Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
File: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json)
Hash identifier: U282SpXWg+AKQIetLKddvRsNVIPgmmar38RWsjcSLb8=
Subject key identifier: D4:20:8A:88:7D:E6:D9:3D:71:DE:79:77:08:E0:A8:20:49:8A:16:8A
Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
Certificate issuer: /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Certificate serial: 019FA82B0F1279E2A42B285D058F8770155C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
Manifest number: 10A3
Signing time: Tue 28 Jul 2026 10:00:21 +0000
Manifest this update: Tue 28 Jul 2026 10:00:21 +0000
Manifest next update: Wed 29 Jul 2026 10:00:21 +0000
Files and hashes: 1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: 0lsTM48iEvW6bRLuXTqFcx9Wz9JT06hZp7TKvZtFnzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:0f:12:79:e2:a4:2b:28:5d:05:8f:87:70:15:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Validity
Not Before: Jul 28 10:00:21 2026 GMT
Not After : Jul 29 10:00:21 2026 GMT
Subject: CN=d4208a887de6d93d71de797708e0a820498a168a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:b7:75:b4:ca:74:38:76:35:84:a1:9b:ad:
1f:c3:85:3f:8e:a2:74:74:fb:fa:67:63:bb:21:1b:
f7:53:97:66:a5:27:30:24:58:fe:38:9b:51:be:11:
4b:45:f8:9c:05:67:10:ba:3d:ef:e7:97:73:bb:ea:
f0:e0:8d:31:d7:43:a4:79:15:a3:32:a7:b9:27:06:
fd:44:b0:08:a6:fa:8b:8d:31:f0:89:75:68:0c:b8:
7b:cb:4a:e8:69:8c:e0:99:95:b5:1d:98:6d:fb:38:
20:7b:e1:0b:86:ba:8c:d9:80:af:a9:63:b9:8b:3d:
ec:92:3b:1a:7a:a4:d1:be:d7:92:a7:5e:f8:94:d8:
a6:71:a4:27:d2:18:e6:45:ac:22:60:15:a7:a2:83:
bc:42:97:b0:ef:71:1e:b3:1c:48:06:14:37:07:41:
33:cc:45:47:ef:44:ba:5a:25:de:7a:c4:da:da:39:
11:97:a7:ae:57:df:4d:d4:99:61:86:cd:24:05:e5:
de:86:5b:56:08:87:02:b1:10:36:dc:16:02:cd:95:
1d:f8:e0:65:35:14:a0:40:2f:58:81:83:0e:9e:ca:
fc:4d:e1:8b:0e:26:31:71:df:59:c3:b7:bd:8b:a9:
0b:34:04:b7:cb:20:5c:7b:d6:c0:a0:6f:88:3f:d8:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:20:8A:88:7D:E6:D9:3D:71:DE:79:77:08:E0:A8:20:49:8A:16:8A
X509v3 Authority Key Identifier:
keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6a:af:d0:74:1e:29:5b:e7:64:94:47:13:d4:a8:24:5e:5b:
f3:69:3e:5f:a3:6b:23:cf:dd:3d:96:d4:24:a4:93:ff:97:e0:
29:68:46:1b:b8:87:29:30:67:9c:9c:a4:de:44:30:13:8f:8e:
2b:52:01:88:82:8e:cb:45:22:5c:75:35:a3:65:65:9c:3f:0b:
a0:45:0a:74:35:99:7e:45:89:4b:96:cb:90:d9:0e:b3:89:d8:
77:07:65:73:07:9f:30:36:45:b3:58:40:5a:c1:34:69:8b:9d:
5b:3e:34:90:40:9c:2c:bb:7d:82:b0:bd:0c:7b:32:67:58:2e:
18:8e:05:e6:01:21:af:31:cc:d2:7a:68:e1:1d:af:75:fa:7f:
43:76:1e:1d:ba:1e:f3:1f:8e:47:6d:2f:7a:ed:76:48:62:af:
15:6c:1a:76:1b:fd:c6:18:05:15:37:bf:be:e0:f0:ae:28:f3:
1f:50:0f:75:09:51:fd:71:ad:4f:3f:02:c4:f0:0e:ce:94:e3:
6a:f5:a1:c9:9b:9d:81:f1:24:31:ed:8d:3d:e6:56:87:91:19:
2d:fa:43:ba:26:f8:2c:ba:e9:5b:b3:38:c1:51:22:5b:33:ce:
18:7e:fd:5f:36:e5:40:02:3b:48:bb:47:0f:a0:32:71:8d:dc:
3b:6c:10:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oKw8SeeKkKyhdBY+HcBVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NmIwMjEyZTMzMmRjYThmYzdkMWVlNWE4MTUwYmEzODU2
OTljOGMwHhcNMjYwNzI4MTAwMDIxWhcNMjYwNzI5MTAwMDIxWjAzMTEwLwYDVQQD
EyhkNDIwOGE4ODdkZTZkOTNkNzFkZTc5NzcwOGUwYTgyMDQ5OGExNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqa3dbTKdDh2NYShm60fw4U/jqJ0
dPv6Z2O7IRv3U5dmpScwJFj+OJtRvhFLRficBWcQuj3v55dzu+rw4I0x10OkeRWj
Mqe5Jwb9RLAIpvqLjTHwiXVoDLh7y0roaYzgmZW1HZht+zgge+ELhrqM2YCvqWO5
iz3skjsaeqTRvteSp174lNimcaQn0hjmRawiYBWnooO8Qpew73EesxxIBhQ3B0Ez
zEVH70S6WiXeesTa2jkRl6euV99N1Jlhhs0kBeXehltWCIcCsRA23BYCzZUd+OBl
NRSgQC9YgYMOnsr8TeGLDiYxcd9Zw7e9i6kLNAS3yyBce9bAoG+IP9gmAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQgioh95tk9cd55dwjgqCBJihaKMB8GA1UdIwQY
MBaAFOlrAhLjMtyo/H0e5agVC6OFaZyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUt
OTA5MTAyNmFiYzcxLzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iMjA1NjEtODcwZC00ZTkyLWJjMGUtOTA5MTAyNmFiYzcx
LzEvNldzQ0V1TXkzS2o4ZlI3bHFCVUxvNFZwbkl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmqv0HQe
KVvnZJRHE9SoJF5b82k+X6NrI8/dPZbUJKST/5fgKWhGG7iHKTBnnJyk3kQwE4+O
K1IBiIKOy0UiXHU1o2VlnD8LoEUKdDWZfkWJS5bLkNkOs4nYdwdlcwefMDZFs1hA
WsE0aYudWz40kECcLLt9grC9DHsyZ1guGI4F5gEhrzHM0npo4R2vdfp/Q3YeHboe
8x+OR20veu12SGKvFWwadhv9xhgFFTe/vuDwrijzH1APdQlR/XGtTz8CxPAOzpTj
avWhyZudgfEkMe2NPeZWh5EZLfpDuib4LLrpW7M4wVEiWzPOGH79XzblQAI7SLtH
D6AycY3cO2wQBg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:54 2026 by rpki-client