Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: +SoD/gd/KwtnSue4O5JVnzmpbZoIMx9whLfp09B6WOw=
Subject key identifier: 94:9F:D8:C4:5D:79:D7:04:EB:A5:6F:35:BA:92:A4:0C:64:29:38:B8
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 019F94A4ED87818B393CE54426532A90D05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 0AC6
Signing time: Fri 24 Jul 2026 15:01:04 +0000
Manifest this update: Fri 24 Jul 2026 15:01:04 +0000
Manifest next update: Sat 25 Jul 2026 15:01:04 +0000
Files and hashes: 1: bes3Ak7lAYiWjjD6sUuNX8KOJ5k.roa (hash: lgQ99fWD6Q82webEcbroGsEXSi8mGfzgwcI7IvYH5SE=)
2: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: Gbk+TfhA8qZAV8DN/4RxUflmy3r8yEPGcygcz0ic0p4=)
3: pyzNTgyDpRY88na56omeNzoc2p8.roa (hash: AtQp7azQyTl2ubez83Xz2smb6q4U417Sym3wqe3HC6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:ed:87:81:8b:39:3c:e5:44:26:53:2a:90:d0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Jul 24 15:01:04 2026 GMT
Not After : Jul 25 15:01:04 2026 GMT
Subject: CN=949fd8c45d79d704eba56f35ba92a40c642938b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:f6:81:b4:83:e7:e3:f2:30:72:a1:94:17:
27:13:25:e9:53:90:ae:b0:f6:c2:30:40:c0:66:08:
9b:d1:42:16:c2:de:53:aa:b8:70:70:70:29:ab:98:
6e:a9:2b:7d:dc:ad:c3:18:16:be:f6:34:c6:02:40:
c2:b7:3e:51:14:dd:ca:f9:e3:e9:ac:80:4a:34:b6:
89:c5:14:38:2f:10:0b:69:1f:7c:a4:d8:ca:03:4a:
3c:a3:0d:4d:f3:82:61:a0:64:d8:a3:49:f7:03:dd:
0e:09:e9:b7:d6:36:db:e3:db:2c:dc:34:ac:8e:15:
68:ca:68:5f:30:34:8d:7b:f7:7d:3a:a7:68:80:9d:
0d:96:3e:00:3e:78:e2:21:33:d4:0e:78:e5:4d:ed:
05:40:e5:b4:7b:54:f1:5f:22:0d:25:c6:b2:5e:82:
fe:cc:76:04:9d:e5:67:f0:1f:98:c3:42:51:82:64:
f5:31:60:dd:fe:89:1d:41:e6:b7:81:ed:84:31:cf:
f1:9c:da:4e:c1:f1:43:54:30:00:11:da:01:0f:3c:
cc:47:42:1e:2b:5a:6d:dc:7f:d0:6d:98:a4:59:fa:
bc:f7:91:a9:2b:b2:03:64:f3:a6:24:df:d7:41:6d:
18:93:cc:d1:82:74:f4:22:3a:a7:9f:53:60:a2:ea:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9F:D8:C4:5D:79:D7:04:EB:A5:6F:35:BA:92:A4:0C:64:29:38:B8
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:17:9d:32:a5:dd:2d:c6:14:44:68:3b:bc:2b:ca:4b:cf:1e:
41:76:e0:21:d7:37:97:9e:ce:4e:e8:23:28:a7:60:5d:3b:30:
01:75:c2:3e:b3:89:c2:84:9c:7f:45:61:8c:76:13:b5:82:9c:
98:00:e1:29:b1:bb:bf:5a:c5:b7:4b:17:06:53:11:18:b6:57:
79:ae:f5:7f:8e:50:ce:48:e7:40:32:df:d6:ac:47:7d:ff:5d:
72:e8:8f:4e:ea:2e:cc:c0:18:1b:fb:ff:e1:bd:cf:66:2c:44:
88:95:b6:ca:98:bf:3a:84:c1:67:01:a5:4a:18:aa:ab:43:ad:
8d:4c:0b:72:eb:e8:73:75:03:24:89:50:d8:ed:32:65:fd:09:
73:64:ee:d9:8b:6d:5c:fd:18:91:28:81:f4:7a:3a:8f:27:2c:
ab:5a:1c:cc:ee:d9:0f:7d:a7:a8:1e:cb:ba:db:da:ae:8b:ee:
20:ad:4b:d6:cf:60:9e:f5:60:a5:ba:14:de:0f:62:55:1e:50:
59:32:d7:4d:88:cf:d8:3e:66:82:2c:10:39:2d:f7:29:71:ea:
98:4a:02:6e:c3:bc:5f:32:74:43:24:c8:fb:02:71:28:40:dd:
64:18:31:df:8b:34:76:2c:6b:01:a9:a9:f5:21:20:96:b8:b5:
dc:04:ef:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:10:52 2026 by rpki-client