Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/6fEf0LwGH5d6F2oq5eHKd9q5DjY.mft
File: 6fEf0LwGH5d6F2oq5eHKd9q5DjY.mft (raw, json)
Hash identifier: tVFR49HIQQYS75tvm2ds2VkLp78Cxp5nX+mfqNlFIyQ=
Subject key identifier: 8A:B2:8D:1A:51:F8:9C:BD:B5:95:EC:F5:FC:D1:19:FA:B1:5D:BD:05
Authority key identifier: E9:F1:1F:D0:BC:06:1F:97:7A:17:6A:2A:E5:E1:CA:77:DA:B9:0E:36
Certificate issuer: /CN=e9f11fd0bc061f977a176a2ae5e1ca77dab90e36
Certificate serial: 019F8EA2CAA184D9DF3D8B28FC1096134C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fEf0LwGH5d6F2oq5eHKd9q5DjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/6fEf0LwGH5d6F2oq5eHKd9q5DjY.mft
Manifest number: 3E
Signing time: Thu 23 Jul 2026 11:01:01 +0000
Manifest this update: Thu 23 Jul 2026 11:01:01 +0000
Manifest next update: Fri 24 Jul 2026 11:01:01 +0000
Files and hashes: 1: 6fEf0LwGH5d6F2oq5eHKd9q5DjY.crl (hash: /UrKqFxgOypQQhAQfIZlNtKcr/lqucHzOjnJNQOmsNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/6fEf0LwGH5d6F2oq5eHKd9q5DjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/6fEf0LwGH5d6F2oq5eHKd9q5DjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6fEf0LwGH5d6F2oq5eHKd9q5DjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:ca:a1:84:d9:df:3d:8b:28:fc:10:96:13:4c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9f11fd0bc061f977a176a2ae5e1ca77dab90e36
Validity
Not Before: Jul 23 11:01:01 2026 GMT
Not After : Jul 24 11:01:01 2026 GMT
Subject: CN=8ab28d1a51f89cbdb595ecf5fcd119fab15dbd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:7c:26:0a:e9:2f:8e:82:38:61:48:d3:09:
86:c5:fb:5f:27:9f:66:94:a1:d4:0f:2a:6d:a0:82:
70:67:d5:26:1a:fe:d4:8b:65:6c:53:35:f5:3a:1c:
e7:39:7c:d9:1b:c0:60:dc:e8:9a:c5:99:23:3b:06:
05:6d:cd:9e:6a:bf:c2:ee:00:39:e4:87:53:c0:76:
cc:6e:48:cd:85:be:4c:fe:f3:a8:34:78:8b:17:bd:
c0:70:1f:21:b4:fa:be:c3:01:3f:97:49:c9:82:52:
69:74:39:2c:10:f3:96:df:88:55:24:97:43:46:f3:
00:dd:01:ef:17:d0:16:5d:a2:51:3f:9e:99:19:11:
27:d1:36:23:fb:75:e2:15:b3:71:3b:6c:2f:6a:bf:
c2:c1:be:63:62:fc:2f:36:2d:b5:bc:1b:27:98:2f:
89:ae:08:7d:8b:ff:d1:eb:47:5d:90:5d:96:75:ff:
8b:41:c8:ca:41:6d:84:02:ea:0f:98:65:43:7b:bc:
a4:8c:1e:cc:a3:20:da:ff:26:48:b4:ab:56:6f:c3:
be:0f:af:6d:80:1d:ef:39:3d:37:a6:c0:e4:60:87:
f3:e7:a4:e3:a6:7f:1e:5d:0f:d4:2b:66:ba:2d:fb:
02:04:69:a0:98:c0:96:36:be:74:8b:6c:f8:4e:e7:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B2:8D:1A:51:F8:9C:BD:B5:95:EC:F5:FC:D1:19:FA:B1:5D:BD:05
X509v3 Authority Key Identifier:
keyid:E9:F1:1F:D0:BC:06:1F:97:7A:17:6A:2A:E5:E1:CA:77:DA:B9:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fEf0LwGH5d6F2oq5eHKd9q5DjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/6fEf0LwGH5d6F2oq5eHKd9q5DjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/6fEf0LwGH5d6F2oq5eHKd9q5DjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:4c:98:e9:ba:78:b2:8a:ed:0b:be:80:8d:41:5e:58:df:
68:b5:7f:00:e3:3b:47:b0:44:d8:7d:c2:dc:75:1a:20:b7:a2:
13:4b:3b:5e:77:49:7a:dc:90:49:82:92:37:5e:75:e1:0f:07:
e5:42:f2:bb:21:5c:71:b4:fb:f4:b4:4f:3d:43:1d:1a:8b:4c:
73:7d:d0:3e:67:da:51:83:22:b7:7c:ab:6b:8d:18:0a:e8:d4:
b8:d0:8d:84:92:a2:ca:24:10:92:21:2a:d5:59:99:26:54:78:
9d:1e:94:c3:03:1b:fe:34:23:81:17:15:ba:f2:c2:27:8a:52:
e7:33:9b:ea:7f:c4:21:b2:4b:89:62:9a:bb:2b:b1:ea:78:eb:
a2:12:b5:9a:6a:72:f3:d8:88:12:b6:d3:2b:d0:66:94:49:e3:
33:06:81:3b:c5:bb:09:f9:8e:23:3e:49:69:e2:e9:48:d6:2b:
00:46:ac:d5:5b:09:ee:cd:01:b6:23:79:0c:0d:9c:fe:e2:40:
f2:62:b3:ed:5d:13:d8:a2:77:41:71:2a:82:a3:6c:bb:85:b7:
c7:42:4b:cf:9e:99:0a:09:04:9e:0b:d0:44:c8:42:4d:6a:0a:
66:ad:72:50:0e:9e:49:91:3b:b1:a6:e6:d0:76:a9:2d:6c:a4:
6a:64:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:27 2026 by rpki-client