Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: 3E/vL24uC2ak+WPwz2z5+fzpbCzTPBjvuo5A1H2Pyfc=
Subject key identifier: A0:4F:72:5E:8F:DE:4C:70:11:7D:7B:3A:69:14:C9:81:45:E0:A9:36
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 019E1F110CBEF1916B31DA1992EA47E4660C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 1903
Signing time: Wed 13 May 2026 02:01:11 +0000
Manifest this update: Wed 13 May 2026 02:01:11 +0000
Manifest next update: Thu 14 May 2026 02:01:11 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: ya0aTGubrX/ATJcVJGUvRYtlw4Prh/rOFyHAd002EfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:0c:be:f1:91:6b:31:da:19:92:ea:47:e4:66:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: May 13 02:01:11 2026 GMT
Not After : May 14 02:01:11 2026 GMT
Subject: CN=a04f725e8fde4c70117d7b3a6914c98145e0a936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:2d:d3:0e:1a:d0:2c:0a:17:11:99:c5:35:
07:c4:c8:2a:a5:be:96:9d:07:90:04:24:d4:a5:4e:
b5:c7:39:ef:d9:0a:9c:c9:da:90:e8:74:91:54:fa:
0f:96:1f:12:30:18:f8:01:ff:05:45:65:bb:03:4e:
e6:18:03:0d:31:76:a3:cd:34:bd:ee:bb:4f:ff:44:
ba:1d:3a:7a:9b:dd:1e:38:4a:50:09:a1:e0:d2:71:
2e:0e:cb:f4:07:81:5b:e2:22:a9:60:d1:d0:e8:1f:
de:27:39:04:21:30:5f:d8:1c:4d:09:f9:6b:10:07:
2b:d4:74:78:fc:00:ac:05:ef:6b:c7:86:02:4d:65:
7f:39:44:8d:4d:14:76:7d:8e:51:de:77:0a:5f:7b:
d6:de:a4:77:0b:65:a6:a2:51:09:f0:b3:2e:21:90:
a2:d2:2d:fb:89:79:2f:7c:fc:65:f8:b8:76:b4:1c:
2f:25:41:1c:3e:21:32:b8:08:b8:89:c6:1f:e0:7d:
17:66:d3:48:e5:97:e8:c9:fc:c1:8d:cf:9e:e0:f9:
33:0f:bd:df:5f:60:4c:18:ef:46:c8:28:a7:02:12:
a4:c1:3c:68:a6:78:b9:73:69:82:49:61:23:21:c9:
f6:dd:89:70:2d:1c:81:d4:4c:42:56:0d:3d:85:b3:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4F:72:5E:8F:DE:4C:70:11:7D:7B:3A:69:14:C9:81:45:E0:A9:36
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f7:42:16:09:a8:14:aa:65:8f:b6:1e:fe:20:63:43:d1:aa:
64:8a:1a:26:28:c8:c9:b2:2a:a1:6a:43:89:14:ef:ab:83:67:
26:76:ba:ea:62:85:79:eb:15:d8:1f:68:3e:aa:6c:f5:ed:78:
7f:13:c1:e6:72:d0:ac:da:da:c5:fd:57:75:8f:a9:bb:01:e2:
b5:28:04:88:ff:96:df:79:40:90:aa:eb:e3:24:40:77:a5:0d:
c5:e0:a1:9a:02:af:c7:56:0d:02:87:d1:e4:bf:d7:1e:5b:72:
c6:71:8f:b7:d3:2d:20:24:b2:88:a9:d2:4a:1d:26:bb:f8:a7:
33:b3:a5:b0:60:5a:1a:c3:47:de:fe:88:fe:33:e0:6d:61:94:
b7:3b:40:d7:74:59:60:e8:bb:25:a4:09:a4:e2:0a:67:27:cd:
b9:fb:5a:6a:da:c1:e4:a0:d6:91:5e:23:8c:1e:00:84:d2:fa:
4c:a1:4f:2b:48:30:18:b5:05:da:44:5b:82:60:b0:7b:50:90:
ae:1a:27:88:64:28:02:a5:a5:d8:05:28:9d:7a:2f:42:15:de:
4b:bc:32:bb:d0:e5:33:0f:b5:e2:82:9f:29:da:f0:90:0a:02:
5a:6e:42:4b:3f:eb:74:0b:82:e6:7d:cc:7e:f4:36:11:65:5f:
00:00:c9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:45:06 2026 by rpki-client