Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
File: 6GtO0zF8kqNLdsj60prpcID5Hzs.mft (raw, json)
Hash identifier: rUWqToo1+PZ7npcaCUg1T5/ApA9kFnoE11LxWF1Vifg=
Subject key identifier: 25:09:38:61:C7:26:76:92:A9:85:A5:29:C9:F3:F2:70:BB:F7:5F:B8
Authority key identifier: E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
Certificate issuer: /CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Certificate serial: 019F9022EAF38E4CEDA6EB82642285B024A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
Manifest number: 16A5
Signing time: Thu 23 Jul 2026 18:00:35 +0000
Manifest this update: Thu 23 Jul 2026 18:00:35 +0000
Manifest next update: Fri 24 Jul 2026 18:00:35 +0000
Files and hashes: 1: 6GtO0zF8kqNLdsj60prpcID5Hzs.crl (hash: PopXfDRQw8i6eR0VvZ7J00T3K0QqA5neSNtmQRu01d8=)
2: fCJFqaSmlEUaHeJe6Nl29f553VQ.roa (hash: DBZpQG6cNb9N4NIAzi7S93mTg5IouP9LV1gaJIWMDnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:ea:f3:8e:4c:ed:a6:eb:82:64:22:85:b0:24:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Validity
Not Before: Jul 23 18:00:35 2026 GMT
Not After : Jul 24 18:00:35 2026 GMT
Subject: CN=25093861c7267692a985a529c9f3f270bbf75fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:86:d2:42:12:e1:cf:38:2c:c1:b3:ae:f0:
f6:21:6f:c0:c8:bd:15:c9:7a:28:9f:e7:94:cb:50:
ff:8a:9f:82:ca:1f:97:f5:10:69:0e:67:d7:eb:5f:
54:cd:7a:99:4c:2f:68:df:a7:e6:e4:a4:88:21:97:
dc:2b:b8:05:04:b1:ed:26:59:fa:b4:ff:2f:21:86:
4c:73:b5:54:6f:30:f0:76:45:ed:e9:a0:c5:e7:8e:
84:45:5c:41:2b:72:e5:c8:8c:bf:f9:71:f4:9d:11:
dc:48:59:5e:04:ab:1b:2d:59:f7:16:8d:27:91:78:
75:0e:0b:04:de:9b:d8:00:46:71:89:53:7c:2e:aa:
58:dd:b1:64:ca:f8:03:36:20:9f:52:a9:ef:89:9d:
89:fb:da:c7:33:41:1f:9d:d1:1b:8d:91:47:54:71:
74:78:9a:49:6f:83:e0:8e:60:8e:7c:33:fe:19:62:
82:89:ea:bd:e5:28:b7:1c:3d:66:e4:4c:6f:74:86:
cb:ee:56:17:c1:53:91:70:e7:5c:e4:96:66:42:a2:
bf:da:7c:aa:67:92:e8:87:83:60:96:a7:99:ec:b8:
64:af:6b:e4:ce:10:c5:2a:97:17:5a:64:d6:b0:38:
af:0f:6e:0c:2d:42:33:2b:99:99:cf:a7:46:aa:b6:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:09:38:61:C7:26:76:92:A9:85:A5:29:C9:F3:F2:70:BB:F7:5F:B8
X509v3 Authority Key Identifier:
keyid:E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:65:ab:4b:79:db:28:13:b0:c7:3a:57:5e:97:10:4d:63:fc:
7b:0d:32:c9:5e:6b:70:9e:53:17:de:8b:4a:4c:52:6b:c4:b9:
58:e6:c6:59:cf:41:c4:d4:14:6d:37:b3:09:d0:0f:49:9b:cb:
4c:b4:c5:34:eb:d1:19:ea:55:69:76:0b:6f:0e:ef:7c:64:f2:
e1:a7:a3:f3:9e:4e:64:1a:47:e2:69:29:3c:33:37:72:e8:4e:
da:d2:1f:7f:f2:c7:cf:70:a0:19:7a:d0:4a:f5:86:e2:b6:d9:
aa:c9:09:ab:aa:00:a9:ab:db:82:d5:00:d0:d5:64:b3:fb:07:
c4:79:4d:64:00:c8:c8:d2:60:37:14:19:55:11:62:f1:cd:22:
f4:b6:0a:84:26:71:69:24:35:96:b3:b2:3a:87:7a:48:33:37:
22:b3:3a:2b:ea:0f:25:ad:42:51:dc:ef:f5:77:a1:2e:06:e6:
bb:2c:be:28:67:c9:d9:31:fb:a8:64:10:c1:b5:81:6c:c8:2b:
75:e9:bb:fc:38:b4:d2:9e:d4:52:1f:c6:fe:8b:17:7c:2c:86:
bf:01:ac:91:8b:e4:c8:5f:86:eb:96:7b:53:77:18:b4:bd:4a:
f7:ca:bc:35:2a:e6:98:f6:9a:5a:04:4d:69:e9:79:f3:6f:e5:
fe:8a:7c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:26 2026 by rpki-client