
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File: CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier: qSwE3E3JMKyjHPk5YWeqLeevOlaXvHGReqr6S4dqjz8=
Subject key identifier: 07:2C:8F:D3:17:4A:C2:73:2B:8E:4C:64:2E:42:A2:2F:5E:70:B2:B6
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer: /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial: 01A0CE91A04E326B65D90193F247CCD208CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number: 08E9
Signing time: Wed 23 Sep 2026 14:00:45 +0000
Manifest this update: Wed 23 Sep 2026 14:00:45 +0000
Manifest next update: Thu 24 Sep 2026 14:00:45 +0000
Files and hashes: 1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: FnSgfWNp8X+/iTWzovByDM9q1Rscrkh4ANHSKGANOfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:a0:4e:32:6b:65:d9:01:93:f2:47:cc:d2:08:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
Validity
Not Before: Sep 23 14:00:45 2026 GMT
Not After : Sep 24 14:00:45 2026 GMT
Subject: CN=072c8fd3174ac2732b8e4c642e42a22f5e70b2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:6a:e0:5f:a2:99:5d:b0:37:2f:bc:1a:79:
51:2a:d7:47:25:dd:de:71:b5:0a:1e:e0:37:fe:5b:
2b:3a:e6:00:d1:d9:50:ed:1f:e3:9e:34:69:0c:f7:
0b:81:2b:73:b2:9d:9b:5d:69:0c:4e:e3:67:77:11:
42:07:6b:88:b8:80:c8:a9:4f:b0:69:ee:0e:ff:b6:
2e:a0:ab:32:10:2d:e7:d9:57:22:d0:f2:dd:af:e6:
1e:be:14:45:ee:4e:df:d2:6b:34:57:d6:aa:18:e0:
70:78:db:aa:f5:87:16:35:aa:7d:12:5f:12:5a:30:
00:5a:29:d7:f6:d2:63:e0:1c:5b:79:cc:ab:b8:f9:
13:cc:d1:3b:6e:8a:d4:ee:41:66:c2:b7:19:1a:8a:
f3:56:99:37:aa:42:17:7b:3b:f4:c3:eb:07:52:22:
47:6f:2d:65:ee:a7:7e:28:57:58:c2:05:17:1e:3c:
6c:e2:28:0c:c0:f0:6c:c2:1a:ff:22:83:ca:e2:40:
5b:be:c6:d4:3d:b4:80:cb:08:e8:e6:be:df:5a:58:
cc:73:4c:ea:d3:8f:a3:18:f4:66:9e:4c:60:5e:14:
85:7a:5d:e7:e5:75:e9:2b:55:f1:3a:cc:82:cb:9d:
78:96:26:3d:c6:62:92:bc:40:7b:4d:78:ba:54:38:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2C:8F:D3:17:4A:C2:73:2B:8E:4C:64:2E:42:A2:2F:5E:70:B2:B6
X509v3 Authority Key Identifier:
keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7e:40:cb:44:33:1d:af:76:e3:80:17:2a:b1:d3:a1:02:4a:
b9:70:19:a4:41:01:b2:8e:17:fb:fd:96:ed:d6:b0:23:2f:98:
25:08:48:b4:8b:b7:ce:34:44:36:8e:af:b1:46:62:f8:7c:93:
74:f6:d6:0d:e6:03:88:36:94:55:e3:0b:6f:44:25:e4:ba:62:
61:a8:02:eb:db:e4:b8:f9:98:8b:2f:63:e1:2f:8c:33:ae:36:
ba:c6:4d:64:25:d2:34:4a:32:7b:19:65:d9:36:ef:42:3a:08:
a4:01:3b:63:56:02:b2:7d:cb:d6:1a:61:fd:e6:71:80:61:b2:
0e:12:3f:be:ac:d9:0e:02:1d:39:71:31:19:ba:04:2f:87:44:
d8:e3:97:18:19:b0:4f:0b:1e:3e:c2:8d:67:c4:f8:e5:04:c3:
a9:e5:17:62:7d:7b:60:96:82:f4:7c:c1:f4:d9:d4:dc:65:1d:
bb:e3:92:0b:03:f5:46:4b:ad:fb:54:16:7d:b7:85:62:49:5f:
7d:f4:da:ce:10:e7:56:f5:6f:41:51:89:29:d0:eb:0d:98:15:
3a:f8:0f:11:aa:fc:3d:dc:36:fe:f5:94:c0:51:9b:6d:e7:a9:
fa:ed:5d:a9:b7:61:64:e6:63:a7:6b:5c:8c:01:ad:3e:68:ca:
f6:91:99:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:30:55 2026 by rpki-client