Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
File: C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json)
Hash identifier: kXk1X7Umi2XAsyEkcnqQk57LZ1kpKOWM4ZQ7frKV+F0=
Subject key identifier: 61:2D:CA:52:61:A1:21:45:C9:4A:8C:AF:DD:2F:7A:79:12:75:8F:B4
Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
Certificate issuer: /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Certificate serial: 019D9A3E347CEBF3130267DBDA9302B5508C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
Manifest number: 0FA1
Signing time: Fri 17 Apr 2026 07:01:01 +0000
Manifest this update: Fri 17 Apr 2026 07:01:01 +0000
Manifest next update: Sat 18 Apr 2026 07:01:01 +0000
Files and hashes: 1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: YCMBlqJa6U10iNC9IYIEBy0JuXsbcq5rM3p6JqRdSnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:34:7c:eb:f3:13:02:67:db:da:93:02:b5:50:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Validity
Not Before: Apr 17 07:01:01 2026 GMT
Not After : Apr 18 07:01:01 2026 GMT
Subject: CN=612dca5261a12145c94a8cafdd2f7a7912758fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:97:b1:2f:1a:ea:07:91:36:c1:76:33:7f:
53:71:ba:d4:8a:c0:24:f9:c2:38:ba:bd:6a:7d:19:
98:ed:40:65:bd:ae:31:2a:3b:f0:db:27:70:0e:92:
00:49:92:9e:b1:36:25:8f:30:1f:51:e9:6d:90:1a:
60:af:22:73:02:63:9c:04:df:e3:0e:4b:6a:8b:12:
0c:8c:2c:ff:0e:09:3c:6e:1b:58:8d:e4:65:72:8c:
35:df:2f:c5:7a:99:5f:23:04:be:2a:62:16:14:44:
d0:25:ae:42:cc:27:fc:61:27:c6:22:0f:2b:62:5d:
4d:bd:b8:af:46:3d:e0:b1:43:39:61:6b:c1:e7:4c:
33:45:91:c1:3b:23:7a:1d:ed:30:60:01:54:72:aa:
a2:33:9d:46:56:05:4e:c0:0a:2c:ac:74:42:f6:1d:
ff:0d:16:f9:83:c4:2e:58:b0:c3:b8:53:94:ec:ed:
e7:73:7f:7a:c7:de:2e:55:4a:f7:a4:84:01:20:a1:
28:de:03:ff:cd:7f:c3:4b:45:4d:8a:03:fb:ff:9b:
c8:7f:1f:8f:44:83:1b:54:ab:e6:fa:96:fb:8f:ba:
1d:5c:09:13:0b:68:be:a4:e5:1b:27:e3:5f:dd:fc:
f9:6a:f4:9c:25:47:e0:68:7d:fc:b2:7a:bc:be:0c:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2D:CA:52:61:A1:21:45:C9:4A:8C:AF:DD:2F:7A:79:12:75:8F:B4
X509v3 Authority Key Identifier:
keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5a:28:5b:d9:a3:9e:f0:90:cc:99:0e:bc:a8:3e:ec:75:82:
38:6a:b7:af:91:8e:71:07:d5:f7:cc:49:02:8a:9a:04:6a:b4:
98:74:f6:3b:41:2b:e9:ac:19:20:f2:fd:1b:5e:18:b6:35:84:
8f:69:85:d0:27:cc:e0:14:08:d5:fe:6f:9b:bb:3d:27:38:fa:
73:d5:3f:d0:44:97:43:a0:47:85:2b:98:4f:21:26:fa:96:62:
41:d9:14:b3:a5:08:4c:5c:84:80:49:d6:e3:a0:98:94:19:47:
61:49:a0:fb:33:ca:de:f9:31:c7:ce:ee:8e:c2:e1:34:d0:00:
3a:04:ed:47:12:17:22:07:0b:20:8e:13:8b:21:47:b9:74:bd:
50:98:21:6e:86:fc:1b:15:ea:9b:bb:17:21:57:9c:ab:0b:7a:
4a:76:ab:58:b2:8a:c1:5d:ad:17:85:71:3a:5f:8f:ca:95:a9:
0a:50:5c:69:bd:2e:57:45:e2:cd:b9:30:8e:02:60:cd:40:11:
89:93:07:6f:41:c5:0c:23:df:df:a8:b2:9e:56:92:cd:e1:83:
d5:db:96:52:45:28:28:bc:ef:8b:61:3d:cc:6a:ae:56:f1:49:
a6:8a:39:83:1d:a3:ac:36:82:da:fc:9e:22:9d:4b:96:25:c0:
76:d6:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:22:43 2026 by rpki-client