Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: qH8yvV6qRhydTA1jdz6xx4RMHbg7+5nQITxCjKacqUE=
Subject key identifier: 20:99:45:FC:23:21:DB:1C:2E:24:A9:3D:58:B0:A2:7B:1D:0A:1F:9C
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 019F9391999EEDDB69A73E0E2B38499BD813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 10:00:20 +0000
Manifest this update: Fri 24 Jul 2026 10:00:20 +0000
Manifest next update: Sat 25 Jul 2026 10:00:20 +0000
Files and hashes: 1: 4ZkKYT4tRABWwIPFtbKwFSuv7hE.roa (hash: D0yakznjZ4GLkw8PJfZndlmaCDEdQxVUthJnURjvcH4=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: ZJhix2omG2s/IHTqg5gJ2y3hW5HAsu46e/iQh2sgeF8=)
3: MUlaySuRJAJWjFOIuDQTeuxgbkI.roa (hash: k8la9Hpl6/O/fQnwY4pQN76Y+PJ8sXIpVpbtRiPNQgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:99:9e:ed:db:69:a7:3e:0e:2b:38:49:9b:d8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Jul 24 10:00:20 2026 GMT
Not After : Jul 25 10:00:20 2026 GMT
Subject: CN=209945fc2321db1c2e24a93d58b0a27b1d0a1f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:92:ae:ce:94:32:c6:7b:cf:38:1a:03:64:
e8:c4:f7:e2:73:1e:cc:bd:b5:d7:6d:0c:49:bf:20:
47:0c:fa:22:99:0a:15:95:3a:c5:80:43:f5:de:e4:
b8:f0:d3:0e:2e:4f:86:1f:ef:13:7b:16:89:91:67:
1e:32:5e:4f:70:61:e4:17:b8:11:a1:53:f2:bc:c8:
1b:d5:eb:6d:18:16:72:be:b0:4b:75:99:8a:7b:97:
41:11:33:05:1a:7f:1a:c1:0e:5c:f8:c4:8e:a0:b6:
2f:c1:01:aa:16:f8:80:2e:95:76:10:bf:e7:48:19:
25:1a:dd:36:05:72:79:6e:9b:cd:3b:1b:82:e0:c0:
e5:1c:7a:09:f4:8d:b4:fb:11:ec:48:50:49:ee:f9:
f6:61:9f:b5:1e:8f:db:1e:e2:c5:21:46:d7:22:00:
94:f4:2f:a0:ca:59:eb:b3:62:c6:76:11:96:49:9a:
8d:12:be:0f:bf:1c:42:36:7a:a2:37:b3:f1:ff:fa:
9d:7d:1e:c0:18:4c:e6:bf:11:73:b0:2b:90:6b:47:
f6:0f:41:04:61:6f:12:32:b9:85:d4:6c:0d:3f:14:
8a:49:fb:d0:ee:e5:9d:9c:6b:ad:93:c3:f7:7a:e5:
30:32:8f:d1:e1:3c:09:d6:54:66:70:1d:46:66:53:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:99:45:FC:23:21:DB:1C:2E:24:A9:3D:58:B0:A2:7B:1D:0A:1F:9C
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cf:2b:82:3a:de:e8:71:98:dd:c1:cb:4f:0d:dc:b9:85:9a:
b2:75:80:cb:4f:8b:e4:53:31:ba:f5:1f:7d:e6:5e:53:63:be:
a2:58:d9:e2:75:dc:0b:93:66:92:9e:d6:f7:4a:c7:00:5e:e1:
4a:36:8f:1f:aa:66:be:6d:5a:6f:b4:cb:cf:4c:d8:44:b7:c8:
78:f5:ce:4b:cc:d2:63:d6:34:da:c4:a9:c2:a7:6c:55:0b:a3:
72:8c:b0:29:d3:0e:ed:cc:8e:0e:54:8a:23:c8:45:c6:05:c3:
81:28:59:c0:2d:68:05:bc:04:f4:82:17:90:44:b0:ea:e4:a6:
a1:00:32:c7:32:25:7e:0c:8e:03:ef:22:9f:c6:74:f9:9e:5f:
07:22:33:e1:4d:93:27:e0:a3:ce:45:5f:d0:6c:18:04:cf:43:
db:82:0c:21:73:24:f9:10:f1:7a:b7:7f:19:ab:b4:3a:59:d4:
49:89:12:70:0a:77:86:e8:8e:19:2a:ca:0f:82:d7:39:09:51:
fe:81:16:d7:ee:97:19:2f:8c:4f:19:7d:9f:ee:49:10:99:ad:
18:66:cb:9c:d6:f1:cf:39:d9:67:ac:48:44:9e:3a:b1:f2:1f:
eb:5e:86:03:3a:ae:33:3f:fa:51:2e:7d:0e:ad:f4:5d:d5:fb:
35:3e:81:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkZme7dtppz4OKzhJm9gTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzY1NmYyMjAxNTU4OWZmN2NjNjYwNTY4NjdmNjA1ZDgx
NDQ5YmMwHhcNMjYwNzI0MTAwMDIwWhcNMjYwNzI1MTAwMDIwWjAzMTEwLwYDVQQD
EygyMDk5NDVmYzIzMjFkYjFjMmUyNGE5M2Q1OGIwYTI3YjFkMGExZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus6Srs6UMsZ7zzgaA2ToxPficx7M
vbXXbQxJvyBHDPoimQoVlTrFgEP13uS48NMOLk+GH+8TexaJkWceMl5PcGHkF7gR
oVPyvMgb1ettGBZyvrBLdZmKe5dBETMFGn8awQ5c+MSOoLYvwQGqFviALpV2EL/n
SBklGt02BXJ5bpvNOxuC4MDlHHoJ9I20+xHsSFBJ7vn2YZ+1Ho/bHuLFIUbXIgCU
9C+gylnrs2LGdhGWSZqNEr4PvxxCNnqiN7Px//qdfR7AGEzmvxFzsCuQa0f2D0EE
YW8SMrmF1GwNPxSKSfvQ7uWdnGutk8P3euUwMo/R4TwJ1lRmcB1GZlM4DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCZRfwjIdscLiSpPViwonsdCh+cMB8GA1UdIwQY
MBaAFOl2VvIgFVif98xmBWhn9gXYFEm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1Mzct
NjgxMmJhYmM1YThiLzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1MzctNjgxMmJhYmM1YThi
LzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYM8rgjre
6HGY3cHLTw3cuYWasnWAy0+L5FMxuvUffeZeU2O+oljZ4nXcC5Nmkp7W90rHAF7h
SjaPH6pmvm1ab7TLz0zYRLfIePXOS8zSY9Y02sSpwqdsVQujcoywKdMO7cyODlSK
I8hFxgXDgShZwC1oBbwE9IIXkESw6uSmoQAyxzIlfgyOA+8in8Z0+Z5fByIz4U2T
J+CjzkVf0GwYBM9D24IMIXMk+RDxerd/Gau0OlnUSYkScAp3huiOGSrKD4LXOQlR
/oEW1+6XGS+MTxl9n+5JEJmtGGbLnNbxzznZZ6xIRJ46sfIf616GAzquMz/6US59
Dq30XdX7NT6B5Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:02 2026 by rpki-client