Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: G/cOLHsSxRue7S0AscHwWI30SejLLkktKBq4JpEHwbA=
Subject key identifier: 4D:60:AF:D7:1B:D2:37:3E:2F:92:22:F8:F2:2E:04:4D:97:A9:5A:2D
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 019D28F30A52040CBF042590F6712FA53128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 0FA4
Signing time: Thu 26 Mar 2026 07:01:49 +0000
Manifest this update: Thu 26 Mar 2026 07:01:49 +0000
Manifest next update: Fri 27 Mar 2026 07:01:49 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: S8qkTQ3CN+oNPjnnjikIf6QJHfQQqT28MOMv0eS2uDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0a:52:04:0c:bf:04:25:90:f6:71:2f:a5:31:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Mar 26 07:01:49 2026 GMT
Not After : Mar 27 07:01:49 2026 GMT
Subject: CN=4d60afd71bd2373e2f9222f8f22e044d97a95a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:b6:c6:f7:09:7f:ba:cf:33:46:1c:6e:98:
aa:98:26:76:ec:b9:41:95:4e:00:ff:97:a6:83:e2:
28:04:c8:fe:79:f3:44:1b:47:52:67:0f:b7:08:2d:
56:64:98:c8:90:5c:e5:ee:e2:89:26:be:5c:85:8f:
84:ef:5e:9c:d6:e1:fe:1e:91:f1:a5:53:d8:9c:da:
99:e8:47:da:1c:fd:c0:e0:0d:5f:46:f1:d5:42:92:
7b:4a:3a:ae:ff:0c:04:f8:9e:19:ed:cf:5b:7f:f1:
5a:79:18:e3:e0:30:3a:89:b5:98:80:9e:e5:ec:7e:
c0:7c:91:c7:5b:7d:ba:50:50:1d:f2:f1:72:bd:45:
39:eb:00:8b:d6:55:ca:1b:16:d8:22:b6:e4:0c:21:
3e:33:da:2a:c7:2e:13:aa:f9:69:8f:38:25:12:34:
1f:97:4e:80:69:8c:22:dd:5b:38:26:db:a6:76:35:
04:10:f2:ad:01:5e:79:83:f2:7c:84:af:13:fa:97:
d5:37:b6:d2:ff:ad:e7:14:95:43:d7:f4:cb:71:6d:
0a:f8:43:0e:4f:f7:da:63:53:42:33:68:28:40:9a:
79:af:2c:26:70:53:ab:72:26:91:e5:cd:37:59:d1:
59:33:a8:2e:08:54:6c:a4:12:39:63:6c:81:69:9f:
4b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:60:AF:D7:1B:D2:37:3E:2F:92:22:F8:F2:2E:04:4D:97:A9:5A:2D
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1e:36:98:74:f1:bf:ab:52:b6:70:96:de:e4:8f:5e:be:45:
0e:e9:b4:0b:e0:1d:1b:d9:46:c8:89:73:2e:0b:e0:e9:3c:b9:
5d:89:c0:a9:64:02:52:21:06:f1:b6:9a:a2:0e:09:8a:c3:fc:
4e:11:ad:f8:1a:45:69:95:fc:1c:9b:96:25:4f:2e:8e:63:a3:
8c:f3:d8:f9:28:d5:d6:32:e4:48:27:fb:3a:c7:e0:f8:65:6f:
53:da:6b:9f:58:11:9a:1a:56:51:c0:a5:59:b3:ca:c1:cb:f2:
bd:56:e7:6e:22:96:a7:0f:d1:79:76:c4:82:07:98:9d:13:a0:
3b:2b:30:a5:a8:86:3c:74:f8:28:ac:1f:d2:f8:7a:58:24:3a:
e4:b8:ea:c3:d1:da:39:cd:13:17:b3:72:38:bb:13:b0:da:da:
48:88:59:a1:2a:1e:36:ac:bd:5c:95:52:60:d7:be:70:e3:39:
e0:43:8d:76:65:c5:85:19:a4:49:51:bf:e8:2e:fc:f9:12:25:
0d:63:a1:d2:97:59:cb:d2:dc:84:f1:c9:bf:0f:13:9b:24:c7:
94:19:e1:92:3c:e9:bc:3a:0e:12:ec:59:b0:20:eb:d0:25:84:
77:3f:69:81:7c:5b:e5:81:73:d4:3a:03:5d:18:f9:4a:f5:b8:
94:30:95:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:03 2026 by rpki-client