Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier: VEanktauSx+uelPth051oZwjCHQRxFYHKD4jOLxG9eU=
Subject key identifier: 88:5F:D0:2F:93:DC:89:F9:AC:41:5E:92:65:F0:82:0B:A8:8B:09:CE
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer: /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial: 01A0D192789906AC0BC1489AC25222D2982F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number: 0AF3
Signing time: Thu 24 Sep 2026 04:00:32 +0000
Manifest this update: Thu 24 Sep 2026 04:00:32 +0000
Manifest next update: Fri 25 Sep 2026 04:00:32 +0000
Files and hashes: 1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: qhfHVZ3q17lZFqVfqs/3y2JL6NMxgCPSHM9YSSBKq1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:78:99:06:ac:0b:c1:48:9a:c2:52:22:d2:98:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Validity
Not Before: Sep 24 04:00:32 2026 GMT
Not After : Sep 25 04:00:32 2026 GMT
Subject: CN=885fd02f93dc89f9ac415e9265f0820ba88b09ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:c8:19:98:be:c1:c8:02:cc:fe:c8:b6:4a:
06:41:a8:6a:a6:8b:f4:07:dc:60:09:d1:8e:6c:2e:
dd:77:e7:bd:ec:5c:27:4a:d9:14:42:1d:a9:02:37:
d7:79:e0:8b:80:4e:58:65:67:d0:3b:66:e7:33:f7:
9c:e9:9b:bc:f8:d7:2c:35:c3:91:f9:98:51:49:40:
4b:55:0b:76:d0:96:2f:62:37:fb:8b:5f:59:c0:19:
92:e3:4f:07:dd:0b:31:8b:80:f9:03:7c:3c:e2:d2:
60:82:1c:2a:fa:fe:76:79:cd:77:14:0a:60:2d:9b:
99:66:99:8f:b3:92:cb:34:ae:b4:7c:85:63:f1:9d:
64:ac:87:cc:94:b6:ff:3d:f7:16:41:4e:00:b2:22:
4e:38:a8:5f:99:6f:9c:62:f4:2a:50:bf:04:2b:8a:
eb:32:f5:12:4b:d9:04:36:a6:5b:00:52:80:9b:fa:
f9:d0:c6:3f:73:f9:31:ea:16:e1:69:9c:5f:9c:03:
7c:09:90:35:a1:30:73:bd:cf:56:a5:12:e1:76:a4:
c3:38:98:4f:a4:48:16:d3:08:e9:a6:17:9a:83:4a:
c4:39:fc:9b:bf:a8:6e:41:59:4d:55:8e:06:3e:d7:
06:5e:3c:4c:bc:36:bc:d4:ce:20:21:c5:ba:28:c0:
c9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5F:D0:2F:93:DC:89:F9:AC:41:5E:92:65:F0:82:0B:A8:8B:09:CE
X509v3 Authority Key Identifier:
keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8d:d1:6f:2d:f0:b0:88:09:ec:37:8f:53:fb:f5:c8:ba:01:
11:09:45:a5:b6:2b:f3:84:2b:66:dc:ad:78:b1:f7:ce:f6:85:
6d:9c:6d:17:7c:d9:fd:a2:f4:b0:b2:c1:d7:b5:a6:a4:4b:9d:
42:0f:ea:83:75:d0:ad:b1:7c:0c:55:82:f5:ac:43:1d:87:84:
bf:09:53:2d:a8:8d:33:34:35:4f:bc:80:6a:05:7e:24:09:5a:
16:5a:3f:59:1e:37:0b:11:6a:c9:63:13:da:90:d4:56:14:fa:
f0:61:9a:17:3f:29:a0:40:34:6c:74:46:eb:e2:af:c3:1d:ce:
8b:88:1a:8a:b7:10:0c:02:93:ce:29:56:92:e5:ce:b6:a9:32:
4f:01:be:12:81:e3:5a:df:93:ec:d2:07:30:da:75:d5:d7:9d:
c7:6b:df:30:14:46:8f:5d:47:9e:28:5a:00:70:a4:d0:51:7f:
fa:76:72:37:19:e0:2e:f1:bd:2a:47:b6:49:b3:91:bc:32:d9:
9e:3a:b0:82:12:f1:77:f1:90:68:21:e8:92:54:01:d0:c7:4a:
33:e4:db:3e:ec:98:dd:09:ff:d4:87:ad:eb:b0:20:5c:49:29:
58:9f:a3:f3:e5:ee:63:1a:cc:bc:86:2f:da:b3:34:90:a7:dc:
de:86:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:11:13 2026 by rpki-client