Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File: 6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier: oobLaKpr9zFdVMIc8cwhPreZMuX6/7ptWNJWsiQ1sdQ=
Subject key identifier: 49:C3:E3:28:59:E0:EC:A6:DB:CC:D4:DF:76:60:5E:8A:6F:30:D8:AC
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer: /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial: 019E1CB5196298CC5580430D738D71BD7A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number: 0CF8
Signing time: Tue 12 May 2026 15:01:30 +0000
Manifest this update: Tue 12 May 2026 15:01:30 +0000
Manifest next update: Wed 13 May 2026 15:01:30 +0000
Files and hashes: 1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: V5pJPhCC0PsK9scVEG/bMmkzjuWSGA6NKkluLCXcyuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:19:62:98:cc:55:80:43:0d:73:8d:71:bd:7a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Validity
Not Before: May 12 15:01:30 2026 GMT
Not After : May 13 15:01:30 2026 GMT
Subject: CN=49c3e32859e0eca6dbccd4df76605e8a6f30d8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:c7:b3:25:8c:e7:d5:77:4f:4a:43:33:b2:
b7:21:9c:4d:3f:c2:19:51:55:ce:52:b9:5e:00:69:
fe:54:e8:49:c7:bb:d2:2c:52:67:7b:f1:9e:77:9f:
6f:43:4f:1c:2c:2a:b7:85:1c:64:14:91:ef:56:e6:
7a:5d:d0:a9:57:ea:e7:f7:fe:88:9b:e1:76:53:2e:
81:3d:c3:f6:d3:be:96:db:54:e3:2e:fc:e9:da:a4:
be:db:69:42:73:27:9d:b7:a4:3c:39:2a:34:5e:7a:
f8:7a:62:45:dd:5e:07:76:2f:e2:20:ce:16:d9:f2:
28:32:25:52:85:cb:65:41:b4:98:07:6b:82:95:b5:
de:4d:73:c9:f8:65:3c:67:5d:36:d6:37:ca:db:ca:
84:2e:4a:ae:f2:fe:b6:56:61:46:b6:3d:8a:26:b4:
13:55:45:63:05:3e:e6:3b:eb:f8:97:3b:27:77:2c:
8d:57:d4:f8:03:4e:b6:2c:42:e0:54:8b:05:b2:2c:
2f:29:e4:95:ff:3f:8a:f5:01:80:0b:2e:25:21:6f:
16:3b:3d:53:25:9e:33:46:7b:d7:ce:ab:9f:7f:ff:
32:21:43:22:15:a5:e3:89:74:e6:89:5b:25:8a:0d:
3b:ae:06:a6:02:0a:46:c3:e4:94:a9:62:e9:42:00:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C3:E3:28:59:E0:EC:A6:DB:CC:D4:DF:76:60:5E:8A:6F:30:D8:AC
X509v3 Authority Key Identifier:
keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a4:e7:60:26:94:ea:90:ab:34:8b:54:80:17:b8:1e:11:69:
f0:f4:33:99:bd:30:87:c9:f9:40:3f:d7:c6:34:01:ee:d3:0b:
6b:6b:cd:9c:27:1b:d2:09:c5:08:91:a6:48:58:20:81:4c:a5:
c0:ae:d5:21:2d:f1:f5:29:8e:6b:c3:fb:96:ef:bf:12:2b:bc:
91:a3:9d:39:67:29:a6:f7:a1:62:d1:bf:2c:f5:51:a8:cf:b2:
8f:1b:31:14:8c:f6:4b:be:34:34:ac:67:c1:8e:d5:05:64:67:
ca:0a:0d:0d:85:6e:ed:a8:7e:13:8f:e1:76:e4:11:8a:ea:4e:
a0:f1:c9:27:c8:14:e1:30:fe:58:c4:61:fd:c0:bc:1f:96:51:
76:75:a5:b7:b8:c9:43:c2:63:62:3f:65:3c:bf:61:ac:fc:5a:
31:66:15:51:9c:5b:b0:8b:ac:fa:4f:90:d6:e9:31:4a:d2:dd:
d4:ab:68:2a:1b:eb:d8:e3:e4:34:dc:ae:ba:d6:6d:a8:cd:f3:
5a:d8:11:55:d2:cc:47:22:1d:78:61:aa:1e:29:30:2d:a9:67:
d4:40:b1:13:12:a5:e6:09:9e:06:47:6b:e8:06:33:26:f1:a5:
65:0d:99:c4:96:2c:94:b4:e3:10:18:86:db:75:e5:2a:c7:c3:
e4:39:c7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:40 2026 by rpki-client