
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft
File: 6h-diwo3ikLxlEBBkUVJTlRgQMc.mft (raw, json)
Hash identifier: kc0TjQOCD0XozR5zLwf9gGj32f8Co6cQ1Rb4wgdaAjg=
Subject key identifier: F4:B1:F3:4D:1B:68:78:F8:7C:EC:80:06:23:90:3E:39:60:60:82:18
Authority key identifier: EA:1F:9D:8B:0A:37:8A:42:F1:94:40:41:91:45:49:4E:54:60:40:C7
Certificate issuer: /CN=ea1f9d8b0a378a42f19440419145494e546040c7
Certificate serial: 019F9091680B7BA424E7020307E9EEE55878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6h-diwo3ikLxlEBBkUVJTlRgQMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:01:16 +0000
Manifest this update: Thu 23 Jul 2026 20:01:16 +0000
Manifest next update: Fri 24 Jul 2026 20:01:16 +0000
Files and hashes: 1: 6h-diwo3ikLxlEBBkUVJTlRgQMc.crl (hash: QQwz6VSasIB/tDFKJOhbfvhOu7afWR2yrG4LqZRv3Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6h-diwo3ikLxlEBBkUVJTlRgQMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:68:0b:7b:a4:24:e7:02:03:07:e9:ee:e5:58:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1f9d8b0a378a42f19440419145494e546040c7
Validity
Not Before: Jul 23 20:01:16 2026 GMT
Not After : Jul 24 20:01:16 2026 GMT
Subject: CN=f4b1f34d1b6878f87cec800623903e3960608218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:11:41:ab:c0:53:15:e7:cb:b0:0e:e5:84:
2e:18:c6:e8:83:cc:82:cb:85:4d:25:a3:11:bd:40:
fa:13:90:8c:da:85:58:6b:ea:2b:f4:7a:2e:c2:ae:
68:e1:8e:65:49:76:21:42:40:b9:c3:b0:2b:f4:17:
5f:e1:44:f8:de:0e:86:28:c3:19:65:4f:d9:17:b9:
02:5c:41:e8:22:c8:ad:d7:92:2e:83:ae:7b:09:62:
26:3f:8b:a1:2e:cb:50:63:37:e7:c1:c5:6d:03:52:
2b:47:52:75:ff:61:c4:c9:8d:bd:ac:f0:83:62:43:
47:5e:15:9f:46:60:53:17:c3:3b:5e:45:af:95:85:
e7:61:cf:9b:da:3e:36:34:55:65:ac:a4:74:a6:1f:
97:22:23:ed:bc:11:b9:16:5c:d8:32:a3:a8:c7:f2:
8d:ff:ff:7a:50:42:83:87:ed:23:b1:c9:d1:4d:1b:
98:ae:e4:7d:73:d3:de:45:df:f7:ba:6f:cc:8b:d4:
7a:da:c2:bd:ff:d5:e6:96:77:2f:4c:82:44:41:55:
d9:c6:68:1f:2c:db:7f:b2:ce:b1:86:27:a8:23:ea:
92:a5:0f:e2:9d:97:6b:c2:c3:cc:4d:9d:ca:1e:53:
92:24:ca:21:d4:37:34:88:a3:41:45:6f:cf:ec:79:
8f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B1:F3:4D:1B:68:78:F8:7C:EC:80:06:23:90:3E:39:60:60:82:18
X509v3 Authority Key Identifier:
keyid:EA:1F:9D:8B:0A:37:8A:42:F1:94:40:41:91:45:49:4E:54:60:40:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6h-diwo3ikLxlEBBkUVJTlRgQMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/6h-diwo3ikLxlEBBkUVJTlRgQMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c1:b1:c9:44:02:a9:90:a9:54:54:34:e8:fe:21:37:e0:77:
9f:a2:ea:ab:b8:ab:d4:36:34:99:93:7d:23:4a:15:4d:2b:0b:
c7:0d:3c:63:32:93:48:f8:b7:d0:c0:a9:d0:be:41:a9:05:b5:
8a:8b:db:5d:5e:fd:f3:b1:6c:63:a7:9b:29:ac:2e:a7:60:62:
54:86:64:84:1e:27:fc:6f:78:3f:66:b3:8e:3c:00:d2:f6:38:
fd:2d:ca:d7:02:5a:68:8d:7d:04:de:eb:31:45:2a:d5:9a:3c:
be:19:b2:e0:0a:1b:12:61:57:04:21:70:6f:43:b4:37:8c:3e:
ec:d8:7b:ce:ce:30:de:be:02:d3:59:df:3d:e6:8a:f6:29:ff:
2e:c8:b1:11:67:fe:08:cc:2c:1e:7f:ac:1c:d6:e7:92:0e:30:
96:10:c2:a8:c0:2d:0d:f1:13:cc:f2:98:b4:86:8d:eb:94:9e:
d7:33:84:ed:e2:fd:e3:b3:17:94:61:a3:53:da:8a:c7:50:aa:
86:3a:ba:a3:66:d0:a6:f1:6e:75:ea:2b:6b:5b:3b:93:18:2b:
ce:bf:5d:f1:eb:6b:de:99:57:12:66:69:50:94:5e:56:fa:34:
a0:ef:cc:47:87:48:6c:71:ef:7e:0d:8e:a1:d3:2f:b1:de:56:
af:59:90:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:03 2026 by rpki-client