Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
File: bE6tk3_29mwLFfItDUn5N243154.mft (raw, json)
Hash identifier: XtUSyPli71d2gQK6Qje0kPS+tgubu4HaVDddB/Ri/cE=
Subject key identifier: 13:B6:34:A0:62:99:3B:5B:8D:03:1A:37:EF:08:03:3C:2F:7C:D8:6D
Authority key identifier: 6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
Certificate issuer: /CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Certificate serial: 019F8ED9D0BABCEE04EBD5ED64E07610AE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
Manifest number: 29
Signing time: Thu 23 Jul 2026 12:01:06 +0000
Manifest this update: Thu 23 Jul 2026 12:01:06 +0000
Manifest next update: Fri 24 Jul 2026 12:01:06 +0000
Files and hashes: 1: HtXE6o5gyDE8p-LeGfVTGKS-HFg.roa (hash: TRqFmFDs3cFEdD+j1MIH3IwsMTCX5wrTHYLogmPYGvU=)
2: bE6tk3_29mwLFfItDUn5N243154.crl (hash: CsWhLYjxISboSiDCGQHMmlfOsMBXUSvy6AQdQeVCH4Q=)
3: vTlhAenRPSZUNMMxyWS0DXwQ5N8.asa (hash: PklvSNrA+pjY5wXK2t56S6nxPO2i6UZMi9BUxQ6a3ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:d0:ba:bc:ee:04:eb:d5:ed:64:e0:76:10:ae:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Validity
Not Before: Jul 23 12:01:06 2026 GMT
Not After : Jul 24 12:01:06 2026 GMT
Subject: CN=13b634a062993b5b8d031a37ef08033c2f7cd86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:05:06:ab:dc:24:17:b8:c5:71:04:08:ac:
cd:a9:9a:fc:bb:22:95:98:bd:ce:21:18:34:f7:89:
87:d2:6d:4a:49:30:ac:34:8e:51:07:a3:26:7a:3e:
1a:9a:52:42:50:68:63:97:b4:eb:98:ca:4e:e0:9e:
77:f7:50:38:96:ca:08:9c:ba:a7:b4:33:df:19:52:
18:bd:c4:46:6f:52:9e:b5:b6:1e:5f:f0:42:05:8f:
26:ac:eb:12:78:b2:52:d2:6f:4c:54:9a:d2:de:e5:
74:74:73:4a:87:e1:34:65:f7:50:4b:a9:cd:40:ef:
09:68:ea:d8:1e:61:cb:c5:00:31:22:a9:3c:8c:10:
b6:28:cd:52:5e:39:2f:4d:0f:73:2e:84:90:ea:e1:
4e:9d:bf:d7:09:60:3c:cb:c5:08:9b:f6:3c:4d:35:
6e:d4:2d:10:d4:88:2a:c7:5a:a6:3f:fb:21:a1:19:
43:f2:6d:09:ea:83:99:a6:ad:4d:f3:e0:d7:fb:73:
22:8a:64:52:26:ff:cf:5e:90:f7:e0:57:d9:17:5c:
28:74:32:03:1a:d2:4f:4b:aa:af:5a:6e:be:6f:6a:
95:65:e6:25:dc:0e:6d:46:32:bd:2c:7b:2d:29:92:
04:1a:8a:a6:23:23:99:fe:65:f7:ec:98:4f:01:b1:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B6:34:A0:62:99:3B:5B:8D:03:1A:37:EF:08:03:3C:2F:7C:D8:6D
X509v3 Authority Key Identifier:
keyid:6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:57:cc:41:52:64:26:25:2b:08:6b:f1:6e:18:a6:82:e1:89:
f0:39:b7:45:ac:2e:ec:4f:82:c1:91:a5:cb:86:9f:66:91:0d:
f2:bd:1a:3a:bf:a8:9b:89:fb:5f:c8:16:42:27:d1:41:a3:4d:
fd:0d:15:c0:01:b2:d5:99:fa:f6:20:dc:50:3b:2f:d5:49:83:
88:59:8b:26:68:1b:af:c5:34:4c:13:80:d6:33:d9:f7:e6:0e:
db:41:e2:83:c1:98:f8:cc:be:72:70:0e:3e:66:27:7a:34:ac:
07:b3:a9:f2:8a:87:50:c0:e5:db:ab:1b:7a:c2:30:09:ad:8c:
62:5a:18:60:de:88:d0:a0:bb:4b:54:74:c7:f2:b8:3e:8a:37:
e0:c2:81:4f:96:9e:f5:65:23:5a:60:61:86:61:05:7d:f6:98:
18:7b:7e:88:8b:91:c3:0e:8b:57:c7:cc:4d:0d:ff:33:d3:f6:
55:01:5b:2d:f9:14:2e:1f:4a:67:05:ab:cb:92:b7:dd:ab:dc:
bf:c6:38:a2:c5:4e:7c:f3:b1:9a:65:88:bc:73:98:f2:a4:4e:
2e:86:4e:ff:e2:fa:b3:cd:a7:d3:3a:03:46:da:7f:8e:6d:a1:
b3:fd:b5:0f:43:d7:5a:36:4b:d3:1c:08:16:e1:2c:d5:a1:fe:
ff:03:83:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:01 2026 by rpki-client