
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File: 6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier: y15U0F/bhs5dBtwTqNBWzGK5UmwhIYI1BsKLTDb2VOA=
Subject key identifier: 6B:E4:56:1F:70:40:E8:97:85:8F:9F:ED:4E:B9:4F:4C:6C:D3:34:E5
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer: /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial: 019D382E7885C4EC97FB8B2E8CE35F0D296D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number: 0A09
Signing time: Sun 29 Mar 2026 06:01:02 +0000
Manifest this update: Sun 29 Mar 2026 06:01:02 +0000
Manifest next update: Mon 30 Mar 2026 06:01:02 +0000
Files and hashes: 1: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: VzwgNt/3lDjxNSP0c6qxdA8lofCScLZd7HrHAag8kSU=)
2: OsX0t0wG95-5VyP53Jq4AJS0W0M.roa (hash: y2uezb2UJkRqJ1oDp6l1/kWv/o+1MQQ44Y666OmQDxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:78:85:c4:ec:97:fb:8b:2e:8c:e3:5f:0d:29:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Validity
Not Before: Mar 29 06:01:02 2026 GMT
Not After : Mar 30 06:01:02 2026 GMT
Subject: CN=6be4561f7040e897858f9fed4eb94f4c6cd334e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:8e:7c:89:13:d3:20:38:cf:70:8e:62:88:
1d:76:57:f4:2d:2c:b8:10:94:80:d1:cd:46:07:55:
e0:79:a7:1f:93:1d:cf:3d:df:4c:a9:93:eb:ee:10:
b5:8a:1b:ae:ae:10:3b:2a:a6:4c:60:e7:54:89:c5:
27:bb:eb:96:7b:e8:ae:55:3b:c7:39:a7:44:a4:d8:
f2:3e:47:34:5e:c3:70:9e:7b:2c:9c:7d:79:b2:88:
5b:3e:93:94:ac:ba:3c:88:c0:fa:81:16:29:6b:29:
4c:7d:63:30:e1:c9:fa:2b:d8:09:2d:9b:b6:09:1b:
96:16:b5:49:4b:01:b0:78:06:7d:ac:e3:ef:17:83:
1e:3a:da:96:f9:bf:60:29:17:1a:5f:5f:34:85:bf:
e1:61:d0:c5:68:ff:7b:1d:ef:b0:ee:1f:54:d7:ea:
ac:06:9a:ab:95:ac:b5:5a:45:b5:e1:12:d2:24:10:
66:54:b3:3f:a1:79:35:17:b4:15:cf:ed:59:66:7a:
43:4a:39:c8:0d:18:5d:fa:a5:4b:6a:d3:27:f8:c6:
f2:96:cd:89:da:b4:cd:f8:eb:e1:62:02:5f:fd:98:
90:b7:fd:6e:bb:05:a6:7e:4f:30:93:d1:5a:64:b3:
c8:a4:94:38:23:e9:30:bc:b4:9c:cd:3b:a0:95:61:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E4:56:1F:70:40:E8:97:85:8F:9F:ED:4E:B9:4F:4C:6C:D3:34:E5
X509v3 Authority Key Identifier:
keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4d:64:bb:1a:ce:8b:d2:b5:c4:69:fb:b7:98:59:88:84:a5:
3f:a9:32:39:1c:84:17:42:03:80:6a:d5:59:93:19:e9:77:a0:
83:0a:80:d4:9b:50:35:54:56:6e:26:21:cd:fa:a6:a8:08:78:
d3:90:db:ec:d6:c7:3b:db:91:52:c6:18:ef:69:cb:96:d1:54:
12:06:d8:70:0b:5a:44:b9:d6:eb:3c:6e:7a:33:b3:26:6b:b9:
53:1d:b4:4c:b9:27:71:6d:63:66:3c:97:c2:ce:26:4b:56:a5:
6a:2c:df:61:11:fb:b6:39:10:d2:ef:3c:11:8a:02:fb:e5:b9:
6d:fe:ba:35:35:40:e4:b1:45:66:01:2d:85:22:b2:be:ef:df:
26:c1:07:a6:23:14:54:cc:3d:7c:7b:7d:00:ad:6a:d1:9a:77:
d4:8e:fe:3b:19:2f:7a:4d:bb:9d:c5:8a:e3:b4:bd:40:2c:09:
90:64:ce:83:1c:e2:1b:c9:a8:91:6a:67:1d:0b:dd:25:7c:55:
f8:c8:81:15:73:64:43:8b:79:d3:03:1f:cc:96:9b:6f:8a:8d:
7e:0f:e9:0a:32:a9:0d:d7:b1:ef:4d:0e:7b:ff:9e:f4:4a:66:
eb:f9:ad:d3:c5:33:42:44:87:25:77:83:5c:43:f0:b2:b5:c5:
e3:4d:38:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:04 2026 by rpki-client