Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: dS30fa5td9Woc8sXHVDh3sX1wmUzWIVi7dNf6LJJWgU=
Subject key identifier: 3A:7E:60:F1:11:34:D4:69:4E:73:43:43:DE:3B:C7:34:5D:7B:A6:A5
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 019F946D94B3FC398AA1A84225E4132DD8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 14:00:37 +0000
Manifest this update: Fri 24 Jul 2026 14:00:37 +0000
Manifest next update: Sat 25 Jul 2026 14:00:37 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: vT5ZTyvd7MmTqKOb7l9rUWawE62CdnnEPVtghy7KDbw=)
2: lFmZ1r-ocL0yoqMbggjpkGrPea8.roa (hash: 6qzbhdeSH++M2Vfj/8glXhLo1pCgKlmjHvesyWCTjDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:94:b3:fc:39:8a:a1:a8:42:25:e4:13:2d:d8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Jul 24 14:00:37 2026 GMT
Not After : Jul 25 14:00:37 2026 GMT
Subject: CN=3a7e60f11134d4694e734343de3bc7345d7ba6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:09:5f:a1:94:7b:35:31:35:33:3b:2c:02:
79:ce:a2:5b:d2:3c:29:74:7d:7e:55:ea:c4:1a:16:
ad:78:88:e0:8f:01:a3:66:99:50:92:f9:61:e4:cf:
c7:30:05:bf:6d:57:2c:d8:91:fb:f2:6c:69:ae:f0:
84:7b:0a:07:09:eb:29:62:15:b4:4b:67:ed:fb:29:
6f:fe:14:50:71:f4:13:8b:60:62:b9:c9:d6:d9:1e:
53:4a:be:00:7c:a4:dd:19:b5:69:f1:e3:77:33:f6:
49:53:66:be:6b:68:20:e1:8a:c5:47:25:5b:f7:19:
ad:57:4f:66:d8:d1:4b:b6:d0:d4:7b:ec:44:77:2f:
8a:f5:19:9e:09:5e:8f:da:76:89:d8:c1:f3:4f:d3:
1e:9c:60:e7:b5:ef:6c:35:e0:fb:78:fb:99:d5:f8:
06:ba:06:8e:66:04:58:5b:dd:57:39:03:6d:c6:73:
19:8d:c3:dd:38:c9:12:b4:c9:91:b0:36:89:07:ce:
68:f6:70:d5:55:8a:e2:25:29:c7:4f:e3:64:1d:01:
0c:ce:fa:47:fc:91:71:de:93:de:a5:ed:67:bf:e1:
79:4d:16:a6:db:38:2e:dd:b1:8e:1e:30:99:08:a9:
17:68:72:97:03:c1:15:c3:3c:1c:69:74:8d:3f:bd:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7E:60:F1:11:34:D4:69:4E:73:43:43:DE:3B:C7:34:5D:7B:A6:A5
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4f:41:8b:1b:ac:2f:43:1b:be:f7:03:f9:4f:64:5a:ca:6e:
09:82:85:cd:85:e4:d5:80:85:d1:ab:82:fd:6f:7a:e4:22:68:
6b:8d:02:94:75:93:d0:1f:77:05:fa:e6:c4:0a:49:e3:55:95:
44:29:25:ef:05:d6:df:67:66:55:dc:2d:5a:58:f6:0f:a1:05:
1e:28:a3:88:87:9e:51:7d:ea:d1:8a:4a:ea:cc:27:ac:8b:bb:
3f:15:97:c5:96:ef:ca:b5:a9:a7:75:f7:8f:1d:cd:d7:99:80:
c5:cc:0d:64:f4:a0:2f:60:60:5e:a8:f3:75:dd:ca:0c:ee:4c:
c4:86:ad:e9:d7:1f:32:a0:a8:d7:af:d1:06:c8:e9:de:93:05:
11:de:b4:d7:64:fc:66:00:81:01:2f:8c:51:97:89:2b:52:60:
a7:57:e4:2e:01:6c:35:02:19:b9:0a:5b:51:32:d5:f0:23:56:
19:9b:32:3a:3a:c0:46:3b:12:1e:a9:b0:53:a9:b5:0b:37:c5:
d8:33:5e:b4:3c:d5:8f:27:7e:79:30:9c:87:a0:24:f7:d5:38:
72:67:39:79:51:9e:a8:4a:2c:d8:89:07:41:a9:42:65:e5:4f:
28:1e:b0:14:a8:fe:e2:5c:e6:77:d6:3b:57:54:e9:0d:46:73:
3e:0f:72:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:04 2026 by rpki-client