Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
File: 6HFybEwQPg60LC8Oi12ocz-n7-0.mft (raw, json)
Hash identifier: OccdzOZRR95ddvTT5mRA4PrTUhwtKTQCpH68ZS0OQLE=
Subject key identifier: 64:87:4B:85:2E:35:C1:99:33:22:72:2D:DA:F7:30:8B:5E:CD:33:4D
Authority key identifier: E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
Certificate issuer: /CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Certificate serial: 019F8F7F6DDD602299CABE128D03462F6B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 15:02:00 +0000
Manifest this update: Thu 23 Jul 2026 15:02:00 +0000
Manifest next update: Fri 24 Jul 2026 15:02:00 +0000
Files and hashes: 1: 6HFybEwQPg60LC8Oi12ocz-n7-0.crl (hash: zIuOKae5yGHrEVK4xVkfd4+tiqItT853+hGAgDy18eM=)
2: uKa6FxImXf06YNSnlN4nrccJ9Cc.roa (hash: ePdUA2mdutDGzHN2U8mQRRE7yoNYH9bgsLzTLHYrHtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:6d:dd:60:22:99:ca:be:12:8d:03:46:2f:6b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Validity
Not Before: Jul 23 15:02:00 2026 GMT
Not After : Jul 24 15:02:00 2026 GMT
Subject: CN=64874b852e35c1993322722ddaf7308b5ecd334d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:2d:df:a8:2c:5c:1e:6a:a5:5f:dd:48:79:
93:95:98:c0:c3:96:7e:92:4c:45:1e:07:24:ca:f9:
93:af:0b:ef:46:34:67:05:65:fc:e6:84:72:68:ba:
5e:c3:bb:7a:25:57:62:07:69:15:19:dd:6d:9c:ea:
92:53:f5:2e:42:4e:be:57:93:ee:9b:09:8a:de:c9:
ef:13:19:a0:4c:c4:ee:58:4b:b1:2b:05:03:2d:c2:
78:93:54:db:70:27:ab:43:03:a1:b7:d3:11:8c:eb:
db:95:52:a2:6d:36:78:a2:e4:a0:11:86:f8:fd:ce:
89:e4:7d:fa:3c:bc:d5:d8:54:e3:23:84:a3:04:a1:
d2:bc:f0:8d:04:21:7e:be:c8:49:ef:ea:5e:b1:e9:
67:bd:80:b2:2e:d4:22:db:5d:5d:b3:78:c5:d6:6e:
92:01:d0:66:a8:5b:a9:b0:83:74:86:23:f3:2b:e9:
6f:1d:36:af:6b:57:c0:99:90:06:32:3b:1c:61:4e:
08:2d:35:eb:a4:11:fc:21:5f:e7:78:bc:2e:d1:16:
2c:bf:5f:d5:75:3d:d5:2f:5b:44:41:16:12:b0:c3:
ea:95:f3:75:31:65:1b:3f:fd:27:08:ca:8d:ab:98:
4b:03:d5:81:47:12:d8:0b:53:39:50:c7:f2:c9:af:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:4B:85:2E:35:C1:99:33:22:72:2D:DA:F7:30:8B:5E:CD:33:4D
X509v3 Authority Key Identifier:
keyid:E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b8:f9:5c:7d:81:89:a1:12:2f:d4:cd:b2:3d:ee:e1:34:59:
56:ae:dc:bd:fb:64:76:1f:0d:20:a2:f8:52:7f:b2:9f:00:1a:
1b:ef:58:30:7f:24:a6:bb:e7:0a:78:30:ba:e0:ab:9e:24:14:
5d:63:a0:87:9d:76:d5:79:13:9e:1a:96:34:5e:b6:80:40:6f:
f2:af:f3:a1:1d:48:58:42:a2:1e:a8:09:e0:2c:af:5d:fb:ba:
ff:84:ab:9b:4d:96:8f:b7:47:e8:db:f0:67:12:16:9e:4f:38:
4e:39:bd:fe:84:32:f2:e1:93:fc:0b:09:fc:74:72:71:13:d3:
35:98:e6:4f:b1:e9:b5:4c:72:07:e7:9b:62:00:47:1c:23:d5:
71:8c:f1:9e:cf:aa:f5:38:60:26:f9:c5:e2:58:11:69:35:4c:
d1:3d:9a:b3:eb:c5:81:84:df:c1:19:d2:b6:44:39:52:f0:f2:
58:30:b3:ee:5b:50:fd:01:96:d5:7d:2f:fa:fa:d7:2b:60:4f:
a0:4e:c8:a7:b1:a5:46:7b:c5:a1:2e:31:f4:fb:a5:bd:50:66:
1b:24:b2:f4:ad:20:85:47:0c:b1:57:f3:ac:a6:dc:b8:80:9e:
89:da:f0:e7:61:99:5b:26:70:42:39:a4:a1:a2:70:19:e7:0f:
c3:4a:f4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:39:26 2026 by rpki-client