Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File: CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier: Dh0BwE1rmJD1podMN7yQFapKuUJJqYRYSb3JJRRXX6Y=
Subject key identifier: 51:33:B2:AC:88:17:AD:48:8F:3E:4D:04:3C:D0:BF:EE:4B:B7:A7:1D
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer: /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial: 019D37529ED40AFABC773AE72FF452C956C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number: 070D
Signing time: Sun 29 Mar 2026 02:00:54 +0000
Manifest this update: Sun 29 Mar 2026 02:00:54 +0000
Manifest next update: Mon 30 Mar 2026 02:00:54 +0000
Files and hashes: 1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: //j3RIZ5B+xlrcUEUacKLPKQbubiSi0BBreKR+Skfyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:9e:d4:0a:fa:bc:77:3a:e7:2f:f4:52:c9:56:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
Validity
Not Before: Mar 29 02:00:54 2026 GMT
Not After : Mar 30 02:00:54 2026 GMT
Subject: CN=5133b2ac8817ad488f3e4d043cd0bfee4bb7a71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:5e:23:9b:98:0c:83:64:90:f4:8c:69:ff:
3d:58:ec:e8:48:ef:5b:36:55:07:3a:c6:25:75:49:
23:99:23:a2:3e:5d:f5:8c:f7:b8:d2:45:8d:54:34:
e6:91:c8:a8:90:2a:6e:b1:01:89:8e:5c:9f:f0:64:
e3:ec:32:87:47:b9:f6:35:cc:b0:a0:1c:4a:e0:8e:
02:f0:e8:a3:0c:dc:85:3d:b4:be:5e:9a:52:8d:50:
c3:5c:69:29:19:09:f1:07:a1:de:6e:90:f4:4b:1d:
6f:34:b4:b0:c0:c0:b6:59:cb:e8:14:58:68:7c:2b:
04:19:08:36:18:e3:8b:04:cd:06:d5:5a:37:5c:16:
79:58:3e:8c:32:8d:4c:22:d9:ba:50:86:36:d4:e5:
44:50:51:48:39:3d:b4:0d:78:e7:64:9e:26:f1:fa:
af:49:da:0f:ee:f5:56:43:91:b6:8e:a7:5d:d9:99:
81:f7:fa:c8:28:d6:7b:59:0f:7d:11:d3:6b:9f:f9:
70:11:9a:26:4e:c9:04:2f:62:96:38:05:4e:1c:9d:
33:3b:f4:2f:a1:3f:31:84:58:aa:e6:6f:25:06:b8:
bf:fb:cc:6e:f5:d2:92:11:04:1a:03:fe:4a:6e:df:
a7:39:af:7c:6a:10:f9:88:bb:ef:b5:82:78:60:81:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:33:B2:AC:88:17:AD:48:8F:3E:4D:04:3C:D0:BF:EE:4B:B7:A7:1D
X509v3 Authority Key Identifier:
keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:88:7d:90:21:cc:b6:e1:ba:4e:47:db:f9:0c:ad:00:b0:86:
a7:ad:c8:80:e9:7a:71:61:1f:b8:ed:57:6c:f2:46:a1:15:ef:
e6:6b:1f:c0:24:30:b7:e3:1a:7f:57:9e:7e:07:97:22:fd:9a:
4b:30:86:57:a4:09:3f:ad:bf:95:be:c1:ce:6b:0f:d6:ba:07:
19:f9:e6:cd:56:d8:99:6e:ab:82:45:68:7a:c6:f9:51:e2:ec:
c2:0e:7c:74:4c:ee:97:3d:a3:28:58:21:f4:f0:52:68:3a:b3:
7d:10:41:64:50:99:76:d7:d6:84:6d:9c:08:b9:58:35:bb:a5:
11:ae:32:a9:8b:81:f0:97:42:de:64:2e:f4:f4:ed:89:ff:fa:
76:9b:7b:61:97:bf:2d:6b:7c:8e:d7:47:ad:80:b8:86:cd:31:
66:fc:9e:aa:49:f0:02:52:bc:de:46:c2:06:a5:4c:f7:44:5a:
e9:ae:c5:b5:bf:f2:b1:8d:29:38:be:52:08:3b:f0:0a:77:93:
50:aa:de:64:0c:13:48:7d:62:b7:12:3c:e2:66:85:29:4f:cb:
7a:dc:b8:b1:03:fc:a9:51:97:c7:7d:dc:b4:1b:54:dd:d3:9c:
a1:c5:99:75:c4:1f:a9:4c:8f:db:9b:bf:48:c1:14:12:b1:a9:
22:91:b8:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Up7UCvq8dzrnL/RSyVbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MmU5OGE4NTVmZWUwMmYzZGZmMDczMmQ3ZTE4NzkyZjNh
ZmY3NjcwHhcNMjYwMzI5MDIwMDU0WhcNMjYwMzMwMDIwMDU0WjAzMTEwLwYDVQQD
Eyg1MTMzYjJhYzg4MTdhZDQ4OGYzZTRkMDQzY2QwYmZlZTRiYjdhNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovFeI5uYDINkkPSMaf89WOzoSO9b
NlUHOsYldUkjmSOiPl31jPe40kWNVDTmkciokCpusQGJjlyf8GTj7DKHR7n2Ncyw
oBxK4I4C8OijDNyFPbS+XppSjVDDXGkpGQnxB6HebpD0Sx1vNLSwwMC2WcvoFFho
fCsEGQg2GOOLBM0G1Vo3XBZ5WD6MMo1MItm6UIY21OVEUFFIOT20DXjnZJ4m8fqv
SdoP7vVWQ5G2jqdd2ZmB9/rIKNZ7WQ99EdNrn/lwEZomTskEL2KWOAVOHJ0zO/Qv
oT8xhFiq5m8lBri/+8xu9dKSEQQaA/5Kbt+nOa98ahD5iLvvtYJ4YIEmFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEzsqyIF61Ijz5NBDzQv+5Lt6cdMB8GA1UdIwQY
MBaAFAkumKhV/uAvPf8HMtfhh5Lzr/dnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1M2WXFGWC00Qzg5X3djeTEtR0hrdk92OTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wN2JhYjQtMmZmOS00NTU0LTgyMzQt
YmU3NzcxZjE4MjQ5LzEvQ1M2WXFGWC00Qzg5X3djeTEtR0hrdk92OTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wN2JhYjQtMmZmOS00NTU0LTgyMzQtYmU3NzcxZjE4MjQ5
LzEvQ1M2WXFGWC00Qzg5X3djeTEtR0hrdk92OTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYh9kCHM
tuG6Tkfb+QytALCGp63IgOl6cWEfuO1XbPJGoRXv5msfwCQwt+Maf1eefgeXIv2a
SzCGV6QJP62/lb7BzmsP1roHGfnmzVbYmW6rgkVoesb5UeLswg58dEzulz2jKFgh
9PBSaDqzfRBBZFCZdtfWhG2cCLlYNbulEa4yqYuB8JdC3mQu9PTtif/6dpt7YZe/
LWt8jtdHrYC4hs0xZvyeqknwAlK83kbCBqVM90Ra6a7Ftb/ysY0pOL5SCDvwCneT
UKreZAwTSH1itxI84maFKU/Lety4sQP8qVGXx33ctBtU3dOcocWZdcQfqUyP25u/
SMEUErGpIpG4VA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:11 2026 by rpki-client