Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: IdwIvDSUveGhwCKvMfgQRAobJEs8qWtxj+LaGs3rwTQ=
Subject key identifier: C4:8E:E5:5D:A5:2D:08:51:01:6C:9A:48:A2:7E:5F:FD:1D:03:45:5B
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 019E1C4794F123700F59B57914940D1A8E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 1022
Signing time: Tue 12 May 2026 13:01:53 +0000
Manifest this update: Tue 12 May 2026 13:01:53 +0000
Manifest next update: Wed 13 May 2026 13:01:53 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: I1f3tVadYWTdg/K9sDODJLnLARTi/FxUK9NTwWp8bJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:94:f1:23:70:0f:59:b5:79:14:94:0d:1a:8e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: May 12 13:01:53 2026 GMT
Not After : May 13 13:01:53 2026 GMT
Subject: CN=c48ee55da52d0851016c9a48a27e5ffd1d03455b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:4c:82:47:d2:23:0f:3d:34:53:51:ce:09:
1d:ae:23:2f:d7:ae:14:23:38:bd:12:5b:b0:31:df:
a0:a2:e8:ec:13:78:74:0c:4e:74:bc:94:df:d4:b4:
d2:cf:c7:f5:67:6a:2f:36:d4:e7:e5:7d:9d:19:5c:
12:14:d7:8e:19:21:25:c8:d3:8c:e0:c5:d8:86:ee:
0c:6d:61:91:d2:48:22:f4:8f:4b:d5:ca:ec:79:41:
07:44:17:7e:91:7e:25:10:78:2a:fa:80:5a:3f:bd:
8f:b8:71:3a:c9:83:5b:dd:c8:d8:31:5a:17:14:f1:
d2:3a:0e:ca:b1:d1:e2:40:40:b5:33:59:f8:13:5c:
e2:f3:30:48:5c:81:a3:d4:e1:8a:46:a9:41:a1:e5:
cb:02:59:d7:a8:be:5b:7e:c6:59:ee:ba:8c:ff:70:
90:8d:7d:37:ef:7d:56:f2:8d:3f:b7:eb:8c:44:4c:
25:ae:e3:bb:d4:45:78:85:07:1e:ec:1b:41:b3:5a:
e0:f0:ac:6f:e1:0b:85:ad:44:a0:02:f8:3d:66:64:
d6:d0:74:ca:bd:82:ee:9d:fd:45:e0:04:a9:1c:47:
ae:ca:d7:e5:b9:b7:e1:f3:ff:aa:0a:6e:e1:d9:4e:
ea:a0:c8:9e:9e:c6:bc:f4:fb:ca:9d:9c:54:06:87:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8E:E5:5D:A5:2D:08:51:01:6C:9A:48:A2:7E:5F:FD:1D:03:45:5B
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:de:2e:a0:31:f7:3b:7e:39:8c:0b:0f:97:4a:10:8c:82:4c:
5a:c7:73:1e:49:b1:b4:7c:51:8d:71:83:9b:10:e0:f3:c3:26:
cc:9c:5a:c5:66:35:d7:88:61:c5:a9:22:d6:10:69:b8:54:28:
c4:a1:3c:00:e8:ee:76:7a:0b:da:82:6e:bb:7f:77:69:a0:e3:
62:5c:bf:43:6b:3e:a7:61:b0:6c:de:96:62:e6:46:bf:0d:5b:
19:92:e7:d0:87:5d:81:46:c6:10:db:1a:a2:bc:59:77:20:1c:
c2:9e:14:c7:93:4c:86:12:8c:e6:24:6c:76:ee:74:88:c9:7d:
fb:82:00:19:df:ff:cd:56:19:c7:ca:fb:b6:66:03:aa:6e:f7:
8c:73:07:d3:c4:a4:eb:3b:23:e7:05:67:87:38:99:6a:64:6f:
41:74:26:d1:ed:8e:29:92:b1:0e:ef:8b:15:42:f5:89:b5:12:
79:b5:c5:b2:18:0f:ba:ff:eb:d3:4c:9f:2a:36:32:d0:5f:cd:
84:c0:72:99:5b:9b:34:8f:c7:64:36:f7:9d:52:64:d5:ef:bc:
c9:73:4d:38:f6:9c:04:0a:42:79:fe:5d:30:63:a2:ee:ff:d5:
a5:b9:c1:58:f1:ce:b5:21:dd:34:5b:86:09:f6:ba:25:5b:c3:
97:ad:8c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:36 2026 by rpki-client