Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: KpFzDIs0qfdrLXm2kBbthzF57domTQ06++Q1cPv0s34=
Subject key identifier: 41:F8:56:12:37:7A:88:FE:86:E6:F7:17:29:99:3C:11:25:95:CA:2F
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 019F94368EA112144C1A498FA2D096EB74E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 13:00:31 +0000
Manifest this update: Fri 24 Jul 2026 13:00:31 +0000
Manifest next update: Sat 25 Jul 2026 13:00:31 +0000
Files and hashes: 1: HZ8AlFPzeSKwnlXCV6rGz71Kb2g.roa (hash: cBgiVMyfZ1wPdRLeBDUH3L49HCW6dnbKeTA2KaOoCyo=)
2: k9Qt8bd5mtUe8WkBxy0-PnZZYDQ.roa (hash: 4cUGdQJG54wz4ImSZGhzke5tGudVY4frq/07PWJo/ug=)
3: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: oSqlelVGV96PPk4BYkHhvom+NknjLGNB9eCJI98W+Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:8e:a1:12:14:4c:1a:49:8f:a2:d0:96:eb:74:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Jul 24 13:00:31 2026 GMT
Not After : Jul 25 13:00:31 2026 GMT
Subject: CN=41f85612377a88fe86e6f71729993c112595ca2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e2:06:17:f1:bf:f4:c6:5c:30:93:79:0f:39:
9b:88:75:07:d4:dc:88:d1:54:ee:58:07:74:79:84:
d5:af:88:4b:bc:19:3e:a8:1f:ba:a2:3b:c0:41:64:
2a:b3:76:04:ca:68:9d:ef:bb:6b:a1:79:81:08:ff:
1a:aa:3f:03:cf:3c:8b:3c:6e:29:e7:1c:49:06:d6:
c3:ff:0b:ef:81:d2:32:3b:c5:35:4d:06:53:be:76:
55:1f:e2:52:43:a5:67:c9:1d:1b:0b:f1:30:91:45:
bf:13:52:a7:f7:61:49:c9:ec:c5:ac:2c:09:6d:90:
aa:11:82:b5:51:5a:c2:16:61:55:a3:9d:81:d5:f4:
1f:fe:fe:7a:77:86:86:74:5f:37:4f:fd:b9:4a:2c:
b8:84:ed:a8:42:54:32:4b:43:5e:8b:c7:a5:ee:51:
f6:30:d3:f9:7b:7d:50:8a:21:b9:14:8f:44:38:b5:
5c:ab:17:b9:7a:86:db:81:b8:b8:57:a6:fa:36:10:
dd:45:81:c1:3f:30:1b:52:bc:e9:b3:f8:11:56:f0:
a4:8a:c5:24:71:03:39:be:4b:4f:4b:d9:14:37:c8:
67:bd:09:bc:f6:0f:a9:ca:a8:b0:13:c1:f7:1c:91:
0e:b2:ff:63:89:08:4f:44:af:1d:28:32:04:88:2b:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:56:12:37:7A:88:FE:86:E6:F7:17:29:99:3C:11:25:95:CA:2F
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:65:e2:a5:21:7f:a1:62:bc:9b:8c:9e:11:01:a0:d2:72:45:
d5:be:45:a5:8c:65:7d:e3:db:9d:f1:3b:28:9a:d0:94:0f:b9:
59:9e:b2:4c:11:53:84:d3:b8:bf:f4:05:12:41:63:f0:67:eb:
4f:85:f5:17:fd:61:0d:db:08:e3:6a:61:75:3f:24:5d:a9:70:
26:2b:31:71:c1:ad:e0:a8:19:02:0a:88:88:5a:76:dc:30:4e:
8a:e6:ee:b8:27:94:7e:3d:eb:34:8a:a2:01:69:0d:ce:44:7f:
29:d8:45:42:7f:49:90:48:97:59:0d:f2:46:a1:14:23:86:a6:
63:ca:ef:fd:ab:e6:e8:42:65:aa:2e:d3:a4:78:01:50:12:3d:
fd:f2:88:34:fb:6e:51:ae:21:95:eb:6e:5a:2f:85:8b:0c:a4:
3a:7f:6f:17:5c:b6:00:e3:74:57:ed:7b:f2:81:36:d1:32:dc:
67:25:08:c8:cb:17:85:d2:af:fc:d5:01:e3:93:74:24:b2:c4:
5f:54:86:01:ce:b7:67:70:da:c2:60:77:fd:a6:ad:59:84:f3:
e5:a5:3c:94:fd:3e:50:e3:c0:80:24:2f:54:cf:04:2b:de:51:
e0:fb:a8:35:0b:ea:1e:23:41:9d:14:63:43:01:e4:3c:6f:44:
c1:d0:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:39 2026 by rpki-client