Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier: YSoaIjD1GHUKp6RU2t3foqdttW4hSLQCwbiSA5COKRM=
Subject key identifier: 97:1A:34:84:D9:88:44:09:1A:E3:78:DD:EB:F1:E7:AF:F1:AE:68:08
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer: /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial: 019D98F4D6487B5AFAB302B6300B0C15FFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number: 0948
Signing time: Fri 17 Apr 2026 01:01:15 +0000
Manifest this update: Fri 17 Apr 2026 01:01:15 +0000
Manifest next update: Sat 18 Apr 2026 01:01:15 +0000
Files and hashes: 1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: FU3Atg2BkV8eC7LIu0Cn7WfnNR9stF9vz/wO0gZ55NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d6:48:7b:5a:fa:b3:02:b6:30:0b:0c:15:ff:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Validity
Not Before: Apr 17 01:01:15 2026 GMT
Not After : Apr 18 01:01:15 2026 GMT
Subject: CN=971a3484d98844091ae378ddebf1e7aff1ae6808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:79:db:15:7a:92:70:ec:33:ba:b4:de:29:
22:1d:b2:33:e8:2b:f7:77:6d:8e:6a:ae:dd:13:5e:
a3:11:22:a8:a4:12:e7:77:50:e8:58:a1:cf:ad:7f:
4c:3e:c7:0f:23:d5:4c:d6:1b:44:70:e8:a2:0f:f5:
b9:51:4d:8e:1f:fa:44:2c:4f:89:22:94:7a:f7:aa:
51:98:5a:74:94:0b:db:01:6c:bf:08:66:69:17:da:
c1:85:7b:ed:88:ba:b4:71:ef:ee:17:2a:d1:63:b6:
5a:e4:ab:9c:c3:35:3c:b8:9f:13:76:b2:be:a6:70:
b8:c1:16:35:b2:4d:35:16:dd:b3:ca:14:7b:74:33:
5e:e3:ca:39:56:d9:56:7a:61:ba:e5:e0:a3:4b:5b:
f5:52:1d:96:2c:d1:63:90:5a:8e:3d:b3:4b:35:a7:
24:ca:32:a8:eb:10:35:80:4e:80:99:29:0c:83:07:
e6:ba:b3:54:81:62:74:cc:27:57:83:fd:a1:64:55:
f2:ab:8b:5f:e9:99:0b:3e:55:7a:0c:f4:dc:a0:6e:
77:1f:b8:79:92:9c:b0:22:16:66:c9:a5:0f:5b:91:
f9:7b:01:ca:ef:1c:b6:20:11:fa:1b:d8:6b:03:9f:
36:bd:c0:cc:74:85:38:07:32:14:6f:1b:e4:0e:39:
40:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1A:34:84:D9:88:44:09:1A:E3:78:DD:EB:F1:E7:AF:F1:AE:68:08
X509v3 Authority Key Identifier:
keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9d:24:a0:57:ac:78:5e:73:5d:81:cd:39:ab:01:64:b3:b9:
5c:01:f4:5e:a9:63:9f:52:55:bf:b5:69:fb:88:08:6b:ad:71:
8c:05:33:cf:a2:9c:26:d8:90:45:d8:e6:c8:01:28:c9:10:f9:
00:22:32:b7:62:11:78:04:83:98:30:a6:af:15:53:e2:20:09:
ec:18:6c:d2:d9:80:23:2c:6d:34:25:1e:7b:56:6f:1a:35:76:
d5:81:f8:bb:4b:46:39:42:7d:11:72:e1:a3:a4:3a:69:b0:3f:
9f:5f:67:31:a6:86:6f:d4:a1:bd:74:f1:69:b1:25:ad:68:26:
d8:5f:cd:c4:86:99:d4:b4:b0:df:70:1a:af:83:96:5b:ff:32:
ca:f5:c7:3a:86:90:b4:dd:93:8a:a3:b0:46:12:da:d6:1d:d2:
25:33:44:4b:6d:1d:82:0d:a7:80:aa:6d:93:04:fb:27:13:e1:
d6:12:51:ac:ec:74:9c:a9:7e:39:2a:c0:78:7a:a4:de:e6:ab:
ab:dc:ae:a1:03:ab:e0:b3:5a:59:cc:ba:d0:1b:94:0f:21:3a:
91:ff:69:e1:63:31:23:c6:bf:91:5e:63:54:25:c8:1e:a0:8c:
07:7b:33:ae:b6:4f:a8:38:fc:5c:5c:2e:e5:63:85:50:ab:14:
4e:57:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:16 2026 by rpki-client