Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
File: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json)
Hash identifier: i8mkPkKiBbl97oepxp49yuw8aTJM7lfooWh0FlTFp5o=
Subject key identifier: 52:79:17:D1:EA:EC:35:B5:E4:B5:CA:03:6D:F1:C4:85:0C:BE:14:59
Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
Certificate issuer: /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Certificate serial: 019D26CD2793962349E908AB9EC59BE301ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
Manifest number: 07D1
Signing time: Wed 25 Mar 2026 21:01:12 +0000
Manifest this update: Wed 25 Mar 2026 21:01:12 +0000
Manifest next update: Thu 26 Mar 2026 21:01:12 +0000
Files and hashes: 1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: GsZODDqfMkCPSAeqn/uVrxg3DvjvY0ghxUM2h3q0lLM=)
2: hElyins30a6CcTsBId_5i9QZESM.roa (hash: XTxIIPJV+tyv9VF/zIfOPYzhtJazNs7LRzbWZlggukw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:27:93:96:23:49:e9:08:ab:9e:c5:9b:e3:01:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Validity
Not Before: Mar 25 21:01:12 2026 GMT
Not After : Mar 26 21:01:12 2026 GMT
Subject: CN=527917d1eaec35b5e4b5ca036df1c4850cbe1459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:53:5d:54:93:3f:91:80:c2:57:98:0f:cb:
cd:10:76:ff:96:e2:a3:d5:bf:78:5a:66:06:eb:71:
a5:9e:c8:cc:b7:5c:0c:37:35:85:32:86:64:04:21:
c5:be:d2:53:1d:1c:6e:83:dd:07:82:5f:2a:80:1d:
cb:fa:5f:9f:e7:db:3f:3a:dd:7a:eb:27:d2:96:6c:
5c:0e:b0:91:31:29:9c:56:f6:1f:b3:57:7e:4e:fa:
c6:97:c4:51:da:2a:56:0b:e3:bc:53:85:f4:18:34:
b7:ed:e2:56:6d:08:d4:67:b7:19:aa:ea:e8:e8:57:
a8:4e:ce:c3:1f:2f:0f:81:65:d5:59:c3:fb:2a:3c:
96:fd:cb:76:66:df:6d:11:82:6d:0c:ba:a8:25:19:
b9:df:6c:bd:7b:74:31:14:59:3b:de:fa:e8:c4:3e:
d6:7c:db:71:a7:d6:44:0f:f3:3a:e0:eb:62:20:12:
e9:af:ad:11:92:34:d2:7b:79:b3:73:bc:6e:83:01:
c4:df:e1:0b:0f:99:72:14:c9:9b:19:25:5d:04:0a:
64:38:a9:22:f5:52:77:c7:fc:7c:ac:9f:28:17:a2:
9a:cc:10:15:53:a4:d0:1b:5a:8b:d2:ef:e5:9e:7d:
2e:47:ea:70:fd:dc:42:9b:57:ac:e1:e6:a5:31:52:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:79:17:D1:EA:EC:35:B5:E4:B5:CA:03:6D:F1:C4:85:0C:BE:14:59
X509v3 Authority Key Identifier:
keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:46:a0:dc:eb:fd:24:3b:f2:e3:53:fd:5f:0b:fa:7a:e8:41:
37:b0:75:79:18:c5:bd:a7:87:45:87:b5:c5:b1:b4:21:f7:c1:
c2:7f:89:d2:7b:27:59:ca:20:9e:1d:41:1e:18:30:97:89:16:
51:28:92:54:e2:1a:c1:c6:72:e7:89:2b:0b:ed:db:a2:1d:57:
71:3a:52:fd:1f:37:49:e2:33:7d:53:38:b5:43:1f:ba:b5:8d:
0f:f0:07:eb:94:50:fc:c1:85:c7:c0:08:1e:c7:bf:91:e5:ac:
8f:16:a2:4a:32:6f:49:da:24:99:e9:be:72:44:86:e5:06:58:
2c:f3:bd:a1:c3:6f:42:2f:fe:00:8f:1c:9b:20:65:0d:ab:9b:
d7:e6:f3:dc:dd:7b:c2:8d:df:46:46:34:0b:4a:f9:5b:c3:80:
f5:7a:1e:9c:93:2c:7c:53:cc:0d:dc:9a:cd:6a:cc:cb:be:3c:
59:42:3a:ae:a1:66:fc:49:f0:fa:69:57:28:94:0b:63:8a:47:
cd:b8:84:ea:0a:ab:72:39:7e:93:9f:7a:72:e4:f6:ff:96:63:
06:c0:36:fc:fa:c2:61:c2:41:37:04:58:5f:cf:8a:4f:4a:d2:
94:5a:89:a9:07:b4:f3:53:bf:c5:53:92:7a:29:63:97:91:54:
96:fa:17:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:27 2026 by rpki-client