Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File: 6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier: jaYeTme0rDYRBv+DFVqb2y+amOkETDQz8WjUSbIbvU0=
Subject key identifier: D4:32:42:9B:DC:57:D6:16:4B:B5:F7:1C:77:95:0D:A5:66:BE:A4:22
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 019F946D7BB7B2379BC7824614AC416EAC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number: 19DF
Signing time: Fri 24 Jul 2026 14:00:30 +0000
Manifest this update: Fri 24 Jul 2026 14:00:30 +0000
Manifest next update: Sat 25 Jul 2026 14:00:30 +0000
Files and hashes: 1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: WaGKy53/hjJmkKbOjucmtbEKSYAuDfycyfGMTbO6x6A=)
2: JlHGBE70CjYUjMlPy-yN4dzG-cs.roa (hash: eJeCGZHCYQ5pmVVEGiFVOguyq7hsvoBtUeukZnmh3W4=)
3: _GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa (hash: TYTF9XrM81uGdSP5QXPvN15cnh9G39fwkeUY9WQ9Rbg=)
4: cxDAVDgNr82cHnIJJB4UwFs2cGU.roa (hash: sgT8v5E2LVdbt2FX0DJ7W7uBv5rW5PIhx+eS3wQDvSs=)
5: dwRGeRiPxu8Ert93hewpcLQlQPs.roa (hash: EAiXOznjLfpEqp6yCwCN/ahYsHXDQcQqsmXEqqAl9Vo=)
6: nSCF5qcvbkhkVZeNhESQPgQzsYw.roa (hash: Y9RP3rduyUtto1z3zNhzoo4HTEI6paw2VNckcRzLK4g=)
7: vSQI8aeWI14r_sJ8b9o2QgEO_BI.roa (hash: oiaQsMRtgp1rem+ZyltK5SLqiX97thYBgEBpvq3aaYc=)
8: wyPR3DQqTcPeXSMxj_8q1QvGp98.roa (hash: gpZ7dcu9+au0qJAS/mbf494bt1LZl0k6YCG8tQBUn4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:7b:b7:b2:37:9b:c7:82:46:14:ac:41:6e:ac:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Jul 24 14:00:30 2026 GMT
Not After : Jul 25 14:00:30 2026 GMT
Subject: CN=d432429bdc57d6164bb5f71c77950da566bea422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:95:ca:cf:db:c5:4e:95:25:72:ab:a0:e8:
80:8c:25:97:5f:35:de:e0:0f:79:2b:58:6e:c2:18:
3f:44:bc:f4:9f:30:1b:0d:e8:0b:9d:59:ed:19:4a:
ba:20:4a:6f:82:1d:79:43:85:40:04:e0:6c:54:4c:
92:b6:39:2f:99:53:ae:f7:1c:99:4e:a3:12:c9:09:
16:40:91:cd:7e:fa:a0:3b:9d:ac:10:2e:b3:d2:ba:
1c:10:99:7c:59:54:8e:c2:76:31:c9:3f:db:39:ea:
07:87:0c:42:8c:89:0b:fb:e8:33:e7:3c:46:8f:d7:
8b:cb:7a:43:4a:3e:89:44:9c:b8:6e:11:cd:6e:72:
33:dc:51:60:fd:e6:95:63:0b:4c:a9:1e:56:d4:21:
0f:ca:08:a6:f9:bd:9b:14:b0:92:46:15:91:0a:4b:
4d:63:e1:55:5c:0e:6b:a8:d5:07:4b:49:91:df:97:
ca:84:c6:25:a5:83:7a:31:6a:2a:31:10:bf:9d:35:
8d:32:59:90:00:24:6a:08:ea:5c:ea:90:99:16:c1:
9f:ab:85:57:ec:94:f4:1a:0c:84:a7:75:de:47:bf:
61:66:c1:02:33:f4:39:aa:cc:e3:e9:43:e3:83:8d:
4e:79:82:d3:22:b8:22:de:94:e9:45:2f:54:83:71:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:32:42:9B:DC:57:D6:16:4B:B5:F7:1C:77:95:0D:A5:66:BE:A4:22
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b1:4d:6c:6a:82:b8:c6:ed:71:c1:d1:f0:21:39:1a:49:66:
83:af:58:17:45:a0:e4:8f:c1:94:1f:86:9a:d8:4f:f6:48:b2:
86:e3:b9:15:37:83:67:11:6e:12:05:c7:d4:90:fe:b3:6f:a6:
e1:45:d6:f1:44:26:ab:f8:b0:0c:b7:fe:9b:f0:55:cb:02:99:
0c:24:c7:4d:de:70:82:fe:7e:ee:4b:5c:1c:d9:58:b8:63:11:
35:c0:2e:3b:c4:54:92:59:74:f2:b4:1b:32:23:28:53:bc:dc:
f4:a8:24:3c:dc:46:7c:cc:6d:31:f6:fc:a7:47:b4:26:94:c3:
ed:47:3a:ad:d8:e2:1f:f2:f5:37:e5:58:d9:92:30:33:1a:31:
b0:bf:63:70:1b:27:87:f2:16:7c:27:3e:ed:97:98:fd:44:f9:
83:2d:ae:5f:7c:57:74:a9:c1:aa:14:f4:22:15:c8:72:64:bf:
d5:e5:fa:d8:26:95:38:0e:93:5f:62:35:21:96:a4:f8:c2:13:
41:19:69:fd:99:db:c7:53:7d:51:f9:1a:d0:7a:2c:ad:06:76:
49:67:54:1b:56:d6:88:4c:ad:f4:ae:37:2b:6c:93:c4:93:c1:
18:0a:b3:d7:be:72:09:f6:00:f5:cf:ca:af:62:6a:48:40:c3:
eb:63:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:32:24 2026 by rpki-client