Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/6gYYKsxq1GcoC4E9L0AOvibTYnE.mft
File: 6gYYKsxq1GcoC4E9L0AOvibTYnE.mft (raw, json)
Hash identifier: qp7ZP8DmKGMhy04qOf9bY2XfWNPJxbkJYp7UnxqmnRk=
Subject key identifier: FA:B3:D3:54:9D:9E:5D:5A:A3:85:64:28:65:81:27:D4:01:0C:6A:38
Authority key identifier: EA:06:18:2A:CC:6A:D4:67:28:0B:81:3D:2F:40:0E:BE:26:D3:62:71
Certificate issuer: /CN=ea06182acc6ad467280b813d2f400ebe26d36271
Certificate serial: 01A0D07F752E3D513698CD4805B1C5E11E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gYYKsxq1GcoC4E9L0AOvibTYnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/6gYYKsxq1GcoC4E9L0AOvibTYnE.mft
Manifest number: 60
Signing time: Wed 23 Sep 2026 23:00:09 +0000
Manifest this update: Wed 23 Sep 2026 23:00:09 +0000
Manifest next update: Thu 24 Sep 2026 23:00:09 +0000
Files and hashes: 1: 6gYYKsxq1GcoC4E9L0AOvibTYnE.crl (hash: fs+Gw7CqW/bKk8QYZGHKPJJNvKzxDhAYRmeCAmSPxOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/6gYYKsxq1GcoC4E9L0AOvibTYnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/6gYYKsxq1GcoC4E9L0AOvibTYnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gYYKsxq1GcoC4E9L0AOvibTYnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:75:2e:3d:51:36:98:cd:48:05:b1:c5:e1:1e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea06182acc6ad467280b813d2f400ebe26d36271
Validity
Not Before: Sep 23 23:00:09 2026 GMT
Not After : Sep 24 23:00:09 2026 GMT
Subject: CN=fab3d3549d9e5d5aa3856428658127d4010c6a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f4:c1:75:61:25:4e:ee:ab:08:b7:1d:64:da:
f7:c2:6c:21:9c:e7:39:f9:ec:e3:3f:42:e0:93:c2:
12:04:3b:c7:96:ea:9b:df:ab:2d:e6:95:08:5a:56:
f4:75:c5:77:e5:ba:af:f5:4e:b1:11:6e:1a:d1:bf:
e2:00:17:e2:d2:c5:d0:5f:d3:9b:12:a0:6c:7b:3f:
45:93:e8:9d:65:4e:7e:85:2f:ce:30:43:21:53:48:
46:18:d4:8e:b9:67:8c:b4:81:35:94:42:15:9e:b9:
83:7a:5b:b2:0b:6a:4f:86:30:a1:73:06:02:27:ca:
bb:1d:27:b8:2c:50:5d:9f:07:d5:4e:cf:35:4a:85:
31:51:18:f9:e0:54:37:a4:35:6b:fc:26:68:3e:09:
60:7a:5b:a0:95:b7:84:48:bb:44:c8:1b:11:9c:11:
ca:c8:02:14:77:70:b6:cd:77:96:6b:99:ad:a5:13:
b1:75:e6:d5:08:1e:1d:08:db:06:0e:13:6f:db:81:
c7:9d:10:33:cc:99:f5:ca:56:cc:4b:ce:b2:08:eb:
88:40:14:60:3d:b9:15:96:d2:87:b4:7c:e1:ce:d2:
25:ab:cd:6a:6b:d2:fa:41:a1:b2:26:74:8a:7c:90:
b5:8a:86:a5:8a:bc:2f:1c:36:4b:9e:d0:49:6c:15:
99:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B3:D3:54:9D:9E:5D:5A:A3:85:64:28:65:81:27:D4:01:0C:6A:38
X509v3 Authority Key Identifier:
keyid:EA:06:18:2A:CC:6A:D4:67:28:0B:81:3D:2F:40:0E:BE:26:D3:62:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gYYKsxq1GcoC4E9L0AOvibTYnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/6gYYKsxq1GcoC4E9L0AOvibTYnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6ac443-d8be-48b5-8819-c470335ff1a8/1/6gYYKsxq1GcoC4E9L0AOvibTYnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:78:a7:92:c8:d8:20:8a:10:eb:90:d7:5b:e5:67:92:1a:86:
28:03:9f:d1:bb:55:fe:27:06:c4:98:f9:cf:3a:1f:84:8a:6d:
b6:68:92:7d:7f:7b:2b:19:d3:eb:0a:69:c0:a6:aa:48:43:3c:
b6:39:cf:f9:bc:d0:53:cd:3a:e0:73:c4:fc:bf:be:ee:8a:0a:
de:9e:da:83:58:4c:fa:0b:05:06:44:b1:a8:87:61:8c:b2:b6:
0b:e0:2c:27:94:79:9f:06:51:2a:ac:53:1f:df:23:11:92:88:
df:ea:b7:f8:14:58:a4:2c:38:a8:7f:e4:ce:e9:41:67:e8:b9:
3a:88:2d:3e:46:08:2c:4b:7a:58:cb:56:64:11:16:24:1d:86:
fe:ed:17:14:38:99:a0:a9:78:70:a1:65:e1:cd:92:f1:09:d9:
54:21:22:80:e3:f8:d5:18:1d:5e:2d:37:cc:81:27:47:2a:a0:
66:ef:12:8e:70:c0:cc:d0:33:16:42:c9:b2:92:59:92:86:8d:
a7:24:b4:2a:5f:69:e8:92:b3:6a:e2:1c:0d:a3:7b:53:a5:bd:
51:13:a2:40:f8:e8:8c:24:67:46:0f:e1:3a:a8:17:a7:8c:1b:
f7:10:5d:22:21:8e:f1:b9:3b:2b:30:60:36:f8:58:ac:09:03:
e3:e2:ea:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:21:08 2026 by rpki-client