Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: tOLGrAhYBnP4F8TxVQ5E0HuJd+1+CtTkoYovrZ49+DI=
Subject key identifier: 94:61:E4:E5:BF:05:F7:BD:68:30:23:AF:23:54:6D:CF:70:E7:0E:4E
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 019F9022DEEFB945131D72CD66B8C3EDCED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 18:00:32 +0000
Manifest this update: Thu 23 Jul 2026 18:00:32 +0000
Manifest next update: Fri 24 Jul 2026 18:00:32 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: D6mnxbdrOt8x0dWVvMeAEfJTmZvxUhB27gTpkyQBrPY=)
2: MoM66qQuhJcSL5w9TkLPi9sdoKs.roa (hash: /dt2y7/UKbT5EuF45pcmtQs53CRnIBBB6Rg/I22HBZM=)
3: rwInDctVSqf9bY5au3SgxXMR30k.roa (hash: HNhqme3U8E9COjNTzz0hBRfGIPWCZDCViGGXUd7ReyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:de:ef:b9:45:13:1d:72:cd:66:b8:c3:ed:ce:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Jul 23 18:00:32 2026 GMT
Not After : Jul 24 18:00:32 2026 GMT
Subject: CN=9461e4e5bf05f7bd683023af23546dcf70e70e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:e1:e3:93:e7:58:77:a9:55:a0:03:79:db:
b6:3e:64:1d:05:aa:43:32:be:36:24:2d:d4:f0:29:
be:73:4a:88:5f:6d:2f:db:74:05:fa:22:04:41:0a:
12:43:bb:84:aa:49:03:7e:6c:c1:cb:e8:f0:4c:7c:
12:4d:d1:93:5f:2a:95:3a:96:a1:cc:0b:57:aa:90:
48:84:00:a6:77:de:fb:b4:a1:b9:d5:44:a4:c4:8d:
25:ca:f7:36:ac:56:a3:33:c6:6a:f1:fe:9e:38:5d:
95:87:3a:d7:6d:be:9e:2f:03:fd:4e:62:35:2a:f4:
4d:dd:c1:62:71:f8:78:2c:4d:90:69:37:0b:64:46:
a3:89:90:42:51:f5:72:90:ae:1e:13:33:3a:d3:e0:
5d:d2:a2:d2:3a:7c:c5:84:36:0d:89:1d:f6:3e:b1:
fe:82:7d:e1:96:32:e2:e4:73:f7:f0:de:e8:d4:ca:
c8:fa:c0:50:0f:02:f4:95:6f:87:a2:38:1d:df:b9:
c5:e9:5e:3b:a0:f6:ca:c5:42:46:94:7b:58:74:2f:
c6:93:c2:f8:ed:41:65:91:f9:6c:cd:a0:0e:f5:f1:
d0:86:80:04:3a:f0:0f:86:a2:7d:6e:56:ea:d2:40:
83:58:79:d2:cc:82:8e:3c:24:a8:3b:a1:0f:1f:04:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:61:E4:E5:BF:05:F7:BD:68:30:23:AF:23:54:6D:CF:70:E7:0E:4E
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:99:f2:7b:b1:3f:d6:d8:ac:f0:c1:07:4f:f8:80:13:d2:2c:
5c:0d:17:31:68:02:a9:15:a2:79:1c:1c:c8:07:4e:39:8a:90:
ba:34:d0:c5:ed:a4:63:04:ba:61:f0:a2:e1:09:df:e7:87:bc:
b2:43:2b:1c:ce:81:40:28:de:1b:53:68:7c:6c:86:66:c5:d8:
3e:9c:f0:fb:97:77:53:44:3d:48:23:b4:61:cb:b9:c6:0f:80:
8c:db:09:e4:df:6f:14:a8:80:ad:d3:81:cd:b2:eb:67:a5:72:
e7:bc:32:bf:d6:53:70:bb:0b:66:b3:de:0b:1b:5f:69:fe:c0:
86:3b:34:5d:41:78:29:90:b6:d3:d7:6e:ed:de:c7:e3:3f:1c:
ea:f3:08:dd:66:cf:0e:04:d8:ae:3b:58:cb:b9:78:73:83:ae:
86:d1:40:37:a5:9d:9f:d2:49:51:04:10:5d:d2:2a:91:c3:e4:
ab:c1:38:7e:86:01:7e:c7:dc:59:d7:53:15:2f:a6:b0:a4:fa:
10:1b:0a:6a:7f:3b:56:94:89:50:37:4f:0b:2e:93:c4:44:70:
c5:0c:12:ec:db:37:71:1f:3d:cf:91:01:c5:bb:32:ea:54:93:
0e:d6:2e:bf:e4:c4:87:38:47:dc:a2:be:61:d7:db:72:c9:a7:
53:de:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:21 2026 by rpki-client