Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
File: E6-mzmVC4btSPh0DvQCk0it_2u0.mft (raw, json)
Hash identifier: /kejOE8hdjel7YODf9v+ZfmN7/+gWDPT6XNwExyKANQ=
Subject key identifier: 60:91:CB:72:E6:2A:C4:4E:C4:7D:00:75:8F:EB:6E:9F:89:7D:DE:CE
Authority key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Certificate issuer: /CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Certificate serial: 019F8E348D41A63340CFBB4C6C9864DEC30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
Manifest number: 14D8
Signing time: Thu 23 Jul 2026 09:00:36 +0000
Manifest this update: Thu 23 Jul 2026 09:00:36 +0000
Manifest next update: Fri 24 Jul 2026 09:00:36 +0000
Files and hashes: 1: E6-mzmVC4btSPh0DvQCk0it_2u0.crl (hash: i5VK7KskpSUYDL86kEVBG8/CFy30/E6ZekDDxsTHARc=)
2: e9nl5Pnxo4_PNueKHPY3_FUm6DY.roa (hash: s4RfX2gBANtJwnzla52YXp/+/wPoOUDbAQSSVBhIKuE=)
3: j_am5tvWSODEl-1F1N6GpUgDtG0.asa (hash: BHkFq4X9N/KlEfD7Uqlg8e5+ZIt+cDIE3YR+BDu/kOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:8d:41:a6:33:40:cf:bb:4c:6c:98:64:de:c3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Validity
Not Before: Jul 23 09:00:36 2026 GMT
Not After : Jul 24 09:00:36 2026 GMT
Subject: CN=6091cb72e62ac44ec47d00758feb6e9f897ddece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:8d:8e:9b:c7:f2:87:79:72:e0:2b:fe:80:
2f:ac:bf:9d:98:4e:0c:06:de:96:f3:db:f3:85:b2:
d4:0d:f3:c4:ce:6b:7c:e8:de:bf:0d:54:5c:40:43:
c8:77:f2:61:91:01:9b:94:9f:23:53:86:21:2a:a2:
bc:37:9e:3e:06:96:18:47:e3:10:01:d7:8f:43:30:
d7:b5:b8:50:87:5f:84:47:7c:b5:b1:36:60:f2:84:
0a:0c:53:0c:7c:cc:5c:b9:41:91:4c:cd:d4:df:05:
55:ca:79:d4:7a:80:ea:3c:58:14:bf:c5:7b:24:21:
09:e7:90:21:8f:e2:d4:f2:2e:d6:9f:0c:72:db:e9:
b0:c7:0e:d3:73:c2:a2:35:14:65:b0:55:e7:74:89:
f0:1b:54:a5:77:29:e5:09:6a:7f:5c:c1:30:b1:dd:
09:64:62:be:6d:cc:24:33:14:de:02:a9:ed:f4:a6:
ba:fb:ce:a0:56:42:d0:7a:f9:2b:5c:08:2c:8a:00:
46:27:34:78:20:c6:a0:f9:0d:11:d3:fc:45:2f:97:
99:bf:b1:36:8f:a5:9e:9d:d0:36:95:83:80:0a:3f:
70:eb:49:01:d0:5f:7c:aa:d2:13:a0:a8:78:e6:13:
0d:c2:10:25:ff:32:ec:88:3e:e6:f5:f2:33:33:8b:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:91:CB:72:E6:2A:C4:4E:C4:7D:00:75:8F:EB:6E:9F:89:7D:DE:CE
X509v3 Authority Key Identifier:
keyid:13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:dd:72:b2:57:b9:cf:85:8f:73:67:de:ae:b5:8f:7a:58:b0:
bf:b9:c2:dc:4f:86:e5:ad:e3:28:cb:74:b2:08:57:0a:df:c4:
4b:5f:f8:66:3b:22:05:5a:2d:38:48:af:fc:49:6c:ab:48:aa:
1b:d0:c2:4e:55:c3:82:40:09:81:53:ef:8a:27:74:4f:89:2c:
8c:60:25:f2:3d:17:98:61:ff:ef:e6:2b:4d:a7:b7:d8:de:0a:
d7:93:bf:1e:a6:02:12:fa:54:ce:22:4b:1f:a8:da:69:40:a5:
af:9f:22:51:52:1d:dc:84:66:e8:19:23:6b:da:13:14:0e:8a:
c0:de:3a:4c:66:d8:e1:8f:1f:c8:c4:3f:34:d9:e6:f7:92:90:
1e:5e:26:e3:d2:3b:05:fb:18:b4:e6:01:6e:e8:4f:0e:f7:80:
d0:a4:09:1d:d0:79:1b:7a:c7:a1:e1:20:80:57:20:08:a4:52:
52:75:fa:89:2d:64:46:93:d6:13:7e:a6:ea:7c:36:73:14:ef:
19:75:3d:3d:58:a4:57:bb:5b:c4:28:56:15:17:b1:7a:8b:35:
aa:df:7e:b1:55:e1:51:7d:77:3a:2f:11:2c:46:27:6e:1f:cc:
eb:a4:84:67:4e:93:ed:9c:2a:42:9d:fc:68:0f:83:a3:c9:e2:
3e:a1:c0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:54 2026 by rpki-client