Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File: 6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier: kNNSbi8dhXEOLZSWpMQ4fo3kBof2GjUXmqWWkNd0qOY=
Subject key identifier: 54:45:A2:21:46:CB:C6:73:08:60:D2:42:66:24:F2:CE:BE:BE:55:14
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial: 019F8FB53BB3784034D5EB87F9302CEC6F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number: 0DB1
Signing time: Thu 23 Jul 2026 16:00:46 +0000
Manifest this update: Thu 23 Jul 2026 16:00:46 +0000
Manifest next update: Fri 24 Jul 2026 16:00:46 +0000
Files and hashes: 1: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: p0XwBr/94jMiFpwcApVvOiRbdu6cD2VhQCPtKpr1jRI=)
2: BkeMBpLUWgqrfQcp4liiEC-fNog.roa (hash: CNX30ei/1ARWUwhB6OtVE1WJLmIAFc4BETfwZmdj7/s=)
3: U28ApidzDmW3qwT6pO-KBtH1Onk.roa (hash: YOqXTeJcoEw4Wx+EWqlj/rtnbCvHPCfU7JYCJNjis8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:3b:b3:78:40:34:d5:eb:87:f9:30:2c:ec:6f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Validity
Not Before: Jul 23 16:00:46 2026 GMT
Not After : Jul 24 16:00:46 2026 GMT
Subject: CN=5445a22146cbc6730860d2426624f2cebebe5514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:3d:90:6d:e5:da:8c:19:88:ba:78:71:8f:
5d:a2:cb:01:60:d2:0d:90:c5:9f:d7:1b:5a:29:53:
f5:69:3d:97:64:8d:6a:08:16:c2:32:32:31:8e:01:
0d:5d:fc:f0:30:34:eb:9e:55:df:b3:0d:2b:a5:78:
6a:c7:86:97:39:b1:4d:f2:1d:da:ec:fc:7c:74:53:
7c:16:47:10:9f:f9:1b:37:7f:f8:99:f0:79:6f:29:
5e:fe:f7:d4:5d:ec:cb:d5:9a:cf:c1:4b:78:be:f9:
67:c7:69:8d:b6:f1:92:8f:23:1f:53:6a:37:ab:2b:
50:05:df:0e:38:87:b5:6b:63:9e:e5:68:8f:07:ed:
78:a0:62:aa:84:67:ce:e4:f0:d2:70:78:8c:af:a5:
a2:8f:9e:b2:e0:c2:9e:3b:cf:36:44:8a:88:8a:15:
01:8b:b5:5a:09:9d:4b:76:88:0d:f1:ae:37:d5:31:
a5:49:5d:12:31:f6:b5:af:60:37:94:64:b1:1e:6d:
7c:24:33:dd:50:b2:2c:72:dc:c9:68:3d:f2:08:b7:
89:e2:97:ab:85:43:b4:7a:63:77:a7:99:6d:a7:92:
47:6b:d1:ec:8f:f4:9e:0a:a3:7b:f2:83:99:96:05:
aa:0e:38:77:b0:ed:85:14:a5:8c:ea:6b:ab:e9:67:
a3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:45:A2:21:46:CB:C6:73:08:60:D2:42:66:24:F2:CE:BE:BE:55:14
X509v3 Authority Key Identifier:
keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:38:af:fc:e2:aa:2f:8c:f4:8b:25:f1:55:cf:45:20:c8:e4:
f5:25:2d:6f:49:23:6a:64:63:a4:de:c0:2a:88:4c:4f:82:3a:
a6:68:b7:02:38:cd:69:db:43:87:a2:49:67:cd:37:f8:d9:16:
ec:16:f6:cf:d6:b3:22:fd:b7:12:a7:81:aa:b2:fd:54:a8:44:
7b:a4:48:a7:2c:54:7e:c2:61:0d:e3:e2:a4:1c:3f:8e:c1:cd:
d8:88:3f:93:d2:a3:fa:ea:1f:41:0a:db:29:49:f8:4a:48:27:
af:57:d1:ce:00:e7:61:e2:d1:8b:d9:06:c6:89:9b:63:a7:86:
69:12:21:25:ca:b1:bf:1a:64:ee:2e:ce:09:30:a4:b8:20:ed:
87:1e:bc:bc:b7:d9:6a:ad:9f:ca:6d:5b:0c:34:96:05:54:64:
1b:2c:0d:4c:c0:99:0a:dc:fe:1a:6a:ff:82:cd:cb:cd:b0:30:
cf:78:f4:cf:ac:b9:51:85:d5:b1:b8:4a:23:e3:17:c5:ca:47:
89:a1:87:72:f5:53:6e:e5:a7:fc:23:35:67:d7:58:93:bb:4a:
55:a7:7d:40:99:12:4f:fb:0e:c2:5b:0f:11:29:83:1d:1c:49:
96:4f:62:84:fc:a7:0f:80:70:46:f5:53:05:f3:97:95:0b:fc:
e3:17:7c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:34 2026 by rpki-client