Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
File: 6f383DJhtXr63-1zD7Le2yhkn88.mft (raw, json)
Hash identifier: ikRDEjiD09ZFKFJ4Kydg5iU0/GTZz5kRbfwFsWAR/Rg=
Subject key identifier: 81:BE:54:BE:E1:8A:0E:84:EC:67:E0:DD:FD:83:39:60:53:4F:E0:D0
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 019F90C76B3E0F406A907FDCEBFB62C40127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
Manifest number: 19CD
Signing time: Thu 23 Jul 2026 21:00:15 +0000
Manifest this update: Thu 23 Jul 2026 21:00:15 +0000
Manifest next update: Fri 24 Jul 2026 21:00:15 +0000
Files and hashes: 1: 6f383DJhtXr63-1zD7Le2yhkn88.crl (hash: sp/wAn2rYrVgK/UChtIivd1ZdDd2r4pxu+5EQXWK0PI=)
2: z8QPDmNfQ0U5nDiOWR6fhTlT5bY.roa (hash: JpJdMydt2d4jsczclhW+ZcOFIoTDZoU5V9xzlSAiVrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:6b:3e:0f:40:6a:90:7f:dc:eb:fb:62:c4:01:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Jul 23 21:00:15 2026 GMT
Not After : Jul 24 21:00:15 2026 GMT
Subject: CN=81be54bee18a0e84ec67e0ddfd833960534fe0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ee:a9:cd:57:f8:03:e4:57:c7:62:ec:d9:2f:
9a:29:7e:ca:3d:09:d8:6d:14:ca:c9:26:dc:68:41:
95:2c:89:df:fe:1f:aa:cd:4b:11:8c:f7:27:de:2e:
fa:e0:3a:3d:ac:e4:1b:4a:57:3b:8a:28:60:f7:3e:
66:a9:76:b4:8f:58:68:e4:a3:99:87:c2:48:a4:86:
02:77:98:cf:b4:8e:d2:68:5a:cc:e2:af:f4:85:a4:
df:4e:80:36:22:d6:a5:ea:09:1e:34:49:ce:e2:e6:
cd:d1:da:3c:e2:d8:a5:c4:4f:d8:7d:6f:66:15:19:
49:7e:73:af:1c:89:91:26:9b:a8:35:6d:f5:dc:a9:
40:68:8c:21:e7:37:b5:03:39:05:7c:66:a7:b8:6f:
91:11:2a:01:59:ff:1d:0f:33:22:89:51:90:4e:72:
9b:bf:09:41:fe:87:01:f6:d9:35:65:77:90:2e:5a:
a6:fb:c7:cf:35:a4:9a:0e:ec:c9:55:1a:80:a8:35:
89:e9:9a:2c:73:24:36:93:e7:f6:c4:2e:5a:18:98:
31:00:7d:29:c3:07:8a:6e:2b:88:58:cd:24:0f:b5:
75:86:60:5b:f3:da:ed:86:b1:08:89:23:ec:2e:18:
a3:b6:3f:1d:c5:d6:dd:35:91:74:1d:b0:4f:f7:0f:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BE:54:BE:E1:8A:0E:84:EC:67:E0:DD:FD:83:39:60:53:4F:E0:D0
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5b:0e:07:10:3a:24:ee:a6:8a:c8:a4:fd:8c:38:23:f0:b1:
67:2b:cb:4d:7a:5b:c1:ec:90:0b:e4:0f:f7:b6:16:81:b8:8a:
9d:f3:e2:40:54:21:a2:b1:21:89:5c:3e:07:fd:31:ea:69:d8:
22:d6:ca:ba:3c:69:ff:ef:46:94:5a:9f:b3:34:36:56:00:4c:
b8:55:97:33:f2:65:10:ac:09:1f:5f:12:b1:a2:cf:83:27:ef:
67:8e:7a:ab:8e:fc:0a:86:59:dd:e0:2c:bc:ec:3a:95:c5:9c:
2c:42:2f:28:5c:48:55:94:a2:35:60:33:ac:b3:ee:02:a8:7d:
a2:ae:f7:33:c8:f8:7b:21:f2:3e:6c:c5:64:32:a5:1e:79:41:
e4:df:b6:3c:51:b0:01:3c:0a:32:64:70:6b:99:62:a7:f1:cb:
75:33:77:4b:fd:c0:f5:29:29:86:6d:0f:e7:c4:82:44:33:f6:
02:9f:36:06:bf:c9:1e:3b:b6:1c:c3:7d:7b:ae:2a:f1:f5:1c:
d0:61:10:bc:c2:bc:3f:34:cd:f0:3e:75:2a:28:51:05:7d:69:
e8:73:3b:37:11:dc:d2:a2:aa:a1:9c:17:2f:26:d8:55:96:47:
80:a0:59:c3:ac:67:89:69:04:20:ba:28:13:43:91:8b:95:e5:
5f:48:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:42:18 2026 by rpki-client