
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
File: I35O6WWAXHT-K615pepShu9ofZk.mft (raw, json)
Hash identifier: jZuxTOWjJ72sJQuwIl1kcSSrS49T1Cz4s3MkczY45RM=
Subject key identifier: 9C:1B:61:A4:A6:A1:59:15:10:3F:85:36:37:2B:0F:2F:CB:3C:DA:C4
Authority key identifier: 23:7E:4E:E9:65:80:5C:74:FE:2B:AD:79:A5:EA:52:86:EF:68:7D:99
Certificate issuer: /CN=237e4ee965805c74fe2bad79a5ea5286ef687d99
Certificate serial: 01A18307A1B1657CD99AAB74304215A5527A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I35O6WWAXHT-K615pepShu9ofZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
Manifest number: 6B
Signing time: Wed 28 Oct 2026 15:01:17 +0000
Manifest this update: Wed 28 Oct 2026 15:01:17 +0000
Manifest next update: Thu 29 Oct 2026 15:01:17 +0000
Files and hashes: 1: Dw86BQwD7CpxNVB1IfdiHj_0660.asa (hash: oEarT5CVUXeCjVcHP6Lq9WuNhCM+VyZb6nwKwT5caDM=)
2: I35O6WWAXHT-K615pepShu9ofZk.crl (hash: HYRY1+hwZ/+7Nio6qS0Vgc+4ohXh+dsEX9t4a5sRTd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I35O6WWAXHT-K615pepShu9ofZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:a1:b1:65:7c:d9:9a:ab:74:30:42:15:a5:52:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237e4ee965805c74fe2bad79a5ea5286ef687d99
Validity
Not Before: Oct 28 15:01:17 2026 GMT
Not After : Oct 29 15:01:17 2026 GMT
Subject: CN=9c1b61a4a6a15915103f8536372b0f2fcb3cdac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:79:42:b9:37:93:44:77:7f:e3:a9:bb:48:
02:4e:e4:05:3d:df:18:f6:4d:f0:85:83:19:cb:d6:
8a:99:98:7d:79:57:c7:c1:0a:20:a7:f9:e4:5c:81:
1e:83:da:d7:ad:e5:e8:57:d0:c4:e0:15:9a:d0:3b:
da:b6:d8:7d:4f:7b:c7:f3:ca:c6:57:8a:8d:4c:99:
7a:98:95:3c:43:9b:24:1f:f8:4d:97:85:78:f0:aa:
9d:3f:ef:a6:72:8b:f8:ad:d8:fa:bf:02:25:eb:6e:
01:fc:1d:db:b0:05:bb:ac:aa:7e:17:c0:48:5d:95:
0d:8f:e4:7b:f2:63:26:a2:c0:27:4c:10:da:7a:0c:
43:5e:bd:7b:9e:49:42:18:67:87:84:01:b2:b3:7b:
a4:a3:77:a5:b8:3a:fe:15:f2:59:8e:a7:de:ae:dd:
98:21:98:58:d3:30:36:6d:84:57:27:f3:3f:1b:71:
63:3c:6b:f0:a4:eb:8c:67:82:b2:b7:be:84:e7:30:
b1:d0:7f:14:6b:14:7b:b6:f4:c6:e0:5e:aa:b0:35:
7b:6b:59:67:fe:89:37:cb:0e:9b:ff:79:37:29:f2:
2e:e0:c8:48:e4:30:7c:80:ba:19:91:57:35:21:e9:
b3:10:90:47:8b:cb:26:76:e3:b2:bc:29:2f:cc:56:
90:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1B:61:A4:A6:A1:59:15:10:3F:85:36:37:2B:0F:2F:CB:3C:DA:C4
X509v3 Authority Key Identifier:
keyid:23:7E:4E:E9:65:80:5C:74:FE:2B:AD:79:A5:EA:52:86:EF:68:7D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I35O6WWAXHT-K615pepShu9ofZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:16:d0:db:0c:bf:f8:12:2c:49:62:ce:de:80:35:dd:49:f8:
d3:bc:b6:38:79:0b:ff:59:3b:e6:c4:0f:d9:e1:ba:82:d7:64:
7a:94:cd:68:d6:52:70:13:7e:93:fe:96:57:d3:59:e6:96:d3:
a6:9a:1e:32:82:28:1b:84:7c:60:59:15:2e:13:83:4a:5c:66:
70:70:6e:e7:2c:cd:a6:99:27:ac:47:e1:9c:1b:b3:c8:2b:a3:
8d:0b:61:3b:1c:6f:cc:25:62:9d:2c:b2:df:03:40:9f:b6:d1:
eb:4b:d1:3d:df:e2:db:e4:93:28:89:ea:d4:51:bb:0a:92:df:
1f:e4:ad:31:20:71:ff:29:c1:e4:9d:4d:22:be:47:9d:07:78:
65:f2:f1:95:d8:08:18:2f:4d:91:a9:f7:10:09:a5:e5:2f:87:
ad:b2:af:f4:79:68:4d:a7:73:17:05:61:b7:04:7d:bb:b4:f4:
bc:fe:cf:d9:74:6d:cb:13:25:f9:8f:26:00:52:5b:e5:68:fc:
69:4c:e6:11:fd:11:d3:99:3e:c3:07:1f:2a:69:fe:a4:e8:2a:
6b:bc:56:c0:25:26:35:71:f8:57:13:5b:7f:11:3f:dd:18:f3:
04:93:58:c4:6e:43:a9:fa:b7:d3:ce:2f:71:7c:a4:c2:dc:f1:
f2:a4:57:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:40:32 2026 by rpki-client