Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: CKDDLD+8uGBd3H366VzriwLJXvvlGockuKWx6hLeIYs=
Subject key identifier: DC:4B:A7:19:44:33:9E:AA:6E:3A:53:F2:BC:83:40:62:AC:F9:07:59
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 019F8FB53D65F6D9CA8F422C4B87B4517C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 16:00:47 +0000
Manifest this update: Thu 23 Jul 2026 16:00:47 +0000
Manifest next update: Fri 24 Jul 2026 16:00:47 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: dJ0L5+hnz6wFKY7x53g83ttq4EMljc/dTzFj7ePmr9M=)
2: C5_CXUA-hhdUx_k-OWHw-aFPQjg.roa (hash: 5m8YSeYQsWZWPbqEN+OxCEF2VsF88Ekcd12LgCTpyv8=)
3: N_AGblVuGXaMJZMb2ApzAIuQPJ0.roa (hash: 5lDjmIb8YsbwWstNUGh9BH6bOqCQpiLvBcN69JYx3C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:3d:65:f6:d9:ca:8f:42:2c:4b:87:b4:51:7c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Jul 23 16:00:47 2026 GMT
Not After : Jul 24 16:00:47 2026 GMT
Subject: CN=dc4ba71944339eaa6e3a53f2bc834062acf90759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:f9:91:8c:0f:ca:43:bb:e9:a1:2f:58:de:
2e:dc:68:42:c6:aa:1b:6e:bd:21:40:97:7a:52:0a:
87:25:79:30:9e:de:02:46:0b:f6:4a:28:8f:f3:cf:
68:e4:1a:48:3e:53:ce:fa:70:d5:9d:e5:71:1b:2f:
6f:ee:2d:6b:3b:a2:92:ce:45:d4:b0:ba:16:a1:69:
6c:f2:bc:0e:e5:24:e5:2c:73:a7:6c:6b:78:c6:3f:
e2:67:0b:90:6a:a3:ab:5a:25:b4:e8:3e:91:d8:4e:
73:f0:cb:bb:69:b8:04:62:a6:5d:75:0f:b6:9a:66:
6f:9a:9f:31:25:ad:d3:cc:0a:4c:53:e7:13:e6:23:
84:4a:49:fe:12:9f:34:5c:c2:50:e7:a4:4b:62:a0:
59:6e:c0:c8:1a:99:6f:30:3e:8c:82:25:e6:07:3e:
91:42:25:94:d6:ae:fc:79:5d:3b:1e:86:de:66:ef:
45:af:60:f1:55:c9:53:81:39:77:8e:cd:51:b6:c2:
98:ad:fa:fa:44:fb:69:33:b4:9b:0f:ba:3b:11:20:
31:0e:2d:7c:08:fb:5f:d9:f6:5f:82:f6:66:e1:0b:
4d:e1:eb:5f:70:ea:ed:dd:1a:84:3f:b2:cf:f0:26:
6e:49:d1:60:d9:60:0a:c0:55:8d:50:4f:49:0c:c7:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4B:A7:19:44:33:9E:AA:6E:3A:53:F2:BC:83:40:62:AC:F9:07:59
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:25:ff:e0:5f:1a:36:c3:00:b9:1a:4e:d1:6a:3b:67:c1:bd:
50:30:2e:a1:80:a4:07:dc:49:c9:91:85:9a:f2:34:5d:18:c8:
fc:fb:56:d4:4b:e8:ef:45:cf:1b:1c:82:ce:fb:20:34:20:d3:
1c:38:15:b4:fc:f1:77:5a:7a:81:b6:e8:81:98:9a:6a:37:42:
86:72:e6:7f:e5:89:91:0c:6c:af:66:60:37:75:c3:ca:9f:a8:
4c:a0:e6:dd:a2:75:39:31:00:ac:19:bf:c5:52:23:83:36:76:
23:51:5b:3f:b7:fa:b2:92:30:55:06:de:7a:78:90:4c:8c:11:
80:03:11:09:d4:f8:fd:74:5e:76:a6:96:d9:55:45:78:bd:b2:
b0:7b:c7:30:96:1d:d0:bd:a0:33:0e:e3:0f:d6:e7:18:c4:8c:
4b:cb:15:a6:58:c2:66:db:e2:ac:ff:e7:69:7a:e3:00:90:92:
91:cd:d7:c9:b3:a9:7c:62:71:1d:58:3d:8d:71:69:d7:98:e9:
32:f8:98:99:ee:e7:76:b0:7b:2b:d8:3e:a9:0b:61:04:ee:ea:
16:66:a6:f8:e7:9a:9a:b8:6a:d1:ab:51:d6:77:f9:bd:34:f7:
27:db:da:a1:e5:ff:c8:7a:a7:6f:c9:10:b6:59:a4:b9:99:af:
48:34:c7:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtT1l9tnKj0IsS4e0UXwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGYwOGQ0ZWUxZjk0Zjk4NDQ5M2I0NjdiZDhhY2EyYWRm
YTI4NjYwHhcNMjYwNzIzMTYwMDQ3WhcNMjYwNzI0MTYwMDQ3WjAzMTEwLwYDVQQD
EyhkYzRiYTcxOTQ0MzM5ZWFhNmUzYTUzZjJiYzgzNDA2MmFjZjkwNzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a35kYwPykO76aEvWN4u3GhCxqob
br0hQJd6UgqHJXkwnt4CRgv2SiiP889o5BpIPlPO+nDVneVxGy9v7i1rO6KSzkXU
sLoWoWls8rwO5STlLHOnbGt4xj/iZwuQaqOrWiW06D6R2E5z8Mu7abgEYqZddQ+2
mmZvmp8xJa3TzApMU+cT5iOESkn+Ep80XMJQ56RLYqBZbsDIGplvMD6MgiXmBz6R
QiWU1q78eV07HobeZu9Fr2DxVclTgTl3js1RtsKYrfr6RPtpM7SbD7o7ESAxDi18
CPtf2fZfgvZm4QtN4etfcOrt3RqEP7LP8CZuSdFg2WAKwFWNUE9JDMcM3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxLpxlEM56qbjpT8ryDQGKs+QdZMB8GA1UdIwQY
MBaAFOoPCNTuH5T5hEk7RnvYrKKt+ihmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUt
MmVmYjQ2MWZkNDEzLzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUtMmVmYjQ2MWZkNDEz
LzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCX/4F8a
NsMAuRpO0Wo7Z8G9UDAuoYCkB9xJyZGFmvI0XRjI/PtW1Evo70XPGxyCzvsgNCDT
HDgVtPzxd1p6gbbogZiaajdChnLmf+WJkQxsr2ZgN3XDyp+oTKDm3aJ1OTEArBm/
xVIjgzZ2I1FbP7f6spIwVQbeeniQTIwRgAMRCdT4/XRedqaW2VVFeL2ysHvHMJYd
0L2gMw7jD9bnGMSMS8sVpljCZtvirP/naXrjAJCSkc3XybOpfGJxHVg9jXFp15jp
MviYme7ndrB7K9g+qQthBO7qFmam+Oeamrhq0atR1nf5vTT3J9vaoeX/yHqnb8kQ
tlmkuZmvSDTHOw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:36:25 2026 by rpki-client