Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier: QtxUEK7TTJ2GJHHl8neNphmbYv+IWzf5fdNNjhlXafk=
Subject key identifier: 61:C4:DA:42:C7:5B:F1:7A:DA:DF:23:C4:B4:2D:62:36:1D:79:3D:EC
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer: /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial: 019E1C47379E6BD5C852CF788A24EFC76C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number: 098C
Signing time: Tue 12 May 2026 13:01:29 +0000
Manifest this update: Tue 12 May 2026 13:01:29 +0000
Manifest next update: Wed 13 May 2026 13:01:29 +0000
Files and hashes: 1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: CPm9suSBRf8cqRae+VVEQk7N14hGKYgXhMSQNCBxkEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:37:9e:6b:d5:c8:52:cf:78:8a:24:ef:c7:6c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Validity
Not Before: May 12 13:01:29 2026 GMT
Not After : May 13 13:01:29 2026 GMT
Subject: CN=61c4da42c75bf17adadf23c4b42d62361d793dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:f2:83:51:86:66:73:6d:d2:e1:71:cc:68:
a2:89:1d:58:37:2f:c0:66:9a:ec:65:9d:41:3e:fe:
98:fb:8d:2b:2d:10:27:64:d7:79:57:c6:1a:f8:5a:
e9:9e:61:c6:d7:c7:53:3c:65:d5:7d:5c:d6:e5:95:
87:98:fa:6a:44:54:11:4b:5c:18:1e:e8:26:b4:00:
2f:a2:6b:ee:39:a5:79:29:e2:6a:f8:79:64:45:65:
5b:a2:b8:93:b4:c6:92:30:8f:99:28:8e:56:ec:8c:
fb:c3:cc:3b:49:a5:44:3f:01:ac:0a:5c:a5:e3:14:
cf:86:e7:b9:fa:f4:21:fa:2e:6c:a6:65:2e:c4:da:
02:97:4f:92:3d:fe:68:87:34:a6:fb:93:e0:af:ff:
71:29:52:9d:bd:a1:6b:f6:2a:30:c7:aa:75:5f:b4:
17:3d:a3:ec:39:4f:60:43:ff:a2:31:9c:77:42:e5:
2d:d9:66:58:5b:df:ca:cb:1e:73:c8:8d:e7:66:57:
0c:68:2f:4f:eb:74:e5:09:3b:89:d3:76:0f:5c:65:
2f:2e:07:97:aa:01:73:97:be:2f:c1:44:ed:73:07:
a2:7f:d4:69:55:c7:9f:af:cd:9f:cf:a1:6c:71:32:
d3:c9:0d:aa:ff:28:4a:1b:51:d0:cb:d2:02:58:61:
2e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C4:DA:42:C7:5B:F1:7A:DA:DF:23:C4:B4:2D:62:36:1D:79:3D:EC
X509v3 Authority Key Identifier:
keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bb:86:c3:0e:57:2d:e8:f4:f1:e6:49:3a:8f:0d:72:66:11:
b4:51:b0:25:63:49:42:06:77:2d:20:b9:a5:05:31:d6:72:71:
8b:4a:ab:70:ab:88:92:62:0c:5e:a0:d1:6c:1f:36:a6:36:e4:
2c:99:32:fa:d0:c0:ea:e5:09:65:6d:d6:17:25:6a:a6:2f:f5:
33:09:cb:7b:a4:89:da:3f:a1:db:75:e0:1c:e2:16:a9:ab:6f:
00:bc:72:fe:c7:3d:ed:a2:63:16:0f:11:68:83:c0:3f:22:57:
c7:91:0d:71:3b:4e:18:9e:5f:c0:69:f9:2a:22:9d:ea:7f:df:
c2:6d:80:95:d2:cd:01:4d:cf:f2:2a:3d:ea:01:eb:f3:05:b4:
67:fc:51:ce:c8:ce:61:a6:e8:89:f5:d2:ed:f7:be:e7:4f:4f:
51:5c:00:5c:fa:6d:c8:72:8a:da:e1:01:22:a8:92:c7:58:17:
8e:14:2e:c9:ac:23:74:f9:a0:5f:9f:3e:31:41:04:d0:2b:8c:
70:8c:20:99:c3:87:47:e8:06:d8:14:81:26:af:56:b7:2a:15:
47:60:dc:d1:83:73:08:b7:67:40:d8:38:ec:d5:4a:b7:d5:5b:
d1:c4:5d:da:61:f9:87:a3:2c:05:3d:a0:b4:fc:e5:0f:32:bb:
9a:57:36:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:41:21 2026 by rpki-client