Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
File: 6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json)
Hash identifier: bcihcPO8hGG978DHrKJrxqbv2b/DGYg0XhpKIOP2EcQ=
Subject key identifier: 72:C8:27:D4:23:5C:44:74:FC:5F:C6:02:20:B1:E4:60:AE:A3:64:13
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 019F913594A0DF78F6597D10A1F31A5FF4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
Manifest number: 0C84
Signing time: Thu 23 Jul 2026 23:00:35 +0000
Manifest this update: Thu 23 Jul 2026 23:00:35 +0000
Manifest next update: Fri 24 Jul 2026 23:00:35 +0000
Files and hashes: 1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: huKZ27zBsbRnxml5LDO91dmNfuesPlPD60LcnhqY29Y=)
2: b_tsB2psJkgmiZaOr3w-QgtEJZw.roa (hash: JEjqJzbCuRhzhys3DkYfGTwD4aP+4P2Txn/0Mjz9ZOQ=)
3: uSr1yIrAzCz2O7l9EFFpJ1IdM7A.roa (hash: 2JNNqAz8LguyYvZQxdaeLL3oFCalZa88Rp3mN9dpy5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:94:a0:df:78:f6:59:7d:10:a1:f3:1a:5f:f4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Jul 23 23:00:35 2026 GMT
Not After : Jul 24 23:00:35 2026 GMT
Subject: CN=72c827d4235c4474fc5fc60220b1e460aea36413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:3d:aa:08:32:15:bd:82:3e:86:d0:0b:d4:
3d:61:7e:1f:1b:e1:3b:47:a7:9c:7c:fd:23:96:6b:
79:b7:87:36:5c:70:6e:3f:31:8b:c5:73:ba:18:c8:
db:11:2a:d9:fa:80:34:4e:6b:30:fc:fc:e9:0f:38:
37:b7:35:b9:f8:74:9a:c3:a7:ca:8d:8c:f8:ed:6f:
05:fb:36:ea:c3:af:7c:b3:e2:16:21:32:44:07:4e:
19:71:90:4e:80:06:e5:64:a9:ad:f8:0b:1d:55:d5:
58:70:df:2f:58:73:15:46:28:db:51:6f:1f:7f:81:
12:c7:06:d2:26:3e:54:a6:7b:33:5e:ea:b5:5b:5d:
7b:9d:ce:18:3d:6c:6b:54:01:81:98:b5:fd:8b:92:
6c:05:25:2d:17:f6:4c:2a:83:95:4f:4f:75:84:3d:
e3:17:fe:2a:7b:39:03:8d:09:f6:05:22:cd:9a:e1:
2a:1e:af:ca:5c:17:c3:1c:1a:ed:32:02:db:9e:61:
9c:71:98:84:02:d7:8a:19:82:00:b1:40:7b:0a:c6:
cd:45:b7:51:1b:be:27:42:a1:09:73:ca:a8:24:d8:
16:18:8c:2f:3b:30:22:dc:83:d1:ca:b8:17:48:aa:
7a:23:b0:d0:60:41:60:36:d2:70:57:ac:a6:f0:f1:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C8:27:D4:23:5C:44:74:FC:5F:C6:02:20:B1:E4:60:AE:A3:64:13
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:44:4d:01:7b:f3:53:b2:48:01:91:ca:fa:65:6f:f2:fc:68:
c8:c6:66:28:6b:2a:f7:cd:37:de:ac:21:a6:b8:f2:32:cf:f9:
0b:e2:40:12:5d:35:56:f4:ea:39:e8:88:4f:cd:eb:09:c9:9c:
cf:39:20:b1:4c:95:e8:b2:e8:df:fc:e7:78:31:63:2d:78:2c:
4f:0d:87:94:8d:e7:f7:5a:74:b4:ce:b4:4b:e3:d0:9d:e3:4b:
c5:46:8c:6e:e1:7b:d8:b0:b3:c6:77:8d:f1:cd:b8:50:ad:a7:
4e:1b:e5:c6:93:4a:eb:f2:29:57:c5:f1:5a:dd:9c:5f:7c:b5:
f4:fd:61:c0:1e:d5:6b:34:d2:14:2d:48:0f:b4:9d:9f:2a:26:
49:55:d6:29:e2:75:cc:2c:e1:55:1e:d1:9c:03:df:83:4c:42:
1f:0b:54:bf:86:56:af:60:7e:c6:d4:89:ae:d6:6a:99:5f:85:
69:35:f8:92:c9:f8:ea:34:81:c7:95:8c:f3:0c:5e:3a:de:17:
38:10:55:2a:9d:0f:99:e3:10:22:00:71:a8:4e:6b:df:ab:e5:
b0:f5:ac:a0:8c:d1:60:0b:cc:6b:fb:c2:c5:de:b2:bc:5c:2f:
3e:e5:38:79:c6:11:6c:6c:6c:cc:99:7c:ae:84:68:8b:2e:fb:
fd:9e:3d:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNZSg33j2WX0QofMaX/S2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWNjZmQyMWFiZDdmZTNmYTBkNmJiMzFkZjQ4MjBiZmI1
YTQxODgwHhcNMjYwNzIzMjMwMDM1WhcNMjYwNzI0MjMwMDM1WjAzMTEwLwYDVQQD
Eyg3MmM4MjdkNDIzNWM0NDc0ZmM1ZmM2MDIyMGIxZTQ2MGFlYTM2NDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwQ9qggyFb2CPobQC9Q9YX4fG+E7
R6ecfP0jlmt5t4c2XHBuPzGLxXO6GMjbESrZ+oA0Tmsw/PzpDzg3tzW5+HSaw6fK
jYz47W8F+zbqw698s+IWITJEB04ZcZBOgAblZKmt+AsdVdVYcN8vWHMVRijbUW8f
f4ESxwbSJj5UpnszXuq1W117nc4YPWxrVAGBmLX9i5JsBSUtF/ZMKoOVT091hD3j
F/4qezkDjQn2BSLNmuEqHq/KXBfDHBrtMgLbnmGccZiEAteKGYIAsUB7CsbNRbdR
G74nQqEJc8qoJNgWGIwvOzAi3IPRyrgXSKp6I7DQYEFgNtJwV6ym8PFVHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLIJ9QjXER0/F/GAiCx5GCuo2QTMB8GA1UdIwQY
MBaAFOmsz9IavX/j+g1rsx30ggv7WkGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMt
NzViNjg0Zjg5MGI0LzEvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMtNzViNjg0Zjg5MGI0
LzEvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0RNAXvz
U7JIAZHK+mVv8vxoyMZmKGsq98033qwhprjyMs/5C+JAEl01VvTqOeiIT83rCcmc
zzkgsUyV6LLo3/zneDFjLXgsTw2HlI3n91p0tM60S+PQneNLxUaMbuF72LCzxneN
8c24UK2nThvlxpNK6/IpV8XxWt2cX3y19P1hwB7VazTSFC1ID7SdnyomSVXWKeJ1
zCzhVR7RnAPfg0xCHwtUv4ZWr2B+xtSJrtZqmV+FaTX4ksn46jSBx5WM8wxeOt4X
OBBVKp0PmeMQIgBxqE5r36vlsPWsoIzRYAvMa/vCxd6yvFwvPuU4ecYRbGxszJl8
roRoiy77/Z495g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:45:08 2026 by rpki-client