Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
File: 582m42RtyToNLUKV0esJR2xmvKY.mft (raw, json)
Hash identifier: Aoj8XTMixvjFjI1n/FBntXLwOvSy107KJMYghaeNyBo=
Subject key identifier: 6C:DA:4B:B0:03:DF:E3:9D:8C:91:EA:52:FC:4E:32:17:42:5A:23:8F
Authority key identifier: E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
Certificate issuer: /CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Certificate serial: 019F8EA2A930746BF6C0D6A6739A35F3C9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
Manifest number: 06EC
Signing time: Thu 23 Jul 2026 11:00:52 +0000
Manifest this update: Thu 23 Jul 2026 11:00:52 +0000
Manifest next update: Fri 24 Jul 2026 11:00:52 +0000
Files and hashes: 1: 582m42RtyToNLUKV0esJR2xmvKY.crl (hash: B6UkG1q4ytw6jeNcFQvYWVuzux6mwegF5ppUb0nB8YY=)
2: zM4gg4epclePPLRTJtVaIJWeepc.asa (hash: MRTLDlocXHNiWSSlm+nZxDJcnI87lYWJ5A0tSmJ5h6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:a9:30:74:6b:f6:c0:d6:a6:73:9a:35:f3:c9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Validity
Not Before: Jul 23 11:00:52 2026 GMT
Not After : Jul 24 11:00:52 2026 GMT
Subject: CN=6cda4bb003dfe39d8c91ea52fc4e3217425a238f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bb:62:ae:91:66:3a:40:ab:c0:55:c0:b6:10:
06:3f:31:63:e7:18:85:45:ed:a9:d0:01:17:55:b8:
6d:3f:41:b1:4b:45:e2:9f:5f:94:0e:7b:6f:ae:00:
e0:0e:b1:f5:3d:19:b9:ee:ef:d0:30:c8:10:af:90:
83:7e:49:fb:4f:26:55:21:56:e1:42:a4:58:42:1f:
cc:31:58:bd:1c:5b:ce:c0:75:e9:55:80:0d:9a:38:
65:6e:15:4e:e1:4f:2b:85:f8:cf:31:36:3c:73:83:
1e:93:d9:52:b2:95:ce:99:f4:26:9f:c6:c5:16:fb:
39:98:f6:3a:20:4b:2c:3c:68:97:da:8e:a3:00:cd:
58:71:6a:9b:be:53:94:43:8d:28:69:f0:20:a6:09:
ac:a9:6c:5a:2f:0a:ca:75:b0:ec:7b:02:cc:8d:5c:
aa:d9:05:5a:07:c2:0e:f9:21:be:84:e5:fa:a6:e3:
e5:2c:c2:13:8c:9e:5d:6c:1d:2a:32:37:f7:44:70:
f0:39:47:ae:6b:83:35:2d:eb:cb:28:16:c9:80:6b:
8e:02:1d:a7:38:33:c9:7d:71:52:b7:ee:cf:a1:a6:
5e:03:b5:ca:18:b2:22:0c:56:6b:16:9f:21:68:5a:
d5:06:64:a9:d0:51:07:7e:c2:ec:fc:7c:45:b3:5b:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DA:4B:B0:03:DF:E3:9D:8C:91:EA:52:FC:4E:32:17:42:5A:23:8F
X509v3 Authority Key Identifier:
keyid:E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a1:99:98:69:9b:cf:62:bf:49:31:1c:b5:48:7e:ac:4f:68:
70:e5:ae:42:50:9c:0d:02:4c:cb:ba:0b:e6:4f:69:0a:b7:31:
c6:3a:e4:84:23:85:d1:02:b1:51:65:1a:04:44:72:40:4f:2a:
5d:32:a4:b2:c0:b4:90:0c:32:01:b7:d4:c0:9b:14:e6:2a:83:
d7:87:7d:d9:6b:4f:57:74:c2:28:a5:a6:77:90:17:e1:c2:fc:
d6:5e:a7:9c:64:57:d6:d0:c5:f3:30:22:ff:8a:d3:de:ec:de:
5b:6e:f9:cf:20:61:5d:71:b2:64:67:c2:be:e1:a6:c2:7b:f7:
60:8d:9f:b7:36:e6:0c:3b:6b:63:ac:96:85:c7:f7:bc:68:49:
0b:4e:e9:a2:8d:12:f4:5d:bf:4f:a7:a6:92:bc:d6:45:72:3b:
27:10:ac:a9:4d:8f:de:34:55:5b:d7:39:da:ce:65:f7:42:a2:
32:9a:a9:34:21:62:63:07:98:b4:c6:50:ed:b9:ae:e7:3c:f3:
f7:09:61:a5:97:10:d1:a8:37:78:89:d6:fa:38:4a:a8:9f:ec:
0a:08:9d:e2:80:ab:db:68:da:39:1a:1e:b4:34:c7:c4:07:00:
7b:42:8f:b9:d4:a0:c8:16:b5:51:82:ab:be:71:bf:95:9e:54:
47:0c:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:56 2026 by rpki-client