Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File: 6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier: 1QMNRS6wdgSen6x0WB4Jxzjjy3lQXuq23t/k5EdZ/1U=
Subject key identifier: 6C:32:B8:68:3C:8B:3E:64:24:2A:C7:CC:70:60:2F:4A:61:26:79:F1
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer: /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial: 019F8FB5433872FC68AD53A18AAE7EE79C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number: 1501
Signing time: Thu 23 Jul 2026 16:00:48 +0000
Manifest this update: Thu 23 Jul 2026 16:00:48 +0000
Manifest next update: Fri 24 Jul 2026 16:00:48 +0000
Files and hashes: 1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: w2xnA5oObpiFAF+FGpggayjIZ/VKQzJahFaFJtc5A88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:43:38:72:fc:68:ad:53:a1:8a:ae:7e:e7:9c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Validity
Not Before: Jul 23 16:00:48 2026 GMT
Not After : Jul 24 16:00:48 2026 GMT
Subject: CN=6c32b8683c8b3e64242ac7cc70602f4a612679f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:ad:12:19:82:b5:26:a8:fe:98:fa:93:b8:
60:2f:13:7c:5b:56:16:8a:80:44:98:c9:10:4e:27:
dd:86:4f:68:8d:b3:ba:90:51:b7:03:46:7f:22:68:
2f:6f:87:41:f4:20:60:8e:bc:79:4e:aa:2d:f2:ef:
ad:86:aa:f4:e5:f9:be:5b:d1:36:aa:6c:a4:85:37:
b8:e9:62:4f:b3:50:76:c9:b7:22:eb:e1:84:7b:89:
1a:c1:77:b6:46:2d:fc:49:dc:f4:75:1e:ef:0a:ce:
49:75:c0:41:2e:92:7d:c5:cd:6a:17:64:77:d0:b7:
52:67:25:d4:ab:f7:e7:68:bb:48:02:f3:3f:70:8e:
ec:0b:a9:2b:7f:8a:bc:82:37:de:73:35:41:b7:4e:
82:dd:48:00:a6:5d:53:cb:ad:18:04:5b:79:87:de:
5c:89:c3:91:e9:c5:ac:0d:0a:37:da:4e:3a:c8:8b:
02:f6:9d:e0:02:55:0f:a4:18:1e:c2:46:2e:8f:d9:
49:35:4a:fe:10:17:d0:99:97:e7:15:bb:61:ba:31:
99:a5:01:60:df:04:a5:e9:c4:fe:d3:c1:29:0c:93:
75:de:31:a0:92:e0:52:74:41:fb:c3:6a:09:23:42:
c7:08:4c:52:d8:a6:cb:e5:8b:9c:12:ec:a2:2b:eb:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:32:B8:68:3C:8B:3E:64:24:2A:C7:CC:70:60:2F:4A:61:26:79:F1
X509v3 Authority Key Identifier:
keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:60:6d:51:77:13:1c:cd:0e:5c:44:6b:2b:fe:23:9b:0b:a0:
7d:6d:e3:f3:5e:86:aa:a9:4d:0a:5d:f6:ce:0d:63:05:f1:f0:
09:fe:5b:e4:16:b0:1e:08:f3:a4:2a:6f:3b:83:0c:c0:9d:7b:
1e:ce:c3:d2:a4:3a:db:e5:3a:4b:08:59:81:da:0f:d9:d1:47:
ac:53:f7:c8:a3:82:d6:1c:fb:34:25:51:25:b7:d5:cd:05:62:
97:64:2d:e9:63:9b:17:57:33:77:bc:04:5f:15:3c:44:c2:de:
d6:3e:ce:8a:07:30:44:ef:59:73:a6:ba:f8:5c:6c:2d:51:03:
1a:a7:aa:11:f7:ba:1e:bb:d2:ef:c4:ce:a9:2f:59:d8:81:f6:
a2:be:02:6b:48:38:8c:f2:37:e6:10:04:d2:55:e6:22:6a:7c:
8e:59:3e:25:a8:b9:4d:3e:43:06:e2:64:e6:7d:ad:f9:ca:0c:
3f:1d:49:41:74:47:ec:5b:ef:ee:03:b8:d3:29:43:63:24:15:
c7:b7:fd:86:66:8c:3d:6d:07:3c:4c:80:df:29:e7:4a:5e:a1:
6d:33:00:34:0e:ce:73:d1:bd:12:36:77:99:f4:0e:af:b3:bc:
9b:9d:12:46:41:7d:dd:41:98:08:d7:44:f8:19:f8:29:7a:9b:
07:0a:1e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:52 2026 by rpki-client