
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File: 6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier: p28sukML+0TM/r3jRhF8+Rqwlb97ymPkqHqBdPR/LDc=
Subject key identifier: 5B:E6:DC:C8:F1:A1:C2:93:F1:F2:41:01:B8:93:95:52:63:71:FC:48
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer: /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial: 01A0CE5A97BCF7F7C2A92AEF1B5416B2C124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number: 15A6
Signing time: Wed 23 Sep 2026 13:00:38 +0000
Manifest this update: Wed 23 Sep 2026 13:00:38 +0000
Manifest next update: Thu 24 Sep 2026 13:00:38 +0000
Files and hashes: 1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: XtMU3OvGWWszSWA9mf7CIyNMxaNrbY+AsNVC5xLRoSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:97:bc:f7:f7:c2:a9:2a:ef:1b:54:16:b2:c1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Validity
Not Before: Sep 23 13:00:38 2026 GMT
Not After : Sep 24 13:00:38 2026 GMT
Subject: CN=5be6dcc8f1a1c293f1f24101b89395526371fc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:31:06:33:d1:3c:2f:2e:f9:e0:8c:27:2a:
da:af:45:52:17:4d:f4:f2:b7:49:16:9e:ac:5b:6b:
e8:c4:03:ee:c2:00:70:e4:b8:bd:66:8c:67:41:92:
24:64:98:53:75:d9:18:40:d5:f6:00:ed:f2:42:1b:
bf:1c:0d:a2:7d:42:d5:c1:5b:0d:74:61:5d:a0:f6:
bd:f2:06:1f:15:c8:28:9b:c5:3b:3c:bb:39:4f:e2:
38:d2:85:e6:7d:ff:bf:08:8a:1f:16:09:7c:93:3a:
55:18:1f:99:bc:42:5c:86:56:7e:be:cf:28:8e:52:
9d:56:5b:f6:84:f4:7d:66:dc:e2:f4:82:f8:6a:07:
9f:66:ac:bc:cf:af:69:6a:c0:d7:41:cb:85:9a:0d:
1b:9a:af:e5:26:ad:32:28:59:76:33:57:96:ba:34:
a1:da:2e:ae:00:e9:3d:08:09:ca:f6:ae:c2:64:54:
14:4c:2f:9f:71:55:12:b7:97:6e:fa:1a:bb:d1:29:
f1:42:37:06:bf:dd:39:d3:0b:0d:59:02:00:75:49:
b2:91:98:92:57:3e:a7:c0:2f:90:51:0e:dc:7c:7b:
5b:85:3f:a3:2f:b9:03:e8:78:78:69:5a:02:8e:63:
89:7d:5a:67:a0:8f:81:07:ed:6f:a5:1d:a6:50:99:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E6:DC:C8:F1:A1:C2:93:F1:F2:41:01:B8:93:95:52:63:71:FC:48
X509v3 Authority Key Identifier:
keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:95:69:1e:b4:da:45:57:4f:b0:94:2b:46:c9:43:78:94:07:
2e:89:9c:28:b0:23:8f:9d:89:9c:a3:eb:50:18:1a:ce:fe:f9:
a9:2b:cc:cc:3e:ba:a1:39:1f:75:32:bf:4c:99:b3:80:f3:5d:
3c:4e:80:16:6e:7b:3a:18:05:3b:9f:4a:c6:d1:cd:68:23:7b:
bb:78:24:0c:8e:e1:2f:ec:6c:08:a0:8c:44:ab:4a:d1:28:2b:
0c:38:29:14:2e:fc:55:e8:7d:23:1e:9b:4c:8b:c0:e4:73:4c:
78:c9:a0:2e:77:45:41:0d:19:38:fa:fe:5e:1b:be:ef:c2:75:
aa:77:f7:15:3d:0b:c7:28:3d:52:21:92:ff:be:1d:49:33:3b:
1b:76:cf:e3:a0:87:8c:be:72:c6:0e:f5:4c:a8:55:85:a8:a4:
4f:1d:81:14:b3:83:42:df:fc:1e:fc:31:c6:8f:21:02:e9:59:
80:10:61:bb:d7:c2:63:83:96:93:61:b0:a3:17:76:aa:65:47:
91:67:a4:60:89:8e:e7:b2:67:7e:99:17:9d:70:b3:bb:4d:0d:
9c:c7:ad:7b:b1:15:eb:63:17:c8:66:1a:04:d0:fe:d8:7d:52:
1c:17:e4:63:d8:ce:af:b0:ad:37:55:11:35:4b:6a:e9:96:7e:
3d:38:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:36:22 2026 by rpki-client