Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File: CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier: E1vrYaE7qKr4BbLy+CaMnIOoaAgztnMqPUeEL5dN15U=
Subject key identifier: 88:63:DB:39:65:AF:7A:F2:4D:E8:37:80:59:7F:33:AE:B3:93:E3:47
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer: /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial: 01A0DC17512360CE8B9D3DB6096DF4AE5955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number: 08F0
Signing time: Sat 26 Sep 2026 05:01:50 +0000
Manifest this update: Sat 26 Sep 2026 05:01:50 +0000
Manifest next update: Sun 27 Sep 2026 05:01:50 +0000
Files and hashes: 1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: h3L4ijA07UWwc3xZ6GVl/faGHAhF8Q2WhyWIzYk5PSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:51:23:60:ce:8b:9d:3d:b6:09:6d:f4:ae:59:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
Validity
Not Before: Sep 26 05:01:50 2026 GMT
Not After : Sep 27 05:01:50 2026 GMT
Subject: CN=8863db3965af7af24de83780597f33aeb393e347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:31:55:20:ea:52:5c:63:f3:be:7a:1e:db:
ee:28:c4:d1:85:b3:0a:ad:a3:24:db:4e:b3:8b:32:
8c:d7:c8:2a:92:af:1f:05:c1:72:9c:13:1c:b1:2e:
11:5b:c7:d5:fc:b6:31:e5:3c:05:74:e9:a7:02:12:
23:8b:70:a1:99:de:f4:70:1b:de:a5:0c:3d:9c:9d:
d3:a7:a1:bb:14:8c:0b:fc:8d:25:bc:24:ce:d3:8e:
fa:47:44:de:33:b2:5c:b7:ec:3c:05:eb:4b:c1:c4:
5e:65:35:b1:f7:72:bb:ba:39:e5:8a:5c:86:9a:03:
e7:77:c9:60:5b:16:ae:c7:5b:ed:93:c8:f6:fe:68:
92:1f:10:09:f2:92:53:29:51:31:ff:28:21:6a:0c:
45:9c:7a:11:39:00:bf:a0:a0:92:ea:c8:70:31:54:
8b:9a:37:c9:48:ef:62:ba:23:93:cf:de:83:cc:a4:
89:26:74:97:52:f6:d5:c8:8f:d4:c0:70:1e:da:fc:
e8:19:90:07:93:15:b5:e3:f3:10:85:ff:37:cf:ed:
df:d6:92:3f:0c:2a:b0:9f:49:5e:9d:6b:6e:8d:0c:
cd:34:df:48:36:be:33:56:ed:50:bb:7c:83:ac:36:
a7:2f:44:44:8d:86:38:ca:1a:0b:56:7f:6f:b9:78:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:63:DB:39:65:AF:7A:F2:4D:E8:37:80:59:7F:33:AE:B3:93:E3:47
X509v3 Authority Key Identifier:
keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:18:f4:3a:c2:0c:e6:aa:ad:65:41:1d:bb:03:0a:fe:f2:4c:
0c:39:cc:3a:c9:ac:6e:e2:95:b4:e9:d4:fb:cb:4b:48:6b:ad:
d2:dc:06:a2:8e:fd:83:e5:50:49:96:13:fa:47:5b:96:e5:fc:
74:50:cd:cd:f5:58:2e:56:75:ee:02:21:2c:59:99:dc:7b:0b:
d7:e1:5b:6c:99:74:6d:d3:03:99:72:c6:82:c3:90:21:74:a3:
b5:c5:ef:ac:33:85:f6:b4:f3:df:8b:e7:e8:ae:3f:35:c1:38:
51:6a:1e:7c:3f:25:48:c4:22:a0:6d:fd:98:8e:d4:15:4d:13:
a1:50:c8:88:b9:5e:89:5a:e5:2a:01:7b:43:31:f3:59:90:f8:
f4:33:d3:b1:9c:1c:62:40:0b:a3:4b:8b:35:fb:d0:70:87:2f:
bf:ba:14:ca:c0:06:bd:81:44:ea:1e:87:ca:d0:02:4a:a1:13:
92:b9:b6:df:14:f5:aa:00:0a:db:57:94:8d:a4:9c:7f:b9:13:
a2:c5:09:9a:94:ef:3c:fb:b9:17:f4:25:a9:14:c4:4f:af:c5:
45:8b:4b:5b:d2:fa:3f:bb:3d:0a:11:cd:81:23:b5:3f:20:17:
63:21:84:c7:49:2d:c2:87:ee:cd:41:68:6b:44:e6:ce:c7:8e:
67:d5:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:29:34 2026 by rpki-client