Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File: 6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier: SP7UEdR+dJ7PUOc7JLGx8M2x8Olf08u2asTft5NYOp4=
Subject key identifier: 4F:2C:DD:F3:BE:52:EB:41:78:0F:88:C6:B3:CC:DB:8C:79:5E:67:D2
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer: /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial: 01A0D75FC7C9FE52B0E2E07E4DC225D0284B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number: 0A96
Signing time: Fri 25 Sep 2026 07:02:53 +0000
Manifest this update: Fri 25 Sep 2026 07:02:53 +0000
Manifest next update: Sat 26 Sep 2026 07:02:53 +0000
Files and hashes: 1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: mOpTOiOzJNAkM8yVssuXevtzutF2F50jSuFfjzssK8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5f:c7:c9:fe:52:b0:e2:e0:7e:4d:c2:25:d0:28:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Validity
Not Before: Sep 25 07:02:53 2026 GMT
Not After : Sep 26 07:02:53 2026 GMT
Subject: CN=4f2cddf3be52eb41780f88c6b3ccdb8c795e67d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:91:cd:18:3e:b0:cd:55:e1:98:4d:51:4e:
f6:a6:db:13:12:27:8d:b3:08:12:7f:c7:1b:c7:91:
70:6d:e8:b9:df:5e:eb:cb:4f:29:0d:fa:7e:ae:c6:
30:90:8f:69:ad:3d:55:9a:78:18:a0:a1:72:6d:50:
99:8b:7c:b1:3e:25:9f:ff:54:d4:88:dc:7b:bd:45:
9a:6d:f4:f9:97:5f:70:a1:fd:73:0d:36:a5:30:33:
f1:8d:ec:36:33:b7:e7:dc:f4:12:16:8d:35:83:35:
97:d6:52:b2:6f:0f:07:06:1b:08:ef:d9:32:c7:1f:
0d:72:c0:00:15:45:99:b1:fe:0e:99:5b:86:e2:7a:
48:72:86:17:6e:86:8f:11:5d:fb:0c:b0:c5:9a:d4:
02:82:6d:34:4a:1e:64:74:25:d5:35:6e:41:45:ed:
e3:8b:b2:40:98:ab:00:64:3a:be:48:8e:20:a7:09:
09:4f:86:8f:9d:19:6b:76:04:1b:8d:4b:7b:4b:98:
b7:e0:bb:e8:b0:3b:45:07:98:93:4c:24:e7:52:91:
2f:bd:5e:9b:9e:17:90:3c:94:69:f6:41:19:a3:67:
36:ad:92:f2:7d:e6:45:b0:6d:8b:49:d6:b3:29:24:
7c:c5:aa:71:84:e6:19:36:e3:26:91:ab:49:43:0c:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2C:DD:F3:BE:52:EB:41:78:0F:88:C6:B3:CC:DB:8C:79:5E:67:D2
X509v3 Authority Key Identifier:
keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:39:3b:d7:7e:f7:a6:5a:15:64:80:a1:e7:5f:d3:35:66:f2:
ea:64:ba:02:ba:6c:08:0d:e2:4c:d2:fc:91:9f:8f:17:ac:1f:
05:40:94:ee:a6:3b:b5:ea:19:0c:0a:7f:37:af:ed:ce:ed:3f:
d6:11:78:3f:b4:84:be:49:08:e1:24:29:61:36:03:17:b2:f8:
05:2b:4d:eb:3f:41:a7:42:f2:af:b4:3c:d4:dd:f1:2c:70:82:
f8:b9:01:ab:a5:33:d3:93:da:6d:51:89:c5:33:f2:2b:9a:43:
9b:b3:1d:72:bc:71:51:d3:a0:78:f3:ee:81:53:f9:ff:24:23:
5a:1c:e6:5f:c9:14:20:aa:9a:4d:29:c7:0d:63:de:f2:a6:07:
13:a2:ba:13:0d:de:93:8a:41:08:fd:cf:a7:e8:62:6d:31:c8:
3b:39:77:4d:4a:90:27:63:8f:07:36:2a:c4:2d:bc:b7:c1:8c:
2b:77:ac:46:09:e4:7d:1e:16:e1:cb:41:ae:84:75:02:90:f2:
fb:df:36:19:70:33:2f:0d:0b:b8:13:96:31:aa:06:fa:e8:43:
3e:ff:dc:c9:a8:09:62:a3:27:1b:e8:19:72:41:1c:4e:39:79:
f0:e5:60:08:3e:f6:dd:4e:f6:a6:02:61:df:3d:5f:bc:a7:0f:
65:99:03:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXX8fJ/lKw4uB+TcIl0ChLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTY4N2FmZDYyMWI1MmE5NzRjZDNhZjBiZThhMjVhNjcx
MTg2ZDIwHhcNMjYwOTI1MDcwMjUzWhcNMjYwOTI2MDcwMjUzWjAzMTEwLwYDVQQD
Eyg0ZjJjZGRmM2JlNTJlYjQxNzgwZjg4YzZiM2NjZGI4Yzc5NWU2N2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eKRzRg+sM1V4ZhNUU72ptsTEieN
swgSf8cbx5Fwbei5317ry08pDfp+rsYwkI9prT1VmngYoKFybVCZi3yxPiWf/1TU
iNx7vUWabfT5l19wof1zDTalMDPxjew2M7fn3PQSFo01gzWX1lKybw8HBhsI79ky
xx8NcsAAFUWZsf4OmVuG4npIcoYXboaPEV37DLDFmtQCgm00Sh5kdCXVNW5BRe3j
i7JAmKsAZDq+SI4gpwkJT4aPnRlrdgQbjUt7S5i34LvosDtFB5iTTCTnUpEvvV6b
nheQPJRp9kEZo2c2rZLyfeZFsG2LSdazKSR8xapxhOYZNuMmkatJQwwSAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8s3fO+UutBeA+IxrPM24x5XmfSMB8GA1UdIwQY
MBaAFOpWh6/WIbUql0zTrwvoolpnEYbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxhSHI5WWh0U3FYVE5PdkMtaWlXbWNSaHRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82YjJkYTItMzU5Ni00N2ZmLTliYTUt
YjIzODU2YTFhODAzLzEvNmxhSHI5WWh0U3FYVE5PdkMtaWlXbWNSaHRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82YjJkYTItMzU5Ni00N2ZmLTliYTUtYjIzODU2YTFhODAz
LzEvNmxhSHI5WWh0U3FYVE5PdkMtaWlXbWNSaHRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTk71373
ploVZICh51/TNWby6mS6ArpsCA3iTNL8kZ+PF6wfBUCU7qY7teoZDAp/N6/tzu0/
1hF4P7SEvkkI4SQpYTYDF7L4BStN6z9Bp0Lyr7Q81N3xLHCC+LkBq6Uz05PabVGJ
xTPyK5pDm7MdcrxxUdOgePPugVP5/yQjWhzmX8kUIKqaTSnHDWPe8qYHE6K6Ew3e
k4pBCP3Pp+hibTHIOzl3TUqQJ2OPBzYqxC28t8GMK3esRgnkfR4W4ctBroR1ApDy
+982GXAzLw0LuBOWMaoG+uhDPv/cyagJYqMnG+gZckEcTjl58OVgCD723U72pgJh
3z1fvKcPZZkDSg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:01:13 2026 by rpki-client