Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier: ePQFGDtKf14TvTdFlToR7Rekm6Ntc8+dQG2y75DJxrI=
Subject key identifier: 3A:84:B9:64:E9:71:A8:0C:9F:95:AD:CE:B7:18:BE:0E:A4:33:8B:C3
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 019F93FF6484F7A3C4352900CBB7FF4E3890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number: 0D1F
Signing time: Fri 24 Jul 2026 12:00:15 +0000
Manifest this update: Fri 24 Jul 2026 12:00:15 +0000
Manifest next update: Sat 25 Jul 2026 12:00:15 +0000
Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: 4lSZaWf/woWjA4MosefFzn+LTCwuxVVsEwEEF78sUTo=)
2: JzPgFYHKYPTS04-dHtGN6w7B0bw.roa (hash: JVp2jGweTk75RJ8KZ5GxFoy/wMNQLkzVhJmQPmBEuV0=)
3: wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (hash: loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:64:84:f7:a3:c4:35:29:00:cb:b7:ff:4e:38:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Jul 24 12:00:15 2026 GMT
Not After : Jul 25 12:00:15 2026 GMT
Subject: CN=3a84b964e971a80c9f95adceb718be0ea4338bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:c9:63:62:cb:a8:e2:b7:19:63:de:b7:68:
18:a8:e2:26:83:5c:9e:f6:07:03:ce:a3:b5:77:9e:
c2:a5:22:88:fa:ba:41:e5:8a:88:29:10:cf:a0:77:
d3:f7:16:38:f4:c6:af:e8:ad:82:2d:8f:43:0f:a0:
a5:4e:70:b3:c3:e7:99:52:e0:a1:74:c8:8f:3f:20:
06:68:ff:27:4c:2a:2e:b0:31:85:fb:b6:bd:73:19:
e7:20:39:86:74:d3:48:af:20:e5:d8:53:d8:26:76:
e4:23:e5:14:27:8a:b7:38:a2:99:1c:80:ef:2f:39:
96:2f:fb:a9:a1:a3:a7:65:7b:42:f5:4f:85:96:0c:
7e:ae:8c:89:98:6e:9d:3c:17:10:55:11:af:e9:19:
10:53:93:ba:a2:b0:81:b4:08:c1:66:7f:c7:17:28:
6c:a1:c7:b3:3c:bf:70:bf:c3:bf:1a:a2:61:9b:f5:
18:6d:c0:db:83:95:0c:21:f7:c7:90:5a:d8:a2:57:
58:c1:cb:5c:6a:b5:f3:bc:08:48:38:5a:e6:a5:66:
b5:ad:e4:57:27:e6:eb:52:52:25:b0:0c:70:7b:08:
d0:87:d5:6d:c1:7f:27:01:a2:6d:7f:f1:33:24:6c:
c0:98:64:73:e6:43:c0:00:9d:08:39:7b:a0:ce:6a:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:84:B9:64:E9:71:A8:0C:9F:95:AD:CE:B7:18:BE:0E:A4:33:8B:C3
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:bd:2d:26:1d:b0:df:eb:b7:02:91:8c:24:26:90:bc:07:8b:
31:e4:cb:7a:71:7d:e9:14:e6:ae:bb:6a:d0:33:bf:aa:c3:fa:
31:7e:46:80:ef:38:4f:5f:a6:1c:5a:ae:3d:20:81:75:ed:b6:
92:eb:f5:10:72:64:cd:b5:b7:89:00:c4:0f:6f:38:a4:71:c8:
30:5b:10:fc:bf:fe:5d:ce:c2:02:2d:4c:df:57:aa:45:47:89:
39:48:c4:1d:de:84:21:8d:17:ec:03:a7:85:f4:e4:75:06:ad:
58:89:f8:21:75:68:ee:37:50:7a:24:71:be:17:44:24:0c:d7:
09:d6:88:14:63:e6:77:9d:74:4b:a8:93:98:2f:1e:9a:a9:f9:
1f:de:1c:f6:43:3a:f6:41:cb:ac:44:8c:71:3b:2c:3c:0c:66:
dc:c0:18:23:0e:f7:b8:3e:f4:14:48:55:46:eb:9e:f9:cd:cf:
d6:63:83:ad:ed:15:7c:fa:25:77:bb:e0:dc:8c:3c:11:de:a1:
4d:28:6e:09:e7:f3:c9:c2:f6:8b:60:88:c8:e1:0c:fa:0a:6a:
42:bf:34:ce:16:f6:b6:ee:05:8e:d8:31:80:08:ec:f7:8d:b7:
ab:99:23:9c:69:69:8a:60:ee:5a:ed:5f:3a:20:2b:6e:6f:1d:
f7:af:42:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:04 2026 by rpki-client