Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
File: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json)
Hash identifier: kS4V7fI79mYHCs8TQnicelXYD78ZxJvU5NFU3p8i3U8=
Subject key identifier: 5D:7D:5D:40:1A:62:B0:E4:27:64:F0:56:9F:C5:53:80:2D:60:F1:74
Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
Certificate issuer: /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Certificate serial: 01A0C9D8BB96D3F97F3DFE3F982E2CECF7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
Manifest number: 1139
Signing time: Tue 22 Sep 2026 16:00:19 +0000
Manifest this update: Tue 22 Sep 2026 16:00:19 +0000
Manifest next update: Wed 23 Sep 2026 16:00:19 +0000
Files and hashes: 1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: oOmmMVHH5v79JUJItnvzX13NF7pZTqPUXsp3qKTxXZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:bb:96:d3:f9:7f:3d:fe:3f:98:2e:2c:ec:f7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Validity
Not Before: Sep 22 16:00:19 2026 GMT
Not After : Sep 23 16:00:19 2026 GMT
Subject: CN=5d7d5d401a62b0e42764f0569fc553802d60f174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:9a:c6:d7:97:dd:83:5d:97:68:54:ba:66:
e9:eb:01:95:44:e6:34:ee:a8:0b:9d:8d:a6:7a:4c:
03:86:80:b5:fa:fa:d7:3e:73:83:d5:8b:d2:49:ce:
41:97:2d:a1:33:56:12:30:66:dd:4f:89:11:1e:1b:
7d:24:76:e8:9d:57:32:3b:f2:f8:31:e3:da:30:f4:
aa:c1:ed:b3:50:0f:2e:fa:34:df:59:b7:7a:db:0a:
b8:eb:bb:48:a7:0a:c4:67:1e:25:68:5e:a1:35:62:
1f:64:69:b3:6f:36:82:9e:f1:5b:bd:34:88:08:2e:
4f:a6:51:eb:4d:de:32:89:cd:b4:ce:61:ec:1b:f2:
3b:22:ce:50:ff:16:0d:b3:cf:97:56:21:4c:7c:86:
e9:25:0b:42:39:48:6c:07:ca:bb:55:60:c5:64:b2:
e7:44:3e:7a:eb:25:21:f9:14:cf:1d:44:b6:33:d0:
13:c0:d8:7a:2c:39:ba:3f:9c:e7:37:d7:23:cc:4b:
ff:e1:30:cb:da:0f:74:50:22:86:20:1b:ef:62:39:
ca:8c:c4:f7:c7:17:a7:eb:32:76:ab:c0:34:ac:79:
15:29:22:fa:14:75:7b:5b:7b:4b:52:cf:b7:fa:38:
4b:8f:29:14:33:91:bc:c0:53:70:37:ac:1a:aa:19:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7D:5D:40:1A:62:B0:E4:27:64:F0:56:9F:C5:53:80:2D:60:F1:74
X509v3 Authority Key Identifier:
keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:10:69:40:57:b7:aa:7d:cf:aa:af:36:f9:66:47:2c:70:2d:
9e:68:cb:ad:94:ae:f3:70:ac:55:1d:5d:db:3e:86:d7:0e:b5:
83:d1:fe:73:84:3b:75:48:f8:ee:65:d0:2b:a2:67:89:39:aa:
53:e2:7c:d0:55:fe:08:92:48:bb:ff:af:fb:13:fc:25:f8:aa:
97:92:c4:80:85:92:5c:be:d2:c7:d8:49:2d:60:03:e0:25:85:
94:d6:44:2c:94:e3:70:e7:e6:bd:27:71:a1:eb:c1:69:05:cd:
55:2a:50:8e:c5:8f:5e:31:05:5f:b6:0a:7b:ac:6a:a0:5b:46:
fd:9d:7e:83:33:5b:d9:1d:b1:b8:84:b6:46:01:7e:8f:cd:a8:
35:0f:e7:f1:9a:43:10:3c:f9:de:05:c2:ae:96:b6:e2:d1:a5:
7e:1e:cc:cf:c2:a8:1e:42:3f:37:ca:65:93:ab:24:e1:cd:e4:
7f:65:ce:f3:c1:e1:eb:de:79:5a:00:34:97:24:53:22:8c:e9:
ff:b0:6f:08:2a:f3:23:82:cb:01:de:04:87:ea:f0:bb:2d:9f:
63:0b:c7:a7:b3:96:5b:5f:d7:e0:a1:d6:55:4f:74:e8:9b:ca:
ba:bf:00:5d:7c:bb:c3:1b:b9:60:57:a2:98:3c:ee:87:2c:38:
70:5b:aa:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2LuW0/l/Pf4/mC4s7PeoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NmIwMjEyZTMzMmRjYThmYzdkMWVlNWE4MTUwYmEzODU2
OTljOGMwHhcNMjYwOTIyMTYwMDE5WhcNMjYwOTIzMTYwMDE5WjAzMTEwLwYDVQQD
Eyg1ZDdkNWQ0MDFhNjJiMGU0Mjc2NGYwNTY5ZmM1NTM4MDJkNjBmMTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQKaxteX3YNdl2hUumbp6wGVROY0
7qgLnY2mekwDhoC1+vrXPnOD1YvSSc5Bly2hM1YSMGbdT4kRHht9JHbonVcyO/L4
MePaMPSqwe2zUA8u+jTfWbd62wq467tIpwrEZx4laF6hNWIfZGmzbzaCnvFbvTSI
CC5PplHrTd4yic20zmHsG/I7Is5Q/xYNs8+XViFMfIbpJQtCOUhsB8q7VWDFZLLn
RD566yUh+RTPHUS2M9ATwNh6LDm6P5znN9cjzEv/4TDL2g90UCKGIBvvYjnKjMT3
xxen6zJ2q8A0rHkVKSL6FHV7W3tLUs+3+jhLjykUM5G8wFNwN6waqhmJkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF19XUAaYrDkJ2TwVp/FU4AtYPF0MB8GA1UdIwQY
MBaAFOlrAhLjMtyo/H0e5agVC6OFaZyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUt
OTA5MTAyNmFiYzcxLzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUtOTA5MTAyNmFiYzcx
LzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvxBpQFe3
qn3Pqq82+WZHLHAtnmjLrZSu83CsVR1d2z6G1w61g9H+c4Q7dUj47mXQK6JniTmq
U+J80FX+CJJIu/+v+xP8Jfiql5LEgIWSXL7Sx9hJLWAD4CWFlNZELJTjcOfmvSdx
oevBaQXNVSpQjsWPXjEFX7YKe6xqoFtG/Z1+gzNb2R2xuIS2RgF+j82oNQ/n8ZpD
EDz53gXCrpa24tGlfh7Mz8KoHkI/N8plk6sk4c3kf2XO88Hh6955WgA0lyRTIozp
/7BvCCrzI4LLAd4Eh+rwuy2fYwvHp7OWW1/X4KHWVU906JvKur8AXXy7wxu5YFei
mDzuhyw4cFuqQw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:36:32 2026 by rpki-client