Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft
File: 6krZNBGOZSbIlPRp-GqjIME-CPQ.mft (raw, json)
Hash identifier: afW4lvV1fMUc3GTxIROLMxHEkoRbqrRDV7lGyf110mE=
Subject key identifier: 6C:DE:AA:88:34:72:B6:92:10:C5:10:23:64:34:15:D9:3B:D1:18:BB
Authority key identifier: EA:4A:D9:34:11:8E:65:26:C8:94:F4:69:F8:6A:A3:20:C1:3E:08:F4
Certificate issuer: /CN=ea4ad934118e6526c894f469f86aa320c13e08f4
Certificate serial: 019F8F7F645C51CCD8AB7BF221E6D005A915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:58 +0000
Manifest this update: Thu 23 Jul 2026 15:01:58 +0000
Manifest next update: Fri 24 Jul 2026 15:01:58 +0000
Files and hashes: 1: 2ICA_jT8gH0SqY4DMPAhLBe-a3g.roa (hash: bQhPgBki/83xZpaETZB5bitS9JPACummJNBn28qxStg=)
2: 6krZNBGOZSbIlPRp-GqjIME-CPQ.crl (hash: VFHt9z34UVycSkdjqvjPE0UR2GmofGK5Tjtx+MUFpuo=)
3: BvgqH8EAXVWJotlokwrOIHxbYAE.roa (hash: CGihJpuAyd/wpD77regwALXMCxjzHShjZBJCu5oF9Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:64:5c:51:cc:d8:ab:7b:f2:21:e6:d0:05:a9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea4ad934118e6526c894f469f86aa320c13e08f4
Validity
Not Before: Jul 23 15:01:58 2026 GMT
Not After : Jul 24 15:01:58 2026 GMT
Subject: CN=6cdeaa883472b69210c51023643415d93bd118bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:65:c8:52:8a:91:cb:35:32:ed:aa:26:a2:
02:a0:e7:39:6d:25:af:6d:e0:2f:03:68:79:61:35:
7b:5e:75:36:2c:5d:de:57:a8:3f:a4:cd:52:37:44:
e0:f2:bb:64:34:62:77:ff:4a:67:5e:a3:19:50:2f:
5e:7a:7b:c3:ac:23:a8:7f:89:88:0f:98:37:56:34:
0d:10:10:ac:64:58:ef:bd:6c:89:ff:80:8a:1b:52:
6f:f5:db:fa:d1:7b:7b:92:34:4d:08:81:15:fd:c9:
ac:a9:98:68:1f:af:94:e8:10:24:ae:66:f2:c8:65:
98:ce:52:dd:a9:fd:de:4d:8a:eb:35:fa:d0:ff:24:
9d:ab:19:ad:5d:86:96:47:5b:8b:7a:8b:ef:c1:18:
ee:dc:25:a5:46:70:17:a8:13:d9:38:84:76:5a:89:
5c:e8:f6:be:fd:89:67:fa:f9:e6:50:b8:79:0c:59:
bc:0b:2b:15:95:29:ba:52:fe:89:5e:92:87:ab:e9:
84:9c:91:09:30:9e:14:f8:cb:42:73:66:a9:06:4b:
b1:2f:9f:8e:d4:21:de:fe:26:31:83:6c:24:f6:48:
be:60:49:aa:cd:43:2d:b1:cc:2b:ce:97:9f:28:91:
b5:98:40:a6:1f:ea:16:91:f1:fa:a8:82:a1:9d:73:
5c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DE:AA:88:34:72:B6:92:10:C5:10:23:64:34:15:D9:3B:D1:18:BB
X509v3 Authority Key Identifier:
keyid:EA:4A:D9:34:11:8E:65:26:C8:94:F4:69:F8:6A:A3:20:C1:3E:08:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f4:87:1d:19:25:25:54:57:3d:39:1a:83:c0:10:41:78:fa:
77:2d:ea:2f:c8:57:f0:1e:b6:71:f1:91:59:68:9a:f2:fd:e4:
31:a9:a8:c7:f8:a5:3e:a7:3c:eb:31:f6:07:58:bb:5b:d4:6d:
fb:41:29:f5:05:44:f3:6c:5f:e8:d9:4a:55:ce:2c:d3:fc:17:
00:7a:b9:f8:d8:70:c6:29:00:9f:77:33:ec:e8:8b:61:22:31:
ef:b2:a8:62:5a:dd:63:88:de:84:37:94:90:6f:19:a1:5a:00:
7d:cc:64:81:c0:c8:46:ba:5f:32:a1:17:6b:e7:ca:22:ed:2e:
01:88:ac:b8:c2:c1:3c:1c:8f:6c:e4:24:b0:c6:45:96:3d:cd:
d8:e0:c5:c5:8f:0d:7b:c2:9f:01:9a:5e:d3:3f:ec:dd:50:75:
90:67:6f:2b:72:51:f7:c7:f6:b9:a0:ae:dd:2c:f8:31:de:c1:
0e:c2:6b:ba:44:03:7f:78:a5:d5:41:9e:dd:1b:b8:6e:64:0c:
a3:74:3b:31:57:af:45:15:eb:03:e1:31:bc:a3:e5:67:bf:ac:
2d:d1:4b:89:96:d6:c9:16:07:40:89:b1:b7:c9:cc:98:d9:8b:
2e:e5:15:33:f6:56:ba:71:49:26:8e:0f:87:2b:26:1e:91:b8:
0e:c1:a9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:03 2026 by rpki-client