Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier: QLCJpOHmVVpi913VF5g2u7iZSHYPixovwTkJde8EaYk=
Subject key identifier: 57:72:24:D1:8F:85:0F:E6:5D:3A:C4:C4:CB:61:56:9A:8B:57:FF:4D
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial: 019F8FEBE42E4D4C8D37460651E76965E4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number: 0A84
Signing time: Thu 23 Jul 2026 17:00:28 +0000
Manifest this update: Thu 23 Jul 2026 17:00:28 +0000
Manifest next update: Fri 24 Jul 2026 17:00:28 +0000
Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: IN6AZBVOn9yydEdENyHcU+WnB8H1aYxVZ8Piy7L4IeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:e4:2e:4d:4c:8d:37:46:06:51:e7:69:65:e4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Validity
Not Before: Jul 23 17:00:28 2026 GMT
Not After : Jul 24 17:00:28 2026 GMT
Subject: CN=577224d18f850fe65d3ac4c4cb61569a8b57ff4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:57:53:98:72:9e:08:c1:dc:cf:c1:a2:ee:
4c:4a:65:0e:88:e0:4d:cf:16:4a:f3:71:1f:6d:0d:
47:ca:c8:db:89:f4:99:53:e7:5f:de:33:e0:86:ce:
f7:39:8c:3e:7c:9f:d6:fe:0a:e7:86:d7:b4:84:f1:
41:37:18:9a:79:ac:f5:ca:63:ed:71:43:4c:10:24:
b1:60:b7:53:69:e8:7c:e7:10:40:4b:9b:eb:62:1f:
f8:18:70:f8:42:23:8c:ad:cf:f5:31:fe:d4:9d:96:
e0:f1:1a:f7:6c:e0:7b:eb:01:39:6c:23:4e:c7:ca:
1c:15:f6:36:df:8e:d5:d1:44:d7:bd:da:c8:bf:ae:
7d:03:07:96:90:d7:1b:e2:9d:e8:98:01:b7:44:3d:
d5:4b:60:e0:bf:20:44:21:67:8c:e6:59:6d:e6:90:
24:aa:99:96:1f:6d:c3:b2:e2:72:a5:cc:05:fb:a6:
12:98:f7:e9:6c:d9:bc:33:ad:ea:02:69:0e:00:7b:
94:5c:cb:9d:eb:5f:30:ff:88:49:74:9b:f4:32:f3:
11:85:54:5c:56:28:f8:84:ae:34:d6:26:6f:d3:6c:
6a:74:dc:57:72:ce:fd:43:31:f3:cc:50:0a:7b:65:
5a:2d:7d:68:76:c9:b2:39:e8:0f:0f:92:ca:a9:9d:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:72:24:D1:8F:85:0F:E6:5D:3A:C4:C4:CB:61:56:9A:8B:57:FF:4D
X509v3 Authority Key Identifier:
keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:40:19:f2:23:4e:90:19:15:c6:3d:0a:88:c2:d3:e1:a8:27:
7c:4c:a5:f3:2c:26:f4:5f:d2:0a:63:a0:74:1a:c6:1e:e8:5d:
39:28:80:fa:b5:51:64:e3:15:53:ca:a6:30:85:4b:21:72:e9:
08:1d:19:56:0f:43:01:c6:d1:86:1b:60:87:82:c3:f1:db:6d:
50:6b:d8:a5:65:3d:89:5f:d7:58:66:ea:f0:0e:14:0e:89:fb:
25:66:5a:ed:c7:56:44:fb:49:24:d8:93:49:ee:e0:ec:b6:cc:
10:d7:e7:45:a7:f2:60:71:50:c2:d8:fa:eb:fb:ed:ad:6e:5b:
a9:88:3b:92:35:84:5c:72:d7:f4:2a:58:2a:65:34:ca:21:ac:
fd:81:d2:01:d1:d3:79:a7:b5:35:72:e1:62:a5:54:ba:71:d0:
36:3a:47:c7:c2:dd:4c:a3:81:ac:55:1e:f4:21:f0:c1:18:89:
8c:60:fc:8d:66:84:bd:c2:3b:ec:5b:c1:0b:71:f4:21:2d:b6:
7b:6b:c6:29:59:06:59:56:ce:9a:9d:79:41:db:ed:76:7c:cb:
b1:8b:32:84:d1:cd:71:e4:b3:55:18:06:a9:62:ea:b3:6d:11:
c6:ff:56:5e:39:4e:ce:96:87:0d:2b:b7:b1:04:8f:9a:2b:50:
42:75:5c:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P6+QuTUyNN0YGUedpZeTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzJhNmMyZWJlYTQ2NDEzMDcyZjkwZGQ1MjZkNzhmMTEw
MmY0ZjIwHhcNMjYwNzIzMTcwMDI4WhcNMjYwNzI0MTcwMDI4WjAzMTEwLwYDVQQD
Eyg1NzcyMjRkMThmODUwZmU2NWQzYWM0YzRjYjYxNTY5YThiNTdmZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0VXU5hyngjB3M/Bou5MSmUOiOBN
zxZK83EfbQ1HysjbifSZU+df3jPghs73OYw+fJ/W/grnhte0hPFBNxiaeaz1ymPt
cUNMECSxYLdTaeh85xBAS5vrYh/4GHD4QiOMrc/1Mf7UnZbg8Rr3bOB76wE5bCNO
x8ocFfY2347V0UTXvdrIv659AweWkNcb4p3omAG3RD3VS2DgvyBEIWeM5llt5pAk
qpmWH23DsuJypcwF+6YSmPfpbNm8M63qAmkOAHuUXMud618w/4hJdJv0MvMRhVRc
Vij4hK401iZv02xqdNxXcs79QzHzzFAKe2VaLX1odsmyOegPD5LKqZ17xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdyJNGPhQ/mXTrExMthVpqLV/9NMB8GA1UdIwQY
MBaAFOlypsLr6kZBMHL5DdUm148RAvTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMt
NGY5NzRjOTc3OTQ1LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMtNGY5NzRjOTc3OTQ1
LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUAZ8iNO
kBkVxj0KiMLT4agnfEyl8ywm9F/SCmOgdBrGHuhdOSiA+rVRZOMVU8qmMIVLIXLp
CB0ZVg9DAcbRhhtgh4LD8dttUGvYpWU9iV/XWGbq8A4UDon7JWZa7cdWRPtJJNiT
Se7g7LbMENfnRafyYHFQwtj66/vtrW5bqYg7kjWEXHLX9CpYKmU0yiGs/YHSAdHT
eae1NXLhYqVUunHQNjpHx8LdTKOBrFUe9CHwwRiJjGD8jWaEvcI77FvBC3H0IS22
e2vGKVkGWVbOmp15QdvtdnzLsYsyhNHNceSzVRgGqWLqs20Rxv9WXjlOzpaHDSu3
sQSPmitQQnVcxQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:53 2026 by rpki-client