Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File: CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier: v/2RBg21V+xlh0CjZynR9bxPzfC9+YGly4OehpI+Ruw=
Subject key identifier: B0:53:5E:F5:99:A6:87:C7:3C:6B:FC:22:6F:C6:8F:D6:11:60:95:E8
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer: /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial: 019D27E07A85FC60688192D6D12CD4764198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number: 0705
Signing time: Thu 26 Mar 2026 02:01:56 +0000
Manifest this update: Thu 26 Mar 2026 02:01:56 +0000
Manifest next update: Fri 27 Mar 2026 02:01:56 +0000
Files and hashes: 1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: /8jRvCCL/AOghgH44ssDZxfwG7UR7LwmoUjr/aB+DIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:7a:85:fc:60:68:81:92:d6:d1:2c:d4:76:41:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
Validity
Not Before: Mar 26 02:01:56 2026 GMT
Not After : Mar 27 02:01:56 2026 GMT
Subject: CN=b0535ef599a687c73c6bfc226fc68fd6116095e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:19:1a:0c:37:0d:5e:68:4c:26:67:fe:88:
b3:b6:b1:36:ab:4f:39:92:4d:e9:76:ef:36:e0:76:
15:6f:51:38:f2:28:44:a4:38:52:0e:c8:3e:cf:28:
aa:a5:6e:5d:02:5f:57:4e:b6:94:6f:57:08:74:dc:
81:39:8c:c0:db:4e:d5:22:bd:63:2d:94:37:d0:44:
64:16:78:56:dd:9e:d0:e6:8a:cd:6b:8a:70:66:eb:
1d:8f:90:b1:f7:8c:ba:c6:10:52:51:ff:7f:48:8c:
98:4b:1f:cd:a7:88:5c:4c:c9:62:5a:4c:06:a6:02:
2b:85:0d:59:34:47:ef:dd:81:90:fa:cd:1c:9d:32:
df:b8:99:70:cf:cb:20:0d:c3:7a:84:b5:2f:1c:0d:
0b:06:47:c4:f6:e3:7f:98:68:d0:9e:fa:dc:8d:07:
1d:4a:4f:df:b2:17:42:3f:19:04:e8:9c:85:c9:ba:
48:56:fc:45:fd:66:e3:6c:d5:09:21:4e:a7:f0:72:
61:29:2e:d8:6e:f0:18:6d:b0:fa:1e:37:a7:2b:b3:
57:27:bb:78:68:5b:8e:4c:a2:62:cc:d8:32:23:18:
0c:22:fa:ed:88:4b:17:2c:b1:4d:25:5a:cb:83:24:
2d:ed:17:e9:d1:00:89:6b:db:b2:b7:47:4c:55:e5:
93:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:53:5E:F5:99:A6:87:C7:3C:6B:FC:22:6F:C6:8F:D6:11:60:95:E8
X509v3 Authority Key Identifier:
keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f2:37:7a:f9:c7:ec:b4:03:1e:4f:fc:6e:b7:2a:cd:98:04:
af:05:a9:3d:34:b3:8b:33:33:20:dd:4b:95:94:69:03:9d:3a:
5e:9b:92:3f:54:63:79:47:42:b6:fc:c5:b6:8a:c1:13:03:01:
2d:bd:4a:39:e4:e4:06:fa:6a:fa:ac:9b:13:7c:05:63:b4:e6:
81:07:7a:6d:e8:4c:4b:db:66:66:db:f6:06:6a:fc:8b:a8:29:
29:8b:a3:41:4e:e2:46:ef:17:75:23:24:ce:73:d2:54:f4:16:
f8:3c:47:fd:59:af:b6:29:ce:34:01:59:99:00:1e:df:44:ff:
70:58:1b:29:04:f8:ce:ac:46:d7:63:0b:65:4d:89:34:a8:10:
10:d0:48:f3:4f:e3:74:0a:da:40:90:97:66:fb:52:f6:55:79:
a5:c2:8f:d8:01:ab:25:4c:02:34:f0:d6:38:47:d7:ec:aa:1d:
9f:3d:82:ce:56:06:c4:c1:73:81:ff:11:11:61:6d:46:df:2b:
3f:d5:45:4d:b8:fb:9b:bf:a4:fe:01:c2:eb:e3:5e:e3:84:25:
77:4e:a3:d2:3d:0f:c3:05:49:42:c4:51:15:19:2a:fc:b1:5c:
d5:db:e2:53:6d:20:d2:e4:71:ab:c4:fc:79:e0:19:18:2f:51:
51:f6:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:34 2026 by rpki-client