Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: 4SAZuiETMSIQu3pc6BSRwchIKScALs+1HGmH9qblmMA=
Subject key identifier: 63:66:CC:96:0D:38:C7:3C:4F:7A:97:46:57:4C:6C:6D:39:3A:14:CF
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 01A0D1931464A0F79C2F43E5A9560B8DD761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 1189
Signing time: Thu 24 Sep 2026 04:01:12 +0000
Manifest this update: Thu 24 Sep 2026 04:01:12 +0000
Manifest next update: Fri 25 Sep 2026 04:01:12 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: XnFWf2UDJHEPqo1OcfuJ5iKQEp4uKT68HsxGa/p5GXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:14:64:a0:f7:9c:2f:43:e5:a9:56:0b:8d:d7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Sep 24 04:01:12 2026 GMT
Not After : Sep 25 04:01:12 2026 GMT
Subject: CN=6366cc960d38c73c4f7a9746574c6c6d393a14cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:e4:50:7c:3b:10:df:62:6b:ad:c3:33:e3:
1a:99:50:0a:fd:c2:ad:e7:84:0a:18:e4:9b:c2:c1:
56:a2:fd:ef:37:21:49:00:ec:4a:63:c9:0e:b8:cc:
39:0b:47:f7:ca:97:79:2f:ec:88:70:be:00:46:e6:
35:65:63:9c:4e:b3:16:8f:9f:2c:94:03:f3:20:b0:
03:33:95:28:52:57:13:51:0c:c4:4d:9b:32:2a:d5:
db:c3:b3:1a:37:e2:ee:9d:9a:9a:e4:e9:87:6f:62:
32:43:0f:69:2a:3a:6b:b8:85:cf:d9:0d:9d:93:ef:
22:d6:aa:d7:b9:49:fe:1e:d7:2b:70:97:32:4e:d5:
d8:87:8d:06:1f:a0:95:6c:3a:5d:6f:1e:34:d8:03:
79:95:54:42:b5:3c:b2:e2:78:76:3a:80:fa:e6:b2:
81:d9:e0:0a:cb:a1:da:3b:f6:87:8a:57:16:b8:14:
b5:92:f2:29:fa:dd:ab:32:a8:03:34:17:bf:2d:b9:
75:08:56:5f:3f:fa:bf:34:d2:3a:2c:93:cc:aa:47:
10:11:2f:56:be:ff:0f:bd:ed:7e:1d:18:54:7e:01:
d5:32:e6:42:74:f5:0d:a4:d1:ad:b8:ae:dc:d9:b4:
84:5b:b4:53:c8:93:ea:7c:c0:3f:f5:08:3a:33:28:
06:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:66:CC:96:0D:38:C7:3C:4F:7A:97:46:57:4C:6C:6D:39:3A:14:CF
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d9:f4:b5:f9:d5:43:83:5a:b4:67:0e:e2:98:1b:17:35:16:
81:27:3e:49:0b:57:af:a4:be:16:31:92:80:7b:9c:2b:fc:d2:
fb:16:8b:c3:4a:2d:38:40:e7:3b:26:3b:fd:fa:5c:a4:01:f4:
02:c0:6f:f8:d6:9e:b4:ab:69:39:68:e1:c6:31:93:0d:58:6f:
12:5f:2b:3f:36:97:e0:1a:8a:78:35:bd:8a:04:e3:e0:fa:47:
60:27:44:e0:e6:e8:41:3c:d9:7b:9e:db:fc:62:b9:c6:89:b9:
08:7b:db:d6:50:e7:39:a2:25:93:c5:ea:76:ea:b4:4e:02:cb:
6f:ae:41:29:4b:f8:e8:bb:e4:4a:ba:1e:17:d3:fd:f4:db:88:
76:29:f0:ad:d7:fe:9f:02:dd:67:8d:8b:bf:eb:f5:70:6b:32:
03:19:41:7f:5b:46:61:95:96:6c:f9:42:1e:04:e8:57:76:15:
ae:b3:49:9c:80:a5:6a:2f:1a:85:ec:ba:13:0c:ba:79:6b:0e:
5f:75:1f:60:65:d7:af:cd:de:25:72:6b:1d:61:e9:c0:20:87:
13:38:43:1a:0f:e6:73:fd:fd:c3:6d:5c:f5:36:e3:57:3c:b3:
5d:0b:c8:91:81:5b:a2:bd:c6:95:62:ed:2e:11:29:67:00:b0:
9e:72:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:15:49 2026 by rpki-client