Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
File: 6kHoOY_3zvtSIWNusighJuv-O3g.mft (raw, json)
Hash identifier: TSN9kb9f6b+8fIXTmkDzLl1i2aqiJjU6012ari0rRqU=
Subject key identifier: BF:BC:38:2C:6B:C9:F2:BF:FC:7B:35:DB:D0:01:6B:E2:47:B2:3C:21
Authority key identifier: EA:41:E8:39:8F:F7:CE:FB:52:21:63:6E:B2:28:21:26:EB:FE:3B:78
Certificate issuer: /CN=ea41e8398ff7cefb5221636eb2282126ebfe3b78
Certificate serial: 019F8F10A0C80C559DBF790E00F5C8ACCDF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
Manifest number: 0614
Signing time: Thu 23 Jul 2026 13:00:59 +0000
Manifest this update: Thu 23 Jul 2026 13:00:59 +0000
Manifest next update: Fri 24 Jul 2026 13:00:59 +0000
Files and hashes: 1: 6kHoOY_3zvtSIWNusighJuv-O3g.crl (hash: nuLOa8loxaaA6VL29XgW+u/Z0m7ClhsR/+wdx4C5f48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:a0:c8:0c:55:9d:bf:79:0e:00:f5:c8:ac:cd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea41e8398ff7cefb5221636eb2282126ebfe3b78
Validity
Not Before: Jul 23 13:00:59 2026 GMT
Not After : Jul 24 13:00:59 2026 GMT
Subject: CN=bfbc382c6bc9f2bffc7b35dbd0016be247b23c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:8e:bd:0e:2a:0b:34:a4:6b:37:27:e0:b3:
88:b5:28:19:15:65:0e:1e:46:af:6f:90:f5:40:50:
a5:8d:1c:40:89:1b:7f:81:93:16:fa:9e:9f:69:f5:
9f:db:67:11:be:a3:84:f2:46:e2:a1:f8:35:c8:d6:
94:dc:31:d3:d0:bf:f7:e9:7a:87:a2:99:37:18:27:
77:35:35:53:f7:15:52:fc:43:dc:29:ec:b7:f4:13:
34:51:61:90:f0:cd:ee:04:6d:70:45:3a:d1:bf:39:
3c:58:26:8f:f1:59:5a:d2:4a:3d:b1:8f:54:65:75:
19:75:a8:8d:da:97:a7:64:7c:27:be:9b:28:48:1b:
99:0a:23:af:20:34:79:77:bd:bf:42:a0:0a:f8:3d:
43:c0:19:41:4e:df:6e:a2:53:35:68:8b:b1:a0:0e:
3d:ce:29:dd:92:ed:d4:b2:e3:48:17:68:e3:c6:56:
25:b1:74:a7:11:25:54:45:57:0f:3f:aa:60:8d:0f:
f5:7b:fb:9f:50:bf:82:96:b1:4f:9a:bc:65:2b:7d:
cd:35:4c:78:16:94:a6:ab:f6:0e:2b:ad:7b:4e:6b:
4d:b5:c8:e0:ca:08:05:58:9a:ea:42:37:7a:dd:f3:
11:be:01:a8:6a:e8:a1:5a:41:71:4f:23:15:b5:a2:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BC:38:2C:6B:C9:F2:BF:FC:7B:35:DB:D0:01:6B:E2:47:B2:3C:21
X509v3 Authority Key Identifier:
keyid:EA:41:E8:39:8F:F7:CE:FB:52:21:63:6E:B2:28:21:26:EB:FE:3B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kHoOY_3zvtSIWNusighJuv-O3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/53cbe8-f5a7-407d-84ce-628b4394b822/1/6kHoOY_3zvtSIWNusighJuv-O3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:df:17:70:b9:e1:19:50:a4:cb:77:5b:d1:33:b6:24:61:58:
b5:54:a3:a5:1e:73:a9:56:ed:d6:be:d4:51:d2:05:ca:6b:56:
ee:07:b2:92:71:cd:90:a8:83:ed:6d:21:f0:d2:b1:ba:42:94:
4a:1d:8c:37:4e:7a:9e:a9:38:d7:fb:83:4d:7c:f8:ce:d2:cd:
b9:de:40:5e:b4:86:7a:5a:b4:1b:8f:72:af:45:c7:e7:0d:a7:
85:62:94:2b:b5:97:3f:15:43:9b:df:f9:2d:10:7c:16:1e:6b:
1a:7f:6b:04:bf:72:c3:40:8c:27:80:27:e4:61:db:ff:e2:df:
70:41:14:28:52:db:04:91:98:7c:cc:8f:1d:b4:c3:f8:31:67:
bf:fb:8a:b2:7d:26:bd:be:a8:c0:96:d6:da:9e:6f:c0:dc:55:
31:6f:4e:5d:4a:71:27:78:f6:aa:2e:79:bb:74:3c:60:a4:87:
09:ad:cb:03:c4:e5:82:01:b3:81:7f:07:da:a8:fe:51:50:ce:
59:d0:fd:02:5e:ef:50:7a:cc:48:99:2c:e0:80:83:49:11:ab:
27:f1:2a:8d:9d:85:4d:bc:b6:51:a1:d1:1d:f9:96:93:39:6c:
e0:61:4c:fd:5d:ae:fd:40:4c:b1:ff:63:7a:82:b3:b9:df:51:
c9:29:b3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:39 2026 by rpki-client