Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: STSFzyzoK9j2meF612uVrJqAFxMXVQdhvidGD36gPf8=
Subject key identifier: 9C:08:EC:97:A9:D3:81:BC:E3:66:03:AE:6A:55:11:9C:E5:0F:34:EE
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 019F91DAA158C465D347D73AE036667AA7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 19C3
Signing time: Fri 24 Jul 2026 02:00:52 +0000
Manifest this update: Fri 24 Jul 2026 02:00:52 +0000
Manifest next update: Sat 25 Jul 2026 02:00:52 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: pxTXBnYLnl7xrLfBPIk7dJwnYFmr/JxTXEqeKbfS0p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:a1:58:c4:65:d3:47:d7:3a:e0:36:66:7a:a7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Jul 24 02:00:52 2026 GMT
Not After : Jul 25 02:00:52 2026 GMT
Subject: CN=9c08ec97a9d381bce36603ae6a55119ce50f34ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:69:84:c3:2c:55:41:00:aa:5d:ab:06:ad:fc:
96:df:e4:75:7b:7a:d1:2a:21:f7:5c:cd:f1:37:8c:
5e:ea:ba:69:1f:5f:1a:b4:d9:97:93:6d:e1:36:1d:
1a:bd:1c:b0:c6:cf:2d:1f:c7:94:f7:2f:0d:f3:e8:
11:12:98:b7:21:a1:67:14:2d:ec:db:9f:3c:73:55:
1f:a5:c6:c6:cd:ff:2e:f7:91:43:8d:59:86:d3:a7:
e8:77:66:9d:1d:94:52:75:00:c3:60:d3:4b:2a:ab:
d9:ec:92:8c:db:4b:15:ce:43:79:40:27:b9:05:fc:
31:55:ca:95:13:2c:f0:b3:e7:0b:13:04:7a:e7:d2:
0b:e3:23:cf:ac:ae:d0:79:87:96:e0:1f:1a:e1:fe:
a5:6b:97:2d:f6:99:da:fa:57:a4:fb:ec:d3:6a:71:
b9:0c:71:d5:6c:b4:d8:89:a2:51:cc:ba:3f:e6:f4:
3a:ab:3f:b7:3c:30:06:bd:e7:c5:d3:10:81:c3:18:
8d:53:d1:37:00:10:d4:0b:62:fa:52:63:0a:8e:c4:
14:ef:f0:c7:11:8e:61:de:e5:ee:e2:e0:be:29:13:
8f:54:bf:78:d0:00:45:52:87:cc:e0:c1:21:67:4f:
94:f2:61:03:fa:96:94:ab:39:8b:52:15:22:4a:7d:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:08:EC:97:A9:D3:81:BC:E3:66:03:AE:6A:55:11:9C:E5:0F:34:EE
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:31:68:22:1b:a6:97:04:e7:19:df:03:f0:8a:60:f8:ee:f9:
2c:d2:83:12:b5:ab:9a:00:ba:ba:01:02:77:0e:35:eb:66:40:
b0:06:c3:7f:9b:96:49:f6:78:28:8f:f9:45:b5:02:6b:eb:03:
4a:d3:db:40:07:21:7d:07:f9:48:15:ee:62:b9:1c:56:61:23:
96:5f:9d:97:f1:8b:69:ab:42:7f:97:df:0e:67:14:ba:27:7a:
23:73:d9:07:87:65:bc:1d:e0:89:af:23:32:ab:88:e9:40:4d:
b9:3b:b2:8c:66:e0:ca:8f:d8:4e:70:6a:fc:4b:9b:3d:81:b4:
93:e2:7c:4f:0a:e6:c4:ec:9d:62:28:66:25:2a:af:e6:f3:9f:
72:19:fe:de:2c:99:cf:65:2a:30:34:d3:b7:c2:1c:96:40:37:
2f:00:51:29:d2:36:e3:09:b4:31:9b:7e:60:0a:e9:d0:e0:aa:
96:73:83:57:4b:c5:0c:40:4d:d8:9f:dc:c7:8f:4f:f1:f8:35:
bb:a9:09:f2:d0:78:69:74:7d:86:27:a0:29:15:17:c5:ec:8b:
e3:63:f1:66:39:af:ae:27:a6:d9:74:19:2b:52:85:61:db:ee:
a3:0d:d7:b0:be:4a:7e:38:c3:a7:c7:de:22:d0:5c:12:8a:77:
a2:07:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:07 2026 by rpki-client