Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
File: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json)
Hash identifier: NEgkr6ye1QEWsnuVCS4V1g2cOsaTfH4SV9dEloNXCOY=
Subject key identifier: 96:E3:56:FF:0F:68:8B:99:3F:E3:91:9F:CB:51:7A:3D:55:3C:03:EF
Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
Certificate issuer: /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Certificate serial: 019CAB34171AAA0F41972C681ECE6F848C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
Manifest number: 0791
Signing time: Sun 01 Mar 2026 21:00:43 +0000
Manifest this update: Sun 01 Mar 2026 21:00:43 +0000
Manifest next update: Mon 02 Mar 2026 21:00:43 +0000
Files and hashes: 1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: KGHteZ/pWNPy/N/tCyNvgfz296Ywyto8eNbSaLPyYB4=)
2: hElyins30a6CcTsBId_5i9QZESM.roa (hash: XTxIIPJV+tyv9VF/zIfOPYzhtJazNs7LRzbWZlggukw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:17:1a:aa:0f:41:97:2c:68:1e:ce:6f:84:8c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Validity
Not Before: Mar 1 21:00:43 2026 GMT
Not After : Mar 2 21:00:43 2026 GMT
Subject: CN=96e356ff0f688b993fe3919fcb517a3d553c03ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:95:86:e8:54:59:ff:53:54:0e:dd:d3:c9:
31:04:17:a1:b0:d0:45:01:48:fa:ce:c6:3d:ae:96:
3b:f9:5d:1a:e2:f3:1d:11:9c:0c:25:1b:d5:16:20:
15:dd:19:9f:5c:13:6b:dd:79:06:e0:27:38:3e:58:
01:08:cb:2f:e8:e6:2f:d8:c2:1d:1a:f7:77:d3:08:
82:62:1d:3d:a0:4a:7f:7d:e9:62:3a:45:bb:a5:ef:
66:f4:ef:84:55:82:ad:d0:a0:ca:cb:49:7b:c4:97:
ef:0c:8c:89:a1:0e:c3:81:53:dc:5c:7f:49:51:04:
f5:6b:ef:cf:6c:fd:68:6e:fd:43:7b:1b:c7:8b:60:
9c:89:ba:e9:12:01:19:1f:7c:e7:b5:65:b9:2b:21:
8b:76:5e:42:14:80:20:b5:02:9a:6c:8e:cc:61:e0:
55:f7:47:45:30:48:3e:fa:e4:e4:2a:2d:4b:bc:1c:
56:eb:d9:b3:a0:fa:eb:ae:79:7d:24:f2:5c:c9:dd:
8f:b2:29:ab:a1:50:c1:49:8e:6c:3a:80:1f:36:f8:
23:42:5b:6a:f4:f9:22:b1:23:1b:88:9d:be:6a:e9:
1c:f2:cc:2d:b6:71:cd:8a:d6:73:70:ec:2b:92:92:
c7:67:bf:59:1e:b0:a0:8d:83:cd:9f:c1:45:d0:e2:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E3:56:FF:0F:68:8B:99:3F:E3:91:9F:CB:51:7A:3D:55:3C:03:EF
X509v3 Authority Key Identifier:
keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:af:bf:1a:91:4c:a2:4f:71:d6:0f:a3:9d:ad:9d:41:d4:62:
fc:89:80:20:b2:6d:5b:dc:ac:3c:fd:cd:5f:b4:e5:8e:92:e3:
0e:2a:8d:34:c6:2d:b0:e1:b7:96:4a:87:10:77:f2:56:3a:b1:
14:28:01:21:c8:34:a2:75:cc:d0:cc:3e:c4:08:5f:dd:46:ee:
7b:5e:f6:a4:de:dc:de:00:0b:e6:96:5e:b0:78:08:28:f6:9f:
5f:48:8d:ab:61:76:55:b8:a1:ab:67:02:29:9f:be:ca:55:c5:
eb:f6:67:19:00:e9:44:51:83:c7:9e:c4:62:3d:94:d5:fe:3a:
39:ae:81:35:17:42:8a:d8:5b:50:43:57:e2:47:21:f2:36:30:
d3:f9:70:23:e4:42:92:1f:5d:d4:40:ed:5f:b9:75:98:24:1b:
1b:bf:ad:c3:3f:32:3a:0b:1b:1b:9f:76:14:b1:38:19:c5:03:
35:e8:d5:32:b3:f8:51:34:17:a5:0a:b8:42:b7:c2:31:0d:7b:
51:b1:bb:dd:67:a8:97:47:da:67:2a:ee:ef:a9:49:ed:d8:4b:
96:b3:57:ac:38:08:d0:22:3b:25:6d:39:23:71:ea:d4:38:f2:
ef:48:11:23:ac:0b:a4:ee:a2:ea:45:a3:63:e7:e9:04:fa:6e:
cc:8c:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:38 2026 by rpki-client