Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File: 6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier: 2SKwGaP3a4wP64pQg3qQ0hUQID5UEtbREkam32/stOM=
Subject key identifier: 42:1F:66:85:62:8E:85:84:2F:D8:11:DD:97:7B:64:03:41:62:CD:FC
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer: /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial: 019F935B2125BD544739207A379F488E43C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 09:00:50 +0000
Manifest this update: Fri 24 Jul 2026 09:00:50 +0000
Manifest next update: Sat 25 Jul 2026 09:00:50 +0000
Files and hashes: 1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: XvFBO/E+QyAjp1QzmVQ47T5dKs3vOMnEPfRXvOitjDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:21:25:bd:54:47:39:20:7a:37:9f:48:8e:43:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Validity
Not Before: Jul 24 09:00:50 2026 GMT
Not After : Jul 25 09:00:50 2026 GMT
Subject: CN=421f6685628e85842fd811dd977b64034162cdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:87:f3:4b:8b:a3:c9:f4:e3:9c:4f:a1:12:
a6:43:3c:3f:fd:8b:44:0f:75:81:9f:d8:c8:22:a6:
ee:4f:21:37:51:87:60:b5:84:2e:26:14:89:77:b2:
85:2e:d8:39:25:9d:9f:9b:0d:ff:c0:81:bb:3d:51:
a1:85:37:ca:00:a7:b3:00:79:18:ab:10:81:00:43:
2e:7a:71:a4:58:58:8e:02:37:e2:ad:43:d1:07:d8:
05:e9:65:48:3a:c7:ba:fc:6a:34:47:55:3d:e5:63:
24:37:b9:70:d4:c6:34:06:62:87:0e:1f:26:e0:a7:
49:d3:5b:7c:12:c0:30:c2:f0:f3:19:fe:b3:d9:5e:
2c:82:09:5d:1f:46:60:f3:a2:35:ba:31:04:38:77:
ef:8b:3c:29:d8:b4:fc:9d:70:67:cd:eb:46:c1:1c:
c1:c4:53:f6:c5:84:ff:4c:f3:84:88:3f:89:49:66:
ea:fa:bf:0c:18:51:83:09:74:40:fc:0f:33:2b:dc:
ee:dd:f0:30:99:0a:34:be:a5:6b:41:f9:f2:d4:48:
30:d5:c2:01:31:c8:6e:83:b7:80:70:73:65:fc:f7:
ae:af:49:90:ed:d7:44:ea:3c:81:c5:a3:a7:3d:d2:
3c:5c:ae:f3:b5:91:64:a9:ff:11:c0:aa:9b:52:65:
a4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:66:85:62:8E:85:84:2F:D8:11:DD:97:7B:64:03:41:62:CD:FC
X509v3 Authority Key Identifier:
keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:26:e4:16:60:6e:b5:d3:60:d5:18:33:67:d5:68:d8:16:86:
3e:f0:3a:81:bb:59:54:56:54:50:a3:64:2f:bf:d2:64:35:a8:
79:bb:fa:4e:65:6b:a0:f0:30:62:08:34:8e:58:49:bf:17:36:
ae:1c:11:75:b5:c9:1b:ea:d1:78:ea:9d:a3:00:bc:45:1f:55:
8e:40:62:42:55:54:7f:d4:8b:98:ce:95:44:25:fc:85:10:ab:
c2:f6:22:75:9a:34:ea:3a:87:ee:07:68:bd:27:6f:e8:0b:39:
12:a3:e6:13:a7:61:1d:94:cf:f3:23:9c:91:2c:41:81:59:3b:
09:58:d7:c5:59:b8:bf:0b:81:6b:0f:48:6a:07:36:74:31:4c:
44:80:85:26:b8:8d:58:c9:2e:a2:0d:eb:01:ce:43:d1:fa:65:
5c:e8:12:aa:62:e4:a1:a9:ec:02:d6:c0:77:1c:c4:44:05:7d:
b9:cb:29:3c:01:f6:96:24:e6:f4:0a:7a:7d:77:bd:0e:0e:e7:
ae:68:6c:95:32:63:92:be:ac:71:cd:8b:2c:e7:d0:71:2c:79:
d6:3f:01:4f:d8:ea:a6:fc:d0:4d:50:b7:9a:50:ab:c7:2c:ba:
e9:c6:dd:97:39:09:ba:9f:ae:6f:27:44:2e:75:61:cf:9b:a9:
80:26:98:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWyElvVRHOSB6N59IjkPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDNiM2E1YTcyODBhYTlmZTJiZmZhOTA2NWMyYjJhMDFh
NTc3Y2MwHhcNMjYwNzI0MDkwMDUwWhcNMjYwNzI1MDkwMDUwWjAzMTEwLwYDVQQD
Eyg0MjFmNjY4NTYyOGU4NTg0MmZkODExZGQ5NzdiNjQwMzQxNjJjZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaWH80uLo8n045xPoRKmQzw//YtE
D3WBn9jIIqbuTyE3UYdgtYQuJhSJd7KFLtg5JZ2fmw3/wIG7PVGhhTfKAKezAHkY
qxCBAEMuenGkWFiOAjfirUPRB9gF6WVIOse6/Go0R1U95WMkN7lw1MY0BmKHDh8m
4KdJ01t8EsAwwvDzGf6z2V4sggldH0Zg86I1ujEEOHfvizwp2LT8nXBnzetGwRzB
xFP2xYT/TPOEiD+JSWbq+r8MGFGDCXRA/A8zK9zu3fAwmQo0vqVrQfny1Egw1cIB
Mchug7eAcHNl/Peur0mQ7ddE6jyBxaOnPdI8XK7ztZFkqf8RwKqbUmWkywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIfZoVijoWEL9gR3Zd7ZANBYs38MB8GA1UdIwQY
MBaAFOkDs6WnKAqp/iv/qQZcKyoBpXfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUt
NGNlYzY5NjgzM2VkLzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUtNGNlYzY5NjgzM2Vk
LzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCbkFmBu
tdNg1RgzZ9Vo2BaGPvA6gbtZVFZUUKNkL7/SZDWoebv6TmVroPAwYgg0jlhJvxc2
rhwRdbXJG+rReOqdowC8RR9VjkBiQlVUf9SLmM6VRCX8hRCrwvYidZo06jqH7gdo
vSdv6As5EqPmE6dhHZTP8yOckSxBgVk7CVjXxVm4vwuBaw9Iagc2dDFMRICFJriN
WMkuog3rAc5D0fplXOgSqmLkoansAtbAdxzERAV9ucspPAH2liTm9Ap6fXe9Dg7n
rmhslTJjkr6scc2LLOfQcSx51j8BT9jqpvzQTVC3mlCrxyy66cbdlzkJup+ubydE
LnVhz5upgCaYHA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:32:18 2026 by rpki-client