Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File: 6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier: 8uk+Rh2XAwCUbofAHv2N6V6a1hBL+Is5mMn7roxdlBI=
Subject key identifier: 40:21:DD:8C:0D:F2:ED:F9:49:EC:53:82:04:BD:6B:CA:75:CF:F4:51
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer: /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial: 01A0CF6D744EE9DC30477FEB60B47574DD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number: 0BE5
Signing time: Wed 23 Sep 2026 18:00:51 +0000
Manifest this update: Wed 23 Sep 2026 18:00:51 +0000
Manifest next update: Thu 24 Sep 2026 18:00:51 +0000
Files and hashes: 1: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: 2Oxl556MMiFzmNA+OTuKU/xrSSy9yDec+3AFQgU4Xxc=)
2: OsX0t0wG95-5VyP53Jq4AJS0W0M.roa (hash: y2uezb2UJkRqJ1oDp6l1/kWv/o+1MQQ44Y666OmQDxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:74:4e:e9:dc:30:47:7f:eb:60:b4:75:74:dd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Validity
Not Before: Sep 23 18:00:51 2026 GMT
Not After : Sep 24 18:00:51 2026 GMT
Subject: CN=4021dd8c0df2edf949ec538204bd6bca75cff451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:ac:8a:bd:d8:fd:de:5f:f1:dd:ab:c2:e9:
2c:d6:cd:63:c6:b6:d6:bb:71:a8:12:f0:62:13:34:
23:4a:0b:59:16:95:c3:28:0b:7c:6e:e8:66:40:10:
8e:be:14:88:6e:d4:2a:30:e6:34:f7:e2:31:d4:bc:
1e:41:d9:d2:1d:9e:47:8b:68:e5:64:d4:85:20:2b:
61:c7:fe:a7:81:19:8b:4d:fd:63:0d:ea:ce:08:f1:
df:df:0c:a4:9c:be:0d:44:a5:66:f4:7b:4f:c6:a9:
c2:7a:a5:da:c8:78:c5:83:72:61:0c:ea:03:ee:06:
1d:12:da:50:dd:be:e9:b0:08:79:6d:4a:cf:72:95:
03:87:62:46:31:6e:15:3c:38:5f:75:17:30:8c:b3:
72:de:bf:69:1b:ef:4c:19:b9:74:d1:b1:bb:92:87:
d0:db:f5:e5:41:45:48:e6:99:48:ce:64:af:fe:6c:
a2:9a:e3:63:02:1e:05:48:43:df:fd:25:ff:67:dc:
93:1d:89:73:b6:32:2f:8a:1e:88:eb:a5:7c:87:33:
8a:5c:90:c9:a9:84:bd:eb:ad:7a:e2:b9:e4:08:03:
79:72:a9:b9:b6:d5:0f:27:af:8a:74:5a:53:9e:11:
46:d1:b3:8e:1f:f4:7d:8e:24:62:76:72:1b:e6:6c:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:21:DD:8C:0D:F2:ED:F9:49:EC:53:82:04:BD:6B:CA:75:CF:F4:51
X509v3 Authority Key Identifier:
keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6d:55:54:ac:77:e8:ac:8e:0c:ba:c7:be:e0:78:8c:20:48:
ff:15:5c:82:16:84:3d:f9:d1:52:21:d9:a3:58:05:ac:fe:e1:
b3:49:74:f6:4f:a5:db:30:f9:37:7d:07:be:29:f0:33:98:06:
9d:6e:2a:76:53:52:44:16:13:a9:dc:b4:0c:cd:d1:33:b9:76:
c8:05:b3:7b:45:76:0e:08:70:33:36:86:2c:01:f9:50:f5:b6:
0b:4d:8e:32:91:0a:4a:e2:e2:81:97:63:b3:5f:6c:7e:14:10:
9b:65:8d:39:62:78:14:9b:5f:d3:eb:3b:c5:9d:89:e5:5d:00:
36:c9:f9:a3:09:c8:27:2f:94:5e:24:3a:40:a5:73:68:79:38:
54:32:ce:ea:6a:b1:80:35:f2:3c:26:25:05:ca:9d:7b:a0:3d:
97:92:d1:87:f5:bc:15:5c:8d:b8:24:5e:a6:16:04:8e:37:c7:
a3:20:6c:db:5d:7a:d2:a8:68:d8:b8:91:ac:7a:31:cc:a6:f2:
ed:96:13:b1:84:55:9b:ea:a0:63:14:a5:a1:a8:a4:a7:a9:9d:
f8:6b:26:20:40:78:61:2d:17:0f:9c:19:d5:d3:c3:cd:45:a1:
17:84:de:ea:4b:68:2b:5d:ee:4f:24:de:dd:32:e3:bb:04:05:
96:ab:44:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:12:09 2026 by rpki-client