
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/6Q_BpbXUsvrPsOFl4qOPx16FNY0.mft
File: 6Q_BpbXUsvrPsOFl4qOPx16FNY0.mft (raw, json)
Hash identifier: YmgzMuRb8GqHJCDppkYa0CLlEpUtgk3lhcnAnU5zx9k=
Subject key identifier: EF:9A:4F:79:76:CE:9E:D0:44:48:5C:63:5C:C9:2E:A2:F4:AD:E5:E8
Authority key identifier: E9:0F:C1:A5:B5:D4:B2:FA:CF:B0:E1:65:E2:A3:8F:C7:5E:85:35:8D
Certificate issuer: /CN=e90fc1a5b5d4b2facfb0e165e2a38fc75e85358d
Certificate serial: 019F8EA25C6DD5647866D198303BAE91DC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Q_BpbXUsvrPsOFl4qOPx16FNY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/6Q_BpbXUsvrPsOFl4qOPx16FNY0.mft
Manifest number: 3E
Signing time: Thu 23 Jul 2026 11:00:32 +0000
Manifest this update: Thu 23 Jul 2026 11:00:32 +0000
Manifest next update: Fri 24 Jul 2026 11:00:32 +0000
Files and hashes: 1: 6Q_BpbXUsvrPsOFl4qOPx16FNY0.crl (hash: cclS4EsJ8CrmvudGvstBuQjN7c2Lf+c3ICmIuxVXgXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/6Q_BpbXUsvrPsOFl4qOPx16FNY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/6Q_BpbXUsvrPsOFl4qOPx16FNY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Q_BpbXUsvrPsOFl4qOPx16FNY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:5c:6d:d5:64:78:66:d1:98:30:3b:ae:91:dc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90fc1a5b5d4b2facfb0e165e2a38fc75e85358d
Validity
Not Before: Jul 23 11:00:32 2026 GMT
Not After : Jul 24 11:00:32 2026 GMT
Subject: CN=ef9a4f7976ce9ed044485c635cc92ea2f4ade5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:0b:bf:7b:ab:f6:3a:71:6a:57:25:2e:1a:
0d:ab:9d:8d:de:20:75:d3:9b:9e:fd:29:2b:13:84:
03:5a:7f:81:7a:8a:05:61:30:00:a5:77:70:3d:71:
e6:ad:a7:69:cf:d8:0a:64:9d:44:57:7d:a0:14:98:
3a:48:13:8a:33:9a:b5:b7:05:40:c9:12:2d:b1:97:
4a:9d:ec:0a:c6:ba:cd:d2:82:7a:6b:c7:69:ce:cb:
df:79:d2:0c:aa:7a:99:28:69:1f:99:e7:6d:d2:21:
58:36:20:b7:5b:46:7c:b7:ff:3c:b0:2a:90:43:81:
09:6d:5f:24:d8:7b:73:92:50:ae:1b:26:c6:6e:1c:
6e:a0:fc:b3:86:b1:fe:90:4c:8c:3c:a0:75:71:9f:
00:d7:a6:15:7f:38:b6:92:84:71:25:37:11:bc:e9:
81:f9:f2:0c:76:40:f2:a0:3e:3e:1e:7b:4e:b3:5a:
04:92:52:4d:ed:6f:7f:d1:0a:f4:d5:d4:ca:20:f5:
a1:45:ea:f3:84:2c:ea:0e:7f:71:0e:6c:53:b2:e1:
90:6b:29:a4:52:2c:e7:db:87:8b:a6:6c:e7:bc:ca:
f3:d3:a4:bb:60:13:59:3e:c9:6b:7c:3a:18:65:de:
b7:ae:97:0a:99:37:f2:dd:3f:5e:65:64:05:9a:4d:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9A:4F:79:76:CE:9E:D0:44:48:5C:63:5C:C9:2E:A2:F4:AD:E5:E8
X509v3 Authority Key Identifier:
keyid:E9:0F:C1:A5:B5:D4:B2:FA:CF:B0:E1:65:E2:A3:8F:C7:5E:85:35:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Q_BpbXUsvrPsOFl4qOPx16FNY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/6Q_BpbXUsvrPsOFl4qOPx16FNY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/6Q_BpbXUsvrPsOFl4qOPx16FNY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:61:2d:cd:fa:2f:e7:da:ef:d8:72:2b:69:77:d5:b5:75:12:
5a:e3:38:1c:fa:3e:88:e6:03:f9:8b:a1:b0:21:0f:08:f0:8f:
4b:43:9f:48:d2:37:2f:59:e9:aa:0c:1e:b9:e9:85:7f:94:d0:
63:e7:ef:bd:c0:8f:1f:4b:81:9b:10:79:b9:1e:3e:ee:cd:52:
de:02:46:05:ac:83:2a:ad:93:46:d2:f4:13:ca:d6:5b:a4:da:
d0:82:9f:e3:70:39:22:33:23:a7:35:58:9e:3f:47:da:50:94:
78:41:d9:48:5c:79:7e:f5:b9:c7:e8:90:8c:99:eb:c4:ea:88:
ad:87:49:b1:76:0b:e7:fc:ef:a8:0b:46:fb:29:bb:fe:a0:1d:
6b:6c:d8:68:5f:7f:8f:8e:52:f7:78:0a:51:a0:be:05:6b:0a:
d7:4f:f0:92:50:a2:a8:74:24:f5:22:31:ba:ef:84:f9:5c:d1:
02:11:e8:4e:50:d9:92:fe:14:00:38:0b:08:84:3a:1c:4b:d0:
d4:08:fc:2d:b2:1a:df:d9:ee:34:a3:15:23:49:30:a3:52:05:
ce:76:b3:35:67:88:51:34:48:b2:6b:16:4c:bf:b5:dc:3b:98:
09:2c:11:14:34:2c:3b:d2:ca:82:d8:12:35:45:7e:2e:fb:28:
49:46:85:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:44 2026 by rpki-client