Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier: jYF61zAC709hOijpmWlHg2AUY1/CckZCgIeeiZOUZAY=
Subject key identifier: A2:E7:66:E3:B4:AF:85:37:A9:A2:58:50:F0:AC:A0:B0:9F:3E:4D:43
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial: 01A0D08008F4E16E62A0CD055D022EBBC113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number: 0B2A
Signing time: Wed 23 Sep 2026 23:00:46 +0000
Manifest this update: Wed 23 Sep 2026 23:00:46 +0000
Manifest next update: Thu 24 Sep 2026 23:00:46 +0000
Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: ui8l/W7/rMB3rpyAgO72+PLImBwv+G76UnvFdwp5meY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:08:f4:e1:6e:62:a0:cd:05:5d:02:2e:bb:c1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Validity
Not Before: Sep 23 23:00:46 2026 GMT
Not After : Sep 24 23:00:46 2026 GMT
Subject: CN=a2e766e3b4af8537a9a25850f0aca0b09f3e4d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:d0:f5:ce:ee:22:80:72:98:22:c0:5f:30:
a4:ca:e1:6d:6d:8b:d9:bd:77:fb:be:3e:46:80:cd:
9f:ef:db:21:44:c6:c7:25:85:ee:21:ec:96:39:06:
49:3f:e1:16:b1:08:35:8f:60:93:d3:c1:1c:9b:98:
88:6d:37:e4:b5:f2:4e:e2:f3:b1:38:96:04:e3:27:
af:ee:3f:cb:51:79:71:f1:4d:0f:21:fc:a5:40:dd:
bb:ca:7d:a9:1e:65:7f:8c:36:d6:0b:d7:3b:a0:ba:
3c:62:32:db:2c:f7:40:71:8b:ba:23:51:b0:0e:57:
62:5a:6f:5d:65:07:62:65:1a:f3:d7:2e:9e:8c:77:
17:cb:2a:84:38:28:3b:c3:7e:1c:c6:56:d5:80:6a:
76:35:05:22:fb:ec:72:37:9e:9b:66:0b:35:db:b3:
60:20:01:a4:77:9a:0e:1c:fd:9f:bc:75:30:c2:24:
db:e9:ee:40:cd:e0:15:c3:46:b5:be:8d:ac:9e:84:
e4:54:bb:d0:cc:cd:bf:ba:d4:aa:f7:13:46:93:2c:
7e:a9:ca:29:45:fb:d2:7c:45:0a:79:85:00:eb:32:
b9:09:25:d2:53:2d:04:f1:0b:8d:c9:ca:bd:79:0b:
f1:0d:a7:85:37:99:82:93:7d:21:99:83:ed:be:78:
b8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E7:66:E3:B4:AF:85:37:A9:A2:58:50:F0:AC:A0:B0:9F:3E:4D:43
X509v3 Authority Key Identifier:
keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1c:df:b1:74:e5:a3:11:29:4f:b1:3b:d6:10:53:a1:a2:36:
7c:37:d6:ac:3d:b8:6d:ea:31:5a:cb:f2:de:9b:2e:bd:79:d7:
52:87:6b:1f:10:16:e8:ed:6e:2a:d4:e2:00:1e:18:53:31:19:
94:6a:2c:35:fc:f1:b0:57:24:6c:e6:7f:72:a2:86:a9:98:12:
5a:09:39:0a:ec:a0:ab:82:eb:11:16:0e:b0:eb:66:a3:5b:00:
93:54:fe:3f:a7:f7:bf:08:81:37:0e:77:74:82:63:ad:3c:46:
3f:e5:70:43:ee:a0:66:67:b1:69:ad:1c:d7:6f:5a:78:a6:dc:
ac:9b:df:06:27:b3:15:4b:cf:a1:1f:9b:2c:6b:5f:d8:f9:17:
0a:5a:64:3b:a8:8e:f5:07:37:96:ba:82:ac:54:05:70:9f:7a:
df:fd:88:ab:be:26:61:5c:3b:9b:f6:e0:09:28:46:d1:dc:1d:
06:e8:61:f8:e5:5d:d5:40:f1:4d:bf:e3:cd:ac:73:aa:35:12:
db:99:37:86:3c:97:8d:b6:70:c2:21:3b:b8:35:15:42:e8:6a:
2f:6e:61:6b:df:c3:c6:61:83:c7:eb:d2:ac:60:18:b2:24:bc:
1e:3e:e2:06:aa:8b:5b:39:22:e5:42:96:14:0b:7c:d1:de:8e:
42:05:3d:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQgAj04W5ioM0FXQIuu8ETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzJhNmMyZWJlYTQ2NDEzMDcyZjkwZGQ1MjZkNzhmMTEw
MmY0ZjIwHhcNMjYwOTIzMjMwMDQ2WhcNMjYwOTI0MjMwMDQ2WjAzMTEwLwYDVQQD
EyhhMmU3NjZlM2I0YWY4NTM3YTlhMjU4NTBmMGFjYTBiMDlmM2U0ZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrbQ9c7uIoBymCLAXzCkyuFtbYvZ
vXf7vj5GgM2f79shRMbHJYXuIeyWOQZJP+EWsQg1j2CT08Ecm5iIbTfktfJO4vOx
OJYE4yev7j/LUXlx8U0PIfylQN27yn2pHmV/jDbWC9c7oLo8YjLbLPdAcYu6I1Gw
DldiWm9dZQdiZRrz1y6ejHcXyyqEOCg7w34cxlbVgGp2NQUi++xyN56bZgs127Ng
IAGkd5oOHP2fvHUwwiTb6e5AzeAVw0a1vo2snoTkVLvQzM2/utSq9xNGkyx+qcop
RfvSfEUKeYUA6zK5CSXSUy0E8QuNycq9eQvxDaeFN5mCk30hmYPtvni42QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLnZuO0r4U3qaJYUPCsoLCfPk1DMB8GA1UdIwQY
MBaAFOlypsLr6kZBMHL5DdUm148RAvTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMt
NGY5NzRjOTc3OTQ1LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iNzYyOGQtNDI2Yy00ODg5LWEwMGMtNGY5NzRjOTc3OTQ1
LzEvNlhLbXd1dnFSa0V3Y3ZrTjFTYlhqeEVDOVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBzfsXTl
oxEpT7E71hBToaI2fDfWrD24beoxWsvy3psuvXnXUodrHxAW6O1uKtTiAB4YUzEZ
lGosNfzxsFckbOZ/cqKGqZgSWgk5Cuygq4LrERYOsOtmo1sAk1T+P6f3vwiBNw53
dIJjrTxGP+VwQ+6gZmexaa0c129aeKbcrJvfBiezFUvPoR+bLGtf2PkXClpkO6iO
9Qc3lrqCrFQFcJ963/2Iq74mYVw7m/bgCShG0dwdBuhh+OVd1UDxTb/jzaxzqjUS
25k3hjyXjbZwwiE7uDUVQuhqL25ha9/DxmGDx+vSrGAYsiS8Hj7iBqqLWzki5UKW
FAt80d6OQgU9RQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:05:38 2026 by rpki-client