Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
File: 798-8o6In9MNzxN-fPEkjyVeZxo.mft (raw, json)
Hash identifier: GTBjmkWwgYdIn7YSv0UWOd5wHB5+Xt6M5QVqkdbfriw=
Subject key identifier: 3D:9B:2A:CE:B3:28:86:69:1A:E7:41:8C:F0:E1:0A:04:88:BE:DF:3B
Authority key identifier: EF:DF:3E:F2:8E:88:9F:D3:0D:CF:13:7E:7C:F1:24:8F:25:5E:67:1A
Certificate issuer: /CN=efdf3ef28e889fd30dcf137e7cf1248f255e671a
Certificate serial: 019F954963088BE38011233EBF51F6F8285E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:42 +0000
Manifest this update: Fri 24 Jul 2026 18:00:42 +0000
Manifest next update: Sat 25 Jul 2026 18:00:42 +0000
Files and hashes: 1: 798-8o6In9MNzxN-fPEkjyVeZxo.crl (hash: +n0kfj5rUE7NP1FaroGAneLJFj6a4GHJqzt4Goo5Efc=)
2: uZCJ1ZlX7FZKbkYCZM2a8EPtRMI.roa (hash: gQPzOCK/RXUj7ECDDWVHnreCZ/IrlUfLQtw8hRWnAl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:63:08:8b:e3:80:11:23:3e:bf:51:f6:f8:28:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efdf3ef28e889fd30dcf137e7cf1248f255e671a
Validity
Not Before: Jul 24 18:00:42 2026 GMT
Not After : Jul 25 18:00:42 2026 GMT
Subject: CN=3d9b2aceb32886691ae7418cf0e10a0488bedf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:60:f3:56:e5:c9:dc:38:49:c9:af:d2:34:
73:be:27:35:56:44:0a:a3:c3:e5:81:30:f8:1a:26:
27:8a:69:19:ae:b2:22:a4:ca:80:02:9a:f3:db:e3:
cc:fb:97:79:d7:8f:ea:3b:ad:98:d1:68:08:93:aa:
5d:76:70:c4:87:52:6e:75:38:f1:9e:a0:8d:67:b6:
a8:34:66:df:ba:08:d8:2b:77:3e:8b:34:50:3b:0d:
97:e3:0b:0d:39:7b:e7:ae:87:6b:f5:36:b1:ad:6c:
d1:e0:5e:4b:a6:3e:7e:d8:91:cb:76:dd:37:52:7f:
94:9c:d2:55:95:e5:be:23:3a:2f:5e:8f:62:b4:79:
e5:af:b3:e9:4b:58:02:34:01:6d:18:2b:18:c5:55:
84:d9:0a:59:98:fc:c0:69:5e:2f:83:91:02:09:f5:
ee:64:62:48:4d:d2:c7:5a:4c:ee:26:c0:36:41:f3:
40:10:9c:68:1d:33:ec:73:87:e8:41:81:5d:e5:9e:
48:be:6f:6e:5f:a1:2d:72:4d:15:c6:f2:55:37:bc:
40:6e:98:76:cf:8f:15:f1:7a:0a:21:39:1f:dc:2e:
32:2b:5c:3a:5f:d7:fd:fb:d2:2c:04:46:e1:8d:a8:
4b:cc:40:95:35:87:de:d2:6d:cc:98:10:b4:a7:1d:
6b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9B:2A:CE:B3:28:86:69:1A:E7:41:8C:F0:E1:0A:04:88:BE:DF:3B
X509v3 Authority Key Identifier:
keyid:EF:DF:3E:F2:8E:88:9F:D3:0D:CF:13:7E:7C:F1:24:8F:25:5E:67:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c2:bb:af:b2:56:25:9e:9a:9f:cf:d0:f6:14:e3:6f:e9:6a:
51:2b:7b:36:f7:4e:4e:d4:04:2e:83:07:e5:f6:6b:ee:b9:3d:
3c:f6:46:d5:c7:ce:4f:31:3e:b3:d3:da:6c:1b:e3:93:b2:0c:
13:9d:78:68:db:2c:13:d6:4b:be:da:7b:10:8d:ab:17:0a:00:
5f:a5:73:5f:d1:44:30:67:6b:80:02:c5:af:6b:e1:92:1c:c0:
7d:e7:d9:45:95:63:44:d5:f7:f2:23:ed:91:b2:4f:b2:92:2c:
f5:7b:8c:30:b2:87:9a:ec:01:df:59:b3:08:52:a1:01:d0:4e:
75:2f:38:20:20:8b:69:60:ac:a6:df:b1:94:8d:0f:3f:0b:8c:
28:e5:4c:98:1a:3f:1e:e5:a2:45:bc:26:33:94:ab:31:3d:18:
5e:47:b0:e4:c8:9b:87:33:e5:38:d3:7f:98:ac:10:32:e4:98:
19:48:32:29:af:d0:03:47:6e:86:75:f5:9b:bd:d0:ba:e7:0c:
72:93:c7:65:fd:27:f7:9a:32:4f:c5:ac:2e:5a:9d:4f:9c:bd:
58:0f:81:6c:12:e2:4f:ac:61:5d:db:66:f8:d1:16:e9:fb:ad:
08:b7:4b:d0:c4:15:a9:dd:c9:95:51:50:f7:ea:5d:d3:c5:20:
e5:d6:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:46 2026 by rpki-client