:d7:b4:43:10:ea:63:48:e2:3f:f5:61:75:f6:
8d:44:6f:cc:7a:9b:24:f0:02:78:a7:c0:ed:d8:b3:56:ee:ba:
2c:4f:8d:6d:7d:40:84:e3:70:55:38:53:ba:aa:89:28:08:d9:
fd:08:b5:f9:a9:23:ef:3a:2c:39:3f:c1:dd:1c:cf:5a:ca:06:
9c:ae:a2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:29:43 2026 by rpki-client