Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: za6gDbV5OHTrw2YCaVCLAjN3H6c8dXI0iN0HevkF9QY=
Subject key identifier: D5:52:EA:2E:6A:22:F4:B1:71:EC:60:70:91:0C:ED:17:D3:5A:27:26
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 019F91DA45F8A57B5DF3067886F5C9CBFDCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 17E7
Signing time: Fri 24 Jul 2026 02:00:28 +0000
Manifest this update: Fri 24 Jul 2026 02:00:28 +0000
Manifest next update: Sat 25 Jul 2026 02:00:28 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: uvkejYFBqO6CpBPOie49ohcW7RI32JyaTsfkOXd0+Lg=)
2: 5EAz5dndjgfQfjMqO-fDSjEIW8A.roa (hash: G2Rnah1hR8UxH5++PW3B2fPR5YMOIykQT7T/Zz40bFo=)
3: GWAM8LaGeLrYT15NSq3dJ5pRlCE.roa (hash: lAj5QKk8rG4fdrfzMU388++vVHlAtgmU+Tql0pzD1s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:45:f8:a5:7b:5d:f3:06:78:86:f5:c9:cb:fd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Jul 24 02:00:28 2026 GMT
Not After : Jul 25 02:00:28 2026 GMT
Subject: CN=d552ea2e6a22f4b171ec6070910ced17d35a2726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:da:d1:d8:70:9f:10:0d:32:10:59:71:fe:67:
66:9a:b1:84:a9:66:91:56:17:50:cf:e2:4d:8a:68:
3f:21:73:8d:c8:e2:68:95:19:d9:f1:73:42:fe:bf:
e2:46:56:cb:42:35:e3:ba:34:55:08:0c:44:9b:43:
87:85:74:b8:2a:d0:af:b2:c3:72:5c:8c:cb:1a:2e:
5e:a5:8e:bc:f6:94:53:8b:09:c4:f1:fe:d7:89:aa:
2f:fd:8a:6c:9e:92:7c:3e:d2:f6:8f:65:35:02:20:
70:ea:be:aa:9a:94:1f:30:3e:d3:a7:58:7d:9e:7b:
0b:ac:97:16:2e:8a:4f:87:10:0c:dd:30:c2:4b:86:
f9:c7:f3:4b:e6:be:64:d1:bd:9c:d1:83:b2:08:f9:
1c:3d:2b:dc:53:b3:48:b1:81:02:26:cd:37:55:7f:
18:e7:dc:25:e8:58:fb:30:65:3d:17:00:5a:a6:f4:
a8:fa:d8:8f:85:30:ab:e0:f3:57:f6:81:c5:58:b6:
e0:00:63:d9:29:0e:01:51:9e:a5:03:99:67:92:bb:
74:a1:07:87:27:32:06:03:a5:99:96:88:2b:c5:fd:
56:22:95:e9:ba:4d:1f:16:9a:f4:b1:db:68:04:27:
aa:0d:13:34:0e:95:39:eb:77:65:36:70:d9:b0:b5:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:52:EA:2E:6A:22:F4:B1:71:EC:60:70:91:0C:ED:17:D3:5A:27:26
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:92:9a:59:37:8b:7b:95:9d:bd:ef:02:b1:d1:45:68:60:45:
4b:99:6a:a8:42:3d:ba:15:ed:4b:3f:78:4d:8d:6d:18:3e:f7:
31:63:13:d8:31:5c:95:7a:ca:a8:cc:96:47:81:8a:2a:f8:0a:
5f:45:1f:bd:2e:ac:68:9b:4f:81:76:50:1f:80:92:49:2a:32:
b8:71:98:a7:05:c0:c9:3b:f9:07:90:0e:d3:f8:68:f0:aa:d9:
4d:15:5b:ba:97:f5:b9:c8:bf:83:15:48:2f:19:91:7c:e7:4d:
1b:2a:81:d6:ae:ff:17:79:61:64:e7:1f:50:20:74:b3:aa:1a:
aa:98:9b:ae:54:18:5d:18:bc:8e:ce:20:5d:d7:27:d4:a2:bc:
be:fe:7b:7c:83:18:2b:2e:62:72:38:49:18:70:9e:b9:34:35:
8a:19:04:32:5f:aa:fe:70:07:84:67:4b:21:26:02:72:dc:88:
4d:6f:8c:cd:54:ff:9b:60:74:30:57:6f:d2:84:d8:cc:e1:da:
ff:b2:71:99:6f:ca:90:7a:2d:8f:95:3c:82:b2:ad:8e:9a:eb:
c1:9b:b0:40:3e:cb:b2:8f:4a:eb:c7:18:7a:2f:aa:1b:f3:55:
88:b5:16:b9:fd:6e:db:a3:ed:36:8b:da:98:7d:26:4f:b7:08:
44:8c:3c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:07 2026 by rpki-client