Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File: 6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier: diLwxUgg/uDw2y6Ay2JARjSW6xUtKXmb9LMRKazqKWw=
Subject key identifier: B2:9F:60:5B:7D:A1:E1:D1:BC:B2:FB:E9:42:21:AF:5C:7A:EC:34:C1
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer: /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial: 019D28BB462E1113D651CB39C6AA07ECD1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number: 0A01
Signing time: Thu 26 Mar 2026 06:00:54 +0000
Manifest this update: Thu 26 Mar 2026 06:00:54 +0000
Manifest next update: Fri 27 Mar 2026 06:00:54 +0000
Files and hashes: 1: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: vo6UD+/fE50yMxINfwtAGVuM6lJ4fwZ7XqiwG0s0MfU=)
2: OsX0t0wG95-5VyP53Jq4AJS0W0M.roa (hash: y2uezb2UJkRqJ1oDp6l1/kWv/o+1MQQ44Y666OmQDxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:46:2e:11:13:d6:51:cb:39:c6:aa:07:ec:d1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Validity
Not Before: Mar 26 06:00:54 2026 GMT
Not After : Mar 27 06:00:54 2026 GMT
Subject: CN=b29f605b7da1e1d1bcb2fbe94221af5c7aec34c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:19:12:5d:01:9b:90:d3:fd:fa:a6:07:48:
84:aa:ec:92:44:47:48:ae:20:b5:83:80:f5:d5:fa:
c1:96:48:5c:a1:a4:25:ad:6a:39:29:22:78:3a:09:
54:c3:21:44:b0:f7:c7:b4:18:e7:8a:f2:3e:41:de:
51:61:bf:75:83:47:4a:d2:12:26:09:c0:03:19:89:
3f:69:b0:af:ff:a7:ac:9f:39:43:d2:4f:c8:2f:bb:
89:7a:5c:6c:4c:c7:02:5e:f6:fd:b7:ea:21:4c:8f:
a3:a6:59:bb:54:0d:0c:8a:35:51:07:74:92:d2:b4:
d9:01:f2:85:51:04:d9:a8:a8:95:cc:60:dd:ed:41:
60:f3:cc:ad:0a:ec:fd:83:b9:33:9b:08:17:c9:3a:
45:7e:a3:97:4c:05:92:81:5c:b3:f5:b5:7a:fd:5c:
27:07:9e:78:15:f0:22:5b:ed:3a:f8:9e:28:4f:75:
e0:a2:37:32:39:50:81:eb:97:f0:8e:7e:02:61:04:
78:6e:8f:5f:b6:3d:33:c8:76:c2:d3:7c:c3:42:cf:
b9:1a:a2:ce:75:80:38:ee:52:5f:36:48:c1:a9:2f:
04:d8:32:e3:48:50:2b:c4:88:05:bb:0d:b6:22:ca:
a2:24:c3:94:53:2c:73:ed:0b:3e:b8:4a:0b:24:d9:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9F:60:5B:7D:A1:E1:D1:BC:B2:FB:E9:42:21:AF:5C:7A:EC:34:C1
X509v3 Authority Key Identifier:
keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:51:b1:e0:e0:59:76:f2:63:1f:18:03:8f:70:bb:c2:a8:b0:
51:5b:52:b4:0d:dd:ab:d8:92:e8:5e:5f:5e:e4:b5:be:6b:a3:
19:fd:61:c2:53:0e:03:0b:78:de:75:c2:3f:ab:df:34:cc:4d:
e4:22:9a:dd:0e:97:ec:5a:03:f8:b9:b9:25:95:51:92:8c:d6:
1a:31:98:15:88:c5:fe:7d:42:1d:c1:a3:ef:a6:22:e5:75:2d:
99:08:b6:03:85:74:d6:51:67:aa:d3:5e:0b:8a:f1:9f:5d:e5:
4b:88:52:2f:f9:a2:5e:e6:e7:4c:4d:26:0e:75:cc:0f:31:93:
64:2d:5c:85:fb:06:84:b8:a7:87:15:ff:02:1d:ba:7f:69:bf:
0c:e8:c9:a7:cc:78:f0:0d:7e:97:47:11:4a:d5:c8:41:2c:a1:
01:4a:9e:83:e9:85:e2:ee:f0:c7:11:d9:2c:8c:cc:ba:4c:05:
b5:24:d3:59:31:55:6a:8d:b5:44:2c:0a:d0:38:99:1f:07:f0:
aa:88:53:f2:52:e2:0c:72:56:0b:ad:ca:c3:af:d7:27:ea:26:
35:89:c0:01:4a:3a:09:94:06:1f:91:e0:2e:c4:78:df:de:13:
72:0f:53:7c:e4:ea:6a:a4:55:6a:7d:91:28:d8:62:8e:d5:f5:
d7:85:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:26 2026 by rpki-client