Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: aptH6CuYlF5AA62zwWEHZY1BnL63LUNc+YrX9i0/WdQ=
Subject key identifier: 8A:A3:35:4C:79:65:CD:2C:A2:C1:CA:B7:A9:AA:DB:C5:0A:D1:2A:47
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 019F8ED9CB55AC5A2C2116264509C84F7932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 11CA
Signing time: Thu 23 Jul 2026 12:01:05 +0000
Manifest this update: Thu 23 Jul 2026 12:01:05 +0000
Manifest next update: Fri 24 Jul 2026 12:01:05 +0000
Files and hashes: 1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: NUIlb/MHjry9bttH1U502PiwH3qx47sh7TKdUXcXxEQ=)
2: BDoL8rUpvbaK_16BWlbfMCNWUSU.roa (hash: GfKO3arzoWGyw+NdQY8Rv86I2fy83YtHFt/TTLJyJno=)
3: hvVtewn6w22bnIW8yznhNvKtiF4.roa (hash: m3PFir5NovTfkiQPZLXiwU+9sgPb6SDjnc3/rkv8wo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:cb:55:ac:5a:2c:21:16:26:45:09:c8:4f:79:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Jul 23 12:01:05 2026 GMT
Not After : Jul 24 12:01:05 2026 GMT
Subject: CN=8aa3354c7965cd2ca2c1cab7a9aadbc50ad12a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:ac:88:b7:60:67:8b:b7:98:d1:38:89:d2:
33:8b:16:35:db:f7:12:4a:85:41:de:ac:36:46:4d:
34:d7:59:c2:46:39:0d:9f:4b:2d:6c:bf:c4:21:7f:
23:9b:d8:9c:91:7b:dc:e6:42:ac:c6:6a:cd:f1:fc:
77:11:0a:de:a8:be:72:1d:79:a3:93:c4:26:6d:26:
25:a0:97:f8:df:92:92:95:4b:c0:72:02:5b:5e:12:
27:9e:91:2f:fd:47:cf:70:86:8a:5b:aa:4c:3d:c7:
c9:78:38:34:20:51:be:e6:3e:57:fd:ce:fd:b9:c3:
62:78:2a:0e:d2:ef:11:84:55:2c:1b:d1:98:d1:fa:
b1:7b:99:e1:b0:ea:16:29:5f:12:5c:1a:0f:bc:ab:
9a:62:26:f5:4b:53:2f:99:a1:0d:e5:91:db:3c:ab:
1d:58:ea:2f:d1:db:19:74:6d:4d:37:8b:ec:74:60:
89:74:b6:5a:ee:56:7f:1e:cc:67:ac:0e:63:6c:75:
e9:68:59:a6:eb:0b:90:b9:dc:e1:14:6a:1e:11:5c:
cd:21:d8:b8:be:b9:fd:b0:45:22:49:c7:18:ec:c7:
cb:24:e9:ce:a7:97:0b:25:77:a0:51:3e:b0:30:75:
43:37:0d:a6:d8:ff:5a:50:a8:b8:7a:e7:c5:c0:b9:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A3:35:4C:79:65:CD:2C:A2:C1:CA:B7:A9:AA:DB:C5:0A:D1:2A:47
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d8:a8:64:b4:e3:36:8b:3b:bd:19:84:4e:09:90:21:8d:08:
a3:6f:00:73:39:a4:f1:a1:45:93:b6:4e:1b:41:14:76:b9:89:
e3:d5:b6:a7:5e:19:6c:6c:ab:9a:18:87:1e:cd:c6:ec:5e:11:
09:f9:56:24:af:f8:55:35:53:37:0f:68:d5:f6:99:d3:d9:96:
64:f7:0a:fc:06:41:cc:5a:9a:97:17:35:55:84:52:9e:a3:b9:
d2:3b:c5:ab:f8:e6:75:95:58:d1:e8:39:88:07:19:53:2d:35:
25:8d:2b:f6:30:5f:94:e5:64:d5:23:f3:66:13:48:a6:eb:a2:
a5:f2:de:cb:98:6a:ce:30:db:23:42:b0:4d:c3:86:a6:3f:df:
4c:47:b0:21:c4:f4:1e:f6:fb:89:da:1b:39:de:6a:24:b6:17:
2d:9b:be:2f:62:1d:d5:5f:eb:a0:f5:5d:51:3c:24:4c:d9:4e:
52:47:ce:e0:d0:91:11:38:45:1b:8a:c6:68:90:42:bd:b6:24:
39:42:c5:a7:1e:9a:81:00:97:94:e7:53:0b:71:9d:cb:5a:02:
fb:dd:ef:c0:2a:cd:45:02:68:03:38:06:0a:8c:a4:54:b3:dc:
3d:a3:3d:f3:3a:2a:e6:c1:b4:a1:90:a5:f6:58:db:69:d4:98:
21:7e:5d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:32 2026 by rpki-client