Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
File: 6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft (raw, json)
Hash identifier: m7160ss7fkF52DVZHHDNY8rpugEsIlUtOB6ONwxhv8o=
Subject key identifier: 49:5F:D6:28:50:10:B6:68:02:D4:81:65:77:BF:74:8F:5B:DF:82:FA
Authority key identifier: EA:1E:CF:AD:FA:FD:4F:E1:4C:BD:C2:21:B9:15:9E:E9:61:8E:FE:89
Certificate issuer: /CN=ea1ecfadfafd4fe14cbdc221b9159ee9618efe89
Certificate serial: 019F8F7E3285EAAD8FF5BB1451799F2ABC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6h7Prfr9T-FMvcIhuRWe6WGO_ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
Manifest number: 034E
Signing time: Thu 23 Jul 2026 15:00:40 +0000
Manifest this update: Thu 23 Jul 2026 15:00:40 +0000
Manifest next update: Fri 24 Jul 2026 15:00:40 +0000
Files and hashes: 1: 6h7Prfr9T-FMvcIhuRWe6WGO_ok.crl (hash: rzNKpngjwFeTWmwyZBE7xPSXafFsbMQ3o5spAOPHncQ=)
2: vwkWycVdom3nvYeKOf0XRuXuyg8.roa (hash: GQTFaeIhIDJqGTNfp3g118208VXOEiHmD7gFsTFKtRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/6h7Prfr9T-FMvcIhuRWe6WGO_ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:32:85:ea:ad:8f:f5:bb:14:51:79:9f:2a:bc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1ecfadfafd4fe14cbdc221b9159ee9618efe89
Validity
Not Before: Jul 23 15:00:40 2026 GMT
Not After : Jul 24 15:00:40 2026 GMT
Subject: CN=495fd6285010b66802d4816577bf748f5bdf82fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:46:d3:80:8c:d8:fb:35:e6:ff:40:a3:99:
8f:ef:0a:c2:e5:e4:aa:6e:72:7e:57:c8:90:55:9a:
30:e4:00:43:fb:53:38:b5:10:fb:96:9c:b5:1b:23:
04:95:49:34:e6:ac:b0:60:c3:b3:6e:65:e9:5f:42:
d9:54:4f:9e:fe:b1:87:cd:e2:4b:e7:34:e3:f6:44:
fa:69:4c:f4:bb:93:4e:ca:7c:82:eb:c8:16:99:bd:
d9:b7:02:3b:75:0a:27:fd:39:a7:c7:8f:dc:29:cf:
6a:9e:55:84:5d:6b:3f:92:a0:58:5e:1b:7d:f2:f3:
ba:64:dd:b3:6b:79:8b:30:0d:57:df:1a:b7:84:cf:
a8:2b:cd:55:e9:7e:4a:fb:05:2e:56:47:85:33:ba:
3b:d8:75:af:17:27:99:f7:01:5b:84:59:f2:3d:87:
dc:2e:5a:a2:c3:16:c2:21:3f:86:24:99:2d:cf:69:
e5:db:ef:2c:d6:2e:60:ce:79:ca:4b:13:b2:67:a1:
80:e2:9d:db:50:f4:94:71:4d:b5:f1:11:d9:69:49:
40:e3:fb:1a:00:f2:ce:bf:20:ad:94:03:04:c0:36:
17:8e:cb:be:30:59:1d:cb:89:65:05:3f:ed:ae:e7:
c5:a6:a4:ca:70:05:49:bf:28:d6:e9:72:aa:75:24:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5F:D6:28:50:10:B6:68:02:D4:81:65:77:BF:74:8F:5B:DF:82:FA
X509v3 Authority Key Identifier:
keyid:EA:1E:CF:AD:FA:FD:4F:E1:4C:BD:C2:21:B9:15:9E:E9:61:8E:FE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6h7Prfr9T-FMvcIhuRWe6WGO_ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1e:c9:5d:93:be:35:f5:3b:88:5e:d5:ab:11:8a:29:31:f4:
2c:be:de:7b:06:53:be:19:f4:66:fc:ea:eb:03:8a:69:b0:c8:
f0:70:8b:9f:a9:8d:40:e7:a4:44:ac:19:a8:af:dd:4a:22:4a:
c7:77:f5:d1:02:0e:11:db:55:b4:9c:a0:04:e9:2d:4d:2b:2d:
21:0e:c8:09:c3:45:ba:87:fc:28:93:a5:6e:0a:24:5b:d4:01:
71:45:ea:55:c1:33:8d:a8:2d:f7:1e:fc:23:33:09:de:25:d5:
bf:f3:ee:14:89:23:3a:97:0f:35:33:c1:76:83:e1:18:2c:03:
42:29:3e:a6:cc:5e:73:37:41:e2:fa:d6:ba:3a:2d:4c:45:d8:
eb:38:f6:4e:76:b9:90:5d:70:bd:97:7e:cc:b5:a0:48:9a:2e:
7d:05:8b:9d:b9:81:eb:32:65:cc:26:a4:2a:ad:57:50:df:42:
9e:59:ed:20:f6:3a:a2:75:1a:c9:1f:8a:0f:79:47:64:d3:28:
ca:5f:5f:8f:f1:33:8e:60:7f:d9:c4:e6:43:4b:09:a8:d6:c8:
cf:65:5a:28:52:84:01:d4:d3:8e:8a:c4:4d:c5:10:4c:71:48:
34:33:b2:fc:29:11:09:b9:bf:0a:9d:d7:41:b4:d9:66:ce:4a:
dc:e1:de:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:45 2026 by rpki-client