
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier: o6AWt3XyioDdtrXlL1Fbxc1wNm9Qnw0HAvHvkRtLAdg=
Subject key identifier: 71:36:EA:15:38:3A:A1:A0:72:9D:0D:8E:01:21:96:26:41:66:5B:DE
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer: /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial: 01A0CDB5A738667E8D51A50BEF9485E1FA6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number: 07A4
Signing time: Wed 23 Sep 2026 10:00:29 +0000
Manifest this update: Wed 23 Sep 2026 10:00:29 +0000
Manifest next update: Thu 24 Sep 2026 10:00:29 +0000
Files and hashes: 1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: 7UBWzDJvK0W1fSnjrZvJy/1U9rJhMjc6NT4sWoUpMQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:a7:38:66:7e:8d:51:a5:0b:ef:94:85:e1:fa:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Validity
Not Before: Sep 23 10:00:29 2026 GMT
Not After : Sep 24 10:00:29 2026 GMT
Subject: CN=7136ea15383aa1a0729d0d8e0121962641665bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:57:41:05:2f:b4:56:04:55:e8:c5:2f:f2:01:
50:ab:0b:2e:9e:85:53:f4:23:1c:75:0f:fc:17:b5:
2a:af:02:45:a4:52:c1:2a:67:d8:07:18:3b:3e:c9:
61:81:ec:40:f0:41:66:16:5b:dd:83:af:ac:7b:cf:
81:17:9b:50:fc:de:e1:0e:88:f1:78:cb:09:3f:36:
86:6d:d2:2b:69:7d:4b:8e:b0:4e:92:14:1e:02:5f:
69:55:75:74:de:01:08:1d:8b:d5:19:2c:cc:b0:a1:
64:31:eb:ad:5a:16:98:1d:28:d6:66:63:d7:93:c5:
da:58:51:ab:e4:8a:c3:75:34:df:e2:ed:f1:ce:17:
4e:57:07:a2:ac:18:4f:9d:56:f7:48:67:e0:08:db:
4a:83:99:9a:3b:bc:da:ec:05:3c:cc:ed:50:e3:1e:
a7:ab:56:75:16:0d:39:26:37:80:59:12:c4:95:79:
1e:41:55:66:79:3e:32:5c:68:a6:14:e6:17:65:1b:
89:0e:7d:a7:a8:90:d0:c9:7c:f4:a8:33:35:62:ab:
71:50:66:ea:a2:b0:ab:59:e3:71:3e:a5:13:37:0d:
d0:58:ec:b0:9f:fd:77:2d:44:26:5c:b1:59:59:9c:
a9:80:bf:26:da:72:c0:99:e3:80:20:27:38:1f:56:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:36:EA:15:38:3A:A1:A0:72:9D:0D:8E:01:21:96:26:41:66:5B:DE
X509v3 Authority Key Identifier:
keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b5:cd:40:fe:17:af:42:a9:bc:5f:2d:0a:57:07:45:5c:13:
26:3a:c4:f3:77:d2:83:9e:d3:76:4b:74:f5:78:b4:c2:72:a6:
a0:c4:bc:54:88:aa:70:58:7c:44:39:84:c0:23:e1:9c:2f:b6:
13:df:1b:c7:b7:59:e3:cc:fb:58:a7:10:64:b6:84:a9:ff:97:
d9:de:79:e1:db:3b:9b:17:e7:7a:0b:b0:9f:03:10:ff:54:b4:
85:78:21:81:22:c3:8a:45:46:9f:cf:b7:31:45:d9:11:5d:dc:
20:99:70:ab:0f:fd:57:4e:05:fe:fb:97:bf:5f:bf:b0:1f:56:
0a:a6:c5:86:7b:cd:d7:65:f1:9c:2c:02:5f:6b:b8:b3:9f:d5:
66:aa:b9:78:b6:c9:cb:ee:e5:c7:6b:82:75:df:b4:98:2b:96:
3e:b4:cc:99:65:67:e8:27:b8:99:3c:31:17:be:79:2f:7b:65:
c4:9a:2f:51:dc:7c:08:df:bf:b1:5a:26:1f:99:4a:c0:7b:87:
52:bd:4e:47:b5:0e:84:f0:87:50:39:b2:3b:c0:4a:45:dd:eb:
64:eb:ee:0a:30:d1:f8:13:c4:db:79:82:4f:41:8e:94:65:93:
20:d4:8f:be:ff:82:74:04:88:e2:c8:c4:72:3b:d1:d7:20:df:
e0:0a:46:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:21:17 2026 by rpki-client