Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
File: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json)
Hash identifier: SGpQ7h9Tzs045OkvcwXZ5QiIIDxQ8KYAJX5TwMY1Itc=
Subject key identifier: 2D:B8:D4:10:16:9B:F8:2A:F9:5A:F8:0A:F0:A9:5B:76:96:A4:04:9D
Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
Certificate issuer: /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Certificate serial: 019F92B5F2D96646E3E83816A675185FBCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
Manifest number: 0912
Signing time: Fri 24 Jul 2026 06:00:25 +0000
Manifest this update: Fri 24 Jul 2026 06:00:25 +0000
Manifest next update: Sat 25 Jul 2026 06:00:25 +0000
Files and hashes: 1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: Jah8ItnwDj/x79u5UDuS4hvFo1nVzVQY+c/YfbqfjrE=)
2: hElyins30a6CcTsBId_5i9QZESM.roa (hash: XTxIIPJV+tyv9VF/zIfOPYzhtJazNs7LRzbWZlggukw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:f2:d9:66:46:e3:e8:38:16:a6:75:18:5f:bc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Validity
Not Before: Jul 24 06:00:25 2026 GMT
Not After : Jul 25 06:00:25 2026 GMT
Subject: CN=2db8d410169bf82af95af80af0a95b7696a4049d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:0a:d6:af:5c:1f:31:66:e9:e4:96:84:6e:
73:3c:fd:e5:2a:75:bd:88:69:b8:20:41:c2:8b:d4:
a7:37:4f:e6:0e:7a:c0:ed:b0:31:fb:9e:62:8c:4b:
a5:25:dc:ba:c8:2f:6a:e1:24:60:f3:16:b4:f6:60:
20:dd:21:35:8e:52:fc:07:c9:3f:41:33:7b:a7:c1:
2a:c4:27:5a:2c:87:62:43:00:90:7b:70:fc:61:99:
e7:b8:b2:70:39:11:9d:d2:43:de:13:20:77:0c:04:
86:bd:cc:56:a5:61:08:4a:c8:b0:c0:88:48:2e:fb:
74:79:2e:04:25:b0:2b:0b:65:8c:22:66:dd:3b:fb:
18:a6:50:10:9d:23:a8:e4:b8:34:9f:07:f2:32:a8:
77:44:58:65:2f:92:ec:36:68:0c:db:b9:4d:87:3b:
be:2b:23:26:5b:89:91:05:33:de:f5:d4:9e:4f:e4:
69:89:de:2e:43:b4:82:d7:c2:f0:d3:2b:09:a4:e0:
c5:26:fc:89:a7:dc:eb:47:b3:d3:98:46:46:29:a9:
ee:0b:88:d2:90:7f:e4:d0:21:8c:0b:83:37:fa:6e:
7a:df:46:27:d9:cb:78:52:d4:e1:75:99:0d:6e:d6:
0f:f3:17:96:5a:97:c0:ac:c0:0e:d8:f8:d9:fb:d7:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B8:D4:10:16:9B:F8:2A:F9:5A:F8:0A:F0:A9:5B:76:96:A4:04:9D
X509v3 Authority Key Identifier:
keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:19:f8:b0:98:25:9e:c4:52:bb:99:c6:cc:48:fb:6e:e1:e4:
82:db:d3:4a:72:5f:a1:c8:f4:ce:ce:0f:cf:be:07:a0:ad:c7:
5c:80:86:24:93:f6:27:2c:ed:8d:b7:4d:ca:aa:9a:ab:33:86:
21:8a:89:4c:b8:68:42:a3:66:88:2f:a4:06:50:87:eb:72:64:
58:ee:79:f1:09:8b:c3:d4:7f:91:8a:9f:01:48:17:54:54:7f:
f3:5d:53:b8:89:18:ab:25:9d:66:8f:9b:9f:32:8f:88:6b:8d:
72:5f:39:37:9f:37:e1:43:f1:e8:4c:31:e3:93:39:35:6c:34:
d0:ea:d5:51:6e:9d:a3:28:2c:2b:85:b4:c5:93:33:b9:8e:17:
4c:8e:0f:3d:83:5c:fe:b1:b5:f5:28:bc:5b:ca:c6:9a:bc:da:
6c:77:9c:0a:58:81:a3:44:bb:82:ef:f4:61:6a:84:bf:d4:d2:
4d:3e:91:f3:04:32:91:94:2d:22:e1:bd:98:c6:15:79:07:f0:
a8:45:04:16:2e:76:d3:9a:2f:98:00:d6:b9:42:35:b5:e1:88:
7b:60:4d:35:f3:27:b1:5c:83:c3:a6:60:e7:21:4c:84:a9:80:
ff:eb:6e:e4:d8:1c:d0:08:b2:74:8c:73:f6:33:74:ed:08:0e:
68:2c:bc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:43 2026 by rpki-client