Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier: TTyWI3g7MgriagM+wWkX9a7RPUkNABDsB53bifFbHts=
Subject key identifier: 84:81:9A:89:92:A2:EE:61:89:75:9F:10:47:77:5C:FA:2B:F6:4A:67
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 019F90FF1B99E1244AA55313B8207810BC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number: 0F26
Signing time: Thu 23 Jul 2026 22:01:05 +0000
Manifest this update: Thu 23 Jul 2026 22:01:05 +0000
Manifest next update: Fri 24 Jul 2026 22:01:05 +0000
Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: CmNBalBSwhlaCKcaMcUEOAHCL4p8Hr27X4+ejQzFZD8=)
2: m26SchsQ_1UhkfbeCxw77FeJXCA.roa (hash: mdGSAQzmIJX1JB/CEMcZP3KjJ01KoAYsX4zgkL5y148=)
3: q_u69U7c2vxaq4Nl1v5Yc1MyuWg.roa (hash: 5dnA+LcITpNkdUu4xKxisyKSU227fPcdS2OGxJGeL28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:1b:99:e1:24:4a:a5:53:13:b8:20:78:10:bc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: Jul 23 22:01:05 2026 GMT
Not After : Jul 24 22:01:05 2026 GMT
Subject: CN=84819a8992a2ee6189759f1047775cfa2bf64a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:43:8b:4c:f2:a3:cf:45:fa:62:7a:b6:62:
cb:53:87:5b:3b:f9:a8:b9:e4:9c:29:46:b9:7c:f6:
e9:63:0e:58:40:99:f0:53:c9:4c:c1:8f:2b:0f:c3:
f0:4b:c7:a2:0d:f1:63:7f:0f:3c:f6:28:a7:68:8e:
4a:d5:83:e7:4a:59:a7:4b:7d:d9:ef:dd:40:77:90:
c6:b0:d2:10:f5:15:ce:81:66:3d:ee:ed:fc:b5:21:
c5:d8:c5:58:4f:5b:ed:b7:e0:df:34:2e:49:11:ad:
7b:83:2c:1d:07:f8:25:4a:e9:91:5b:58:28:a7:ad:
84:1f:d8:ba:28:bd:f8:9f:4e:b7:f3:08:0d:f0:65:
25:6d:dd:d9:4e:8f:b7:32:51:e2:77:90:0a:88:5d:
af:c2:9b:94:f1:5f:c1:90:0d:b5:b5:20:39:8b:88:
f2:aa:41:92:c5:50:46:87:5a:38:a6:c7:ef:e6:5c:
6c:45:af:95:4b:83:fc:24:15:6a:57:58:84:eb:77:
47:3a:3d:7f:8a:cc:ab:5f:0c:fc:ff:a2:52:bb:56:
b6:bd:2f:2f:d4:a7:e3:90:d2:97:39:af:83:03:c1:
63:e9:28:94:38:af:7f:fb:90:d3:6e:c7:d3:72:1b:
29:6e:90:b4:e0:a1:d8:f7:42:48:4d:8c:f7:5c:f1:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:81:9A:89:92:A2:EE:61:89:75:9F:10:47:77:5C:FA:2B:F6:4A:67
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6f:68:44:05:a1:0f:60:d9:9b:2f:22:50:c3:8f:4e:1f:64:
bc:52:17:4f:a4:28:c9:df:53:c9:84:11:5d:42:4b:b1:98:52:
5c:e4:ad:12:c0:64:fc:64:46:ce:6e:b0:17:08:9d:c1:54:c6:
4c:ff:ef:67:ca:69:62:12:69:b5:63:f2:2f:02:75:12:e6:81:
8b:b5:a5:29:3e:98:ad:63:28:90:e3:1e:0e:43:91:f6:1d:b4:
c1:83:d3:b5:b1:a7:1a:94:b8:b7:54:cc:43:d6:49:5c:f1:52:
71:96:47:a8:79:9f:4b:d6:b4:f4:af:7c:be:26:f1:c4:a5:7d:
3a:91:4e:35:7b:07:29:47:b9:be:55:60:7b:0a:58:41:5b:70:
27:8a:f6:13:aa:6f:f5:a8:61:86:ba:9e:da:4b:9e:14:34:ba:
28:b3:f1:9b:e8:ee:31:b2:54:0c:a0:d5:72:e8:fd:52:27:5a:
8c:6f:ce:e6:6a:12:43:88:78:23:d9:14:4e:f6:42:52:01:46:
90:10:be:27:c7:15:42:dd:0f:bd:3f:b7:14:01:fc:18:96:32:
8b:40:18:35:71:c9:45:eb:40:fa:fe:bf:86:d0:4e:43:8a:98:
1f:42:d7:3c:c3:20:00:fe:8a:b8:f2:6b:9d:be:f6:dc:01:e7:
ad:b5:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:50:11 2026 by rpki-client