Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File: CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier: gFqaqXQANTSNm0QUh5WAdg7whrv03on3LR1acZAfoYY=
Subject key identifier: 6D:66:7C:9E:33:6A:03:0E:FF:A9:99:8D:C5:15:F1:BF:C7:9C:1C:2E
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer: /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial: 019F8FEC229F91EB8C29F80F8A728FA80BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number: 0844
Signing time: Thu 23 Jul 2026 17:00:44 +0000
Manifest this update: Thu 23 Jul 2026 17:00:44 +0000
Manifest next update: Fri 24 Jul 2026 17:00:44 +0000
Files and hashes: 1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: wcleBuW0r94SZd6GZ4i5Xs8Dvbl+Mq/SqgCbh+A/5bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:22:9f:91:eb:8c:29:f8:0f:8a:72:8f:a8:0b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
Validity
Not Before: Jul 23 17:00:44 2026 GMT
Not After : Jul 24 17:00:44 2026 GMT
Subject: CN=6d667c9e336a030effa9998dc515f1bfc79c1c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:36:87:bb:ab:1d:4e:24:35:cd:c3:ba:b8:
c4:72:e9:dd:0f:11:5f:66:7b:b7:f9:d1:f0:49:1b:
2e:b7:75:ab:b4:05:c7:8d:39:e7:8b:80:f3:03:b6:
88:06:0a:87:88:37:80:17:bb:ff:f2:be:34:41:b9:
89:a0:b3:33:e2:3e:5c:f5:f5:e2:3d:ae:68:72:08:
32:d7:bb:6a:8f:0f:d0:d3:b1:23:58:75:fc:b2:84:
82:00:98:95:74:23:66:76:0c:ed:81:b1:0d:a0:a1:
17:92:7f:ff:70:55:4e:e1:f2:cc:6a:5a:0d:dd:a3:
59:71:69:1d:0d:8d:77:2e:fc:e7:48:ec:c5:fc:8c:
b7:eb:bb:8d:46:f0:8f:50:de:5e:de:c4:41:ce:69:
de:45:d7:53:68:d7:57:62:bd:cd:c7:ec:89:aa:76:
46:d0:78:50:5d:46:13:4a:9a:7b:4c:78:78:5e:aa:
5f:8d:ff:7b:d3:5a:fc:65:6f:27:a6:8f:c4:64:1a:
62:ba:4a:0d:10:20:b6:c9:a3:cc:82:67:6a:11:9b:
3f:c8:dc:b3:d7:d8:c0:33:e6:fd:64:d9:79:c7:ba:
07:e3:ba:f3:ff:31:ac:3b:67:d3:98:b2:e0:8e:a7:
00:a1:7b:3c:e0:23:3c:30:22:f3:85:b9:be:a9:f9:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:66:7C:9E:33:6A:03:0E:FF:A9:99:8D:C5:15:F1:BF:C7:9C:1C:2E
X509v3 Authority Key Identifier:
keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:73:de:fa:a2:11:a1:85:c9:61:54:e7:b9:8f:3b:fe:d7:e3:
2d:bb:9d:2a:d0:ef:76:18:05:2c:17:00:cc:ad:de:c9:86:32:
64:9c:5a:f8:ec:eb:80:de:e1:15:23:df:1e:45:35:79:0c:69:
48:7e:70:0e:71:a2:4d:57:cd:3e:76:3c:f9:22:7f:f3:01:a3:
b5:fd:88:ef:ca:7c:ff:04:4d:35:df:a0:1d:e5:54:e1:0e:a0:
d1:f2:0e:f5:1a:9b:10:f6:9b:34:e2:07:d4:37:6b:a8:85:a8:
12:62:41:af:6f:2b:10:ea:c6:8f:76:b4:3b:da:07:74:05:6c:
4c:dd:14:31:50:61:10:fb:79:5d:d0:b6:50:b1:52:65:88:19:
43:53:42:59:cb:0d:31:b7:17:16:4e:b6:4b:d0:b4:14:38:44:
23:b7:cc:ef:77:32:c5:de:1d:3f:d7:34:d7:b6:1a:3f:99:b3:
db:39:7e:1d:d2:f4:3f:cb:e2:52:2b:af:e9:cb:a9:e1:92:f6:
66:30:65:d4:66:bb:47:55:d0:99:f7:50:f4:63:72:69:80:2e:
4a:13:d8:a2:2f:f2:91:89:ab:4c:10:8b:db:bf:cf:75:22:23:
96:ad:4c:02:a8:de:1d:37:0a:f5:ca:0e:73:9e:a6:1e:e1:98:
d5:dc:9d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:51 2026 by rpki-client