Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: 5pA4Tw3zBkULPUV48+W5tha5f0j2G8VSBl0pOrGILbQ=
Subject key identifier: 66:93:B3:30:95:97:03:7D:65:64:D3:72:81:24:3F:88:E2:C2:C7:40
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 019F8F0FFDFDD814073B0EFBF68FFC84499D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 10E2
Signing time: Thu 23 Jul 2026 13:00:17 +0000
Manifest this update: Thu 23 Jul 2026 13:00:17 +0000
Manifest next update: Fri 24 Jul 2026 13:00:17 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: D/CQlSoPnU9OnOrIYgj61qJ7gca38d2zX+mxxP8DtJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:0f:fd:fd:d8:14:07:3b:0e:fb:f6:8f:fc:84:49:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Jul 23 13:00:17 2026 GMT
Not After : Jul 24 13:00:17 2026 GMT
Subject: CN=6693b3309597037d6564d37281243f88e2c2c740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:75:37:6b:b2:28:09:38:7b:90:2a:61:3f:
86:8e:9f:b5:4a:c5:fa:89:6b:c5:6f:21:5f:d7:b5:
4d:a7:63:b6:93:a6:2e:64:d8:c8:c3:42:3e:fc:38:
42:d5:9a:06:2b:00:24:9c:d7:0f:93:d8:7b:8a:6b:
3e:44:4a:86:21:73:95:25:39:c5:e8:43:83:d2:5c:
8c:8c:01:54:3f:9a:82:2b:d3:40:76:95:87:ee:a5:
f0:ca:89:0f:d1:94:60:73:05:cf:34:1f:ea:71:50:
f5:90:e8:be:96:d7:d8:9a:f5:84:23:cc:16:91:4f:
0b:de:3b:d9:04:62:b8:7b:eb:56:41:06:2d:35:8c:
8c:30:ea:d0:2c:4f:57:4a:0c:68:b2:36:73:64:1a:
34:49:5e:e8:ce:1a:b6:63:34:40:c9:f5:0e:f5:d7:
91:e0:58:c9:0c:b3:4a:10:df:3b:90:44:44:67:ed:
8e:f6:0f:a0:cf:8e:43:21:63:50:b3:7b:a1:1e:b2:
0d:5b:27:cd:e9:b1:bf:43:cd:a0:6b:f5:ae:c2:a1:
7b:e6:c0:31:5f:37:23:19:b7:72:63:36:07:a0:c2:
01:80:c2:9b:26:62:7c:0f:68:e8:32:64:9a:9f:51:
4a:e2:c1:c5:7d:1e:d3:42:02:df:56:87:dd:d8:51:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:93:B3:30:95:97:03:7D:65:64:D3:72:81:24:3F:88:E2:C2:C7:40
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5c:ae:8f:1d:db:a0:0f:94:7d:cb:77:b4:fe:87:bf:96:9d:
1a:f4:60:85:46:15:99:68:c5:1e:df:69:61:8b:5d:20:d4:75:
b6:ab:03:53:18:7a:38:2c:35:f8:d7:d3:ff:1c:08:e4:35:b4:
9d:02:2b:16:54:51:1b:15:52:32:94:18:1d:00:4f:07:a8:fc:
2d:df:58:f9:e4:58:62:d2:06:f5:69:80:37:f9:6e:35:08:fc:
c9:be:73:18:3f:47:0a:6a:3b:08:6b:7e:21:f2:d4:22:c6:43:
e3:52:5e:bb:fa:e6:ba:83:13:bb:9f:84:32:54:09:5d:04:2e:
e9:4a:42:58:1e:3b:ae:8b:d1:c2:03:31:fd:be:c0:b9:bf:cc:
bf:3b:a5:7f:bb:9c:ef:16:80:92:0f:44:42:a6:60:a6:fc:8b:
a5:a6:49:a4:18:53:bc:bf:3a:f7:cb:64:80:64:34:7d:08:07:
28:10:72:6c:66:47:3f:c2:57:8e:62:91:4e:7d:0c:97:4e:4b:
59:ce:e6:06:d4:c3:07:c4:41:ba:df:7e:b7:0d:74:db:ad:1a:
90:37:26:09:ac:de:48:e5:cd:1e:38:0e:95:2c:18:09:33:db:
92:8f:2a:c3:bd:75:52:b0:45:cc:0e:16:29:af:34:c3:0c:0c:
85:69:77:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PD/392BQHOw779o/8hEmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMDFjYWZmODkzNTQ2OTEwYTI1ZmJjY2ViODYyMzU1Zjdh
MzcyNjAwHhcNMjYwNzIzMTMwMDE3WhcNMjYwNzI0MTMwMDE3WjAzMTEwLwYDVQQD
Eyg2NjkzYjMzMDk1OTcwMzdkNjU2NGQzNzI4MTI0M2Y4OGUyYzJjNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt51N2uyKAk4e5AqYT+Gjp+1SsX6
iWvFbyFf17VNp2O2k6YuZNjIw0I+/DhC1ZoGKwAknNcPk9h7ims+REqGIXOVJTnF
6EOD0lyMjAFUP5qCK9NAdpWH7qXwyokP0ZRgcwXPNB/qcVD1kOi+ltfYmvWEI8wW
kU8L3jvZBGK4e+tWQQYtNYyMMOrQLE9XSgxosjZzZBo0SV7ozhq2YzRAyfUO9deR
4FjJDLNKEN87kEREZ+2O9g+gz45DIWNQs3uhHrINWyfN6bG/Q82ga/WuwqF75sAx
XzcjGbdyYzYHoMIBgMKbJmJ8D2joMmSan1FK4sHFfR7TQgLfVofd2FGkvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaTszCVlwN9ZWTTcoEkP4jiwsdAMB8GA1UdIwQY
MBaAFOoByv+JNUaRCiX7zOuGI1X3o3JgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYt
MmU5ZWRhMTk5YTc4LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wYTdlYTItNTAzMC00ZTY0LWJkZDYtMmU5ZWRhMTk5YTc4
LzEvNmdIS180azFScEVLSmZ2TTY0WWpWZmVqY21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFyujx3b
oA+Ufct3tP6Hv5adGvRghUYVmWjFHt9pYYtdINR1tqsDUxh6OCw1+NfT/xwI5DW0
nQIrFlRRGxVSMpQYHQBPB6j8Ld9Y+eRYYtIG9WmAN/luNQj8yb5zGD9HCmo7CGt+
IfLUIsZD41Jeu/rmuoMTu5+EMlQJXQQu6UpCWB47rovRwgMx/b7Aub/Mvzulf7uc
7xaAkg9EQqZgpvyLpaZJpBhTvL8698tkgGQ0fQgHKBBybGZHP8JXjmKRTn0Ml05L
Wc7mBtTDB8RBut9+tw10260akDcmCazeSOXNHjgOlSwYCTPbko8qw711UrBFzA4W
Ka80wwwMhWl33g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:31 2026 by rpki-client