Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
File: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json)
Hash identifier: E1Uuj0YDLGh6zCmR+8VRXz+TNlLeVziwQrobKXS1XCI=
Subject key identifier: 1E:89:31:9C:5A:48:2A:0D:FD:9F:11:DF:E7:EA:8B:1C:63:DF:09:62
Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
Certificate issuer: /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Certificate serial: 019D2703B843DEFCD57354732D094D2FFE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
Manifest number: 0F57
Signing time: Wed 25 Mar 2026 22:00:48 +0000
Manifest this update: Wed 25 Mar 2026 22:00:48 +0000
Manifest next update: Thu 26 Mar 2026 22:00:48 +0000
Files and hashes: 1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: fYwAOqa8E89JmRerH0rVWWU2Oe89Ev+l+OLiJ1gCtUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b8:43:de:fc:d5:73:54:73:2d:09:4d:2f:fe:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Validity
Not Before: Mar 25 22:00:48 2026 GMT
Not After : Mar 26 22:00:48 2026 GMT
Subject: CN=1e89319c5a482a0dfd9f11dfe7ea8b1c63df0962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:4d:95:2a:bb:b6:da:3b:13:ba:6a:61:67:
84:2b:57:da:b3:c9:2e:62:0e:9c:3e:f9:1f:83:6b:
75:e5:bc:4a:47:9a:bb:c7:fb:ab:c8:d1:c2:66:98:
e7:7b:44:52:9e:33:d8:dd:12:2e:46:f0:b1:ad:04:
80:45:5b:30:60:4d:ac:71:77:e5:66:1e:25:1c:4d:
8a:c6:5d:b0:bf:0f:e6:5f:90:bc:be:bf:78:20:37:
4f:ed:2b:b1:53:d5:97:43:93:a7:4a:fb:42:f3:84:
4d:87:94:ea:13:67:53:da:a6:17:3d:c8:42:b5:f2:
87:38:ab:3b:b1:38:51:e2:2c:7f:d6:f0:3b:1d:c3:
c7:c2:ab:c4:c2:b2:2c:02:a2:8d:32:09:63:3a:be:
d7:2c:c5:55:1e:11:f3:ef:24:67:93:b5:27:00:e7:
ae:c9:03:80:31:1e:ee:cb:84:19:42:43:43:61:9a:
1a:b9:f3:aa:a6:07:96:25:80:ae:a6:91:3d:73:5a:
8a:86:c0:24:ff:92:7c:01:01:1d:6c:8c:ec:0b:e5:
b0:27:b3:70:20:12:b1:f1:22:3a:2a:dc:a0:fb:4d:
90:97:fe:0f:aa:ed:36:a4:b0:f2:9d:75:f9:48:ca:
61:8f:10:2e:5d:ec:a3:69:41:52:36:b8:7d:0d:62:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:89:31:9C:5A:48:2A:0D:FD:9F:11:DF:E7:EA:8B:1C:63:DF:09:62
X509v3 Authority Key Identifier:
keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:36:d4:fd:7c:9b:5d:6c:7c:70:9d:b7:b9:68:73:ca:6a:b4:
94:a9:e2:f0:41:d0:b1:af:0c:d0:a3:92:a2:02:3c:94:54:98:
35:1d:3d:56:78:10:b3:59:17:d6:b7:6e:23:24:7e:a8:f4:9c:
c5:b4:00:7e:df:7c:35:31:94:a7:cb:12:3f:72:84:5e:ce:1d:
f8:58:a5:f9:af:ac:c0:d2:17:e4:5f:2c:34:e4:93:88:7e:5a:
d3:8e:1b:e7:6f:9b:e2:54:80:38:7b:83:9d:e6:eb:c9:c9:7b:
fb:22:bd:64:b4:a4:bc:c1:2a:6c:99:a1:61:ee:5b:34:a1:d3:
05:b9:1f:a0:4b:ea:81:2f:a5:c9:ea:45:c8:96:04:f8:43:5a:
c6:e3:0c:f1:5e:bc:b1:76:a6:e9:f8:ef:c1:be:f2:28:d1:9b:
70:7a:82:54:9a:cc:b6:73:db:d3:66:d5:78:7f:8d:07:37:73:
9f:c0:8b:93:f8:b3:80:81:19:84:de:95:54:ba:0b:11:e5:43:
56:bc:e7:14:6c:8b:b6:df:34:a8:43:2f:8c:e3:42:59:e1:7c:
c0:e6:ff:9a:49:26:44:10:3d:0a:3c:1d:57:c9:0b:e8:82:56:
79:02:c5:00:90:33:18:91:af:dc:9c:76:ec:72:80:1b:e3:00:
1d:f0:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:43 2026 by rpki-client