Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: 6Tsbta/pZzrxh7jsu0GhGpKVSR/DySWHcylPjLc4Dd0=
Subject key identifier: E5:D2:49:7C:71:6E:72:79:07:07:12:4C:8C:CD:C2:57:C6:04:6C:2D
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 01A0DA287DEAF02F65910A5E4F632EE3D7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 1A6D
Signing time: Fri 25 Sep 2026 20:01:21 +0000
Manifest this update: Fri 25 Sep 2026 20:01:21 +0000
Manifest next update: Sat 26 Sep 2026 20:01:21 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: XxeH+PWQKQe7xKqfwPdb/HEB+JKt7fMrCGkXmXrz/1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:7d:ea:f0:2f:65:91:0a:5e:4f:63:2e:e3:d7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Sep 25 20:01:21 2026 GMT
Not After : Sep 26 20:01:21 2026 GMT
Subject: CN=e5d2497c716e72790707124c8ccdc257c6046c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:d5:ca:1f:42:e7:76:0d:e7:b4:f6:25:b8:
38:b7:81:bb:50:ca:3a:96:1c:e8:90:4a:cf:99:65:
2a:6f:5c:08:75:96:9b:bc:42:dc:09:ce:fa:f4:17:
9d:f9:0b:e6:15:9e:58:c7:86:c9:89:e5:29:43:1b:
c1:bd:41:e0:6c:93:88:a8:bb:42:90:73:90:1a:14:
64:85:01:f6:40:6b:15:12:c2:9e:9f:f0:98:63:57:
9e:75:cd:5e:56:22:0e:72:9f:47:33:41:90:e7:3b:
f3:ce:3a:bc:9d:e7:7e:bf:03:fa:67:78:9e:37:6d:
6b:92:b1:a1:87:0d:b0:14:50:17:c4:57:68:dd:6e:
de:fc:3e:1f:cd:db:91:e6:3d:d5:98:87:f8:44:88:
82:d5:2e:47:ae:c0:84:b4:fc:0a:fa:41:72:1a:da:
ac:d7:fa:7f:00:f2:a3:41:bd:f7:b2:ec:11:0c:e3:
5f:c8:24:20:0f:1b:69:be:ad:e0:b0:2b:73:d5:ca:
99:27:f3:73:01:10:9a:c9:19:05:bf:63:5c:10:55:
44:5c:15:d9:37:95:dd:32:5c:f2:df:35:71:7a:21:
51:99:eb:46:8f:72:2e:ef:76:fc:c8:5a:f5:7e:4c:
6f:c0:2f:c7:7d:c6:6b:0a:5c:a2:f7:cf:44:0c:ad:
0c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D2:49:7C:71:6E:72:79:07:07:12:4C:8C:CD:C2:57:C6:04:6C:2D
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6a:74:38:72:be:91:ff:96:da:81:b4:bb:05:ce:3f:df:55:
2d:b5:12:9b:e7:7b:4a:2d:6b:5e:56:6c:95:d9:c1:4c:cb:97:
a7:a4:37:80:35:76:d5:56:cf:b4:e9:9d:99:a6:ad:de:20:29:
2a:f0:c4:7b:1f:91:d6:32:29:09:d9:98:a9:7d:05:44:68:12:
e3:21:32:92:e6:67:a6:78:47:be:bd:db:ed:fd:5b:a7:d2:0c:
5b:2b:9a:d8:ad:e4:d4:83:f8:a2:42:c7:18:aa:25:33:9d:a0:
db:4b:a2:cc:b7:0e:73:5b:a9:23:b8:43:dd:be:59:38:0f:cc:
0a:ac:58:6c:6b:b3:d8:75:76:62:da:c8:5c:57:a3:2f:83:d2:
3b:7f:e6:16:dc:e5:7e:77:39:3e:ad:00:d1:29:3b:80:af:e3:
d6:fa:2b:18:30:1d:0f:8b:0b:af:8f:cb:e0:47:f2:33:4e:a6:
11:fa:67:25:4a:87:13:dd:71:fb:aa:50:f1:b7:17:51:92:b5:
64:95:19:8f:63:51:b6:29:b4:58:c2:c8:73:3f:2f:d6:49:71:
41:3d:fb:22:8d:3b:c0:2d:40:29:38:5f:9a:a4:3b:e4:2b:84:
1c:b3:61:d0:b6:b3:52:6a:bd:9e:eb:3c:bf:1b:01:83:e2:43:
43:f4:97:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:58:23 2026 by rpki-client