Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: oMBXUE5bKTORqgPG7OvL2j48OaGldWiuPxc/W67cVK0=
Subject key identifier: 00:BE:9A:1F:E4:30:A4:BD:2E:74:88:E8:2C:A1:8E:82:6D:46:89:B5
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019F90914BC0BC43685D371ECDE7EB74148D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 20:01:08 +0000
Manifest this update: Thu 23 Jul 2026 20:01:08 +0000
Manifest next update: Fri 24 Jul 2026 20:01:08 +0000
Files and hashes: 1: 0oe_lYqhqfWPj1_Z9cf3I0XuBc4.asa (hash: 6KuQFoMyFoqYvRnIbS2lO87lEEY0GqUNL5F5S6mix1w=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: iGb8wF8xDxWnQ/ihBami7XuiGMn5UxnJFIqDNBXYgsI=)
3: hbeIEnlJLGCUvc-bfFDQtYlNuoI.roa (hash: lsxRlcpEOwKSepvmoUR1XtdYnRnB8rc4Z/mYeHXQHuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:4b:c0:bc:43:68:5d:37:1e:cd:e7:eb:74:14:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Jul 23 20:01:08 2026 GMT
Not After : Jul 24 20:01:08 2026 GMT
Subject: CN=00be9a1fe430a4bd2e7488e82ca18e826d4689b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:e1:42:97:ed:30:c7:d6:a0:a5:f5:f6:0a:
51:b3:55:ab:c5:45:64:8a:a5:f1:b0:62:c9:33:22:
c2:bf:61:3e:39:2a:c1:26:7f:f1:f5:d2:49:d7:e7:
9c:df:90:26:98:e4:b3:58:9f:44:ff:3c:d5:fc:2e:
f6:1e:e1:90:ca:ab:cf:e0:01:1a:92:6e:50:82:b7:
fe:67:71:1c:db:94:ef:2a:66:35:39:ec:ab:78:cd:
61:fb:40:93:80:16:65:54:43:29:9d:ca:5b:01:79:
4b:2e:c0:b5:e5:2a:85:c5:0d:6c:d6:d7:33:31:04:
8c:ba:95:52:77:98:bb:f4:0a:f6:3b:f9:9f:eb:ac:
79:68:a9:6f:b0:0c:dd:7c:c6:50:70:d6:e6:f0:01:
b4:bb:85:4e:ac:87:d4:47:ea:87:d0:d7:53:27:e3:
7f:2c:da:fc:26:2c:7a:d2:8b:84:57:54:df:98:97:
2d:08:df:44:2e:a9:74:45:5d:fe:5f:47:55:6c:38:
10:21:57:3f:ce:f7:4d:c4:fb:f3:78:6c:6f:34:09:
a6:4f:60:5e:9b:38:d4:9b:7c:69:45:ce:40:9a:1e:
62:46:06:83:5f:d3:b1:58:06:c5:c5:c1:8d:6e:2f:
81:6e:91:6a:45:04:4e:ba:78:2a:7b:97:f9:aa:a7:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BE:9A:1F:E4:30:A4:BD:2E:74:88:E8:2C:A1:8E:82:6D:46:89:B5
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9e:d4:64:1a:e2:c2:35:41:f6:e5:43:d6:cf:cf:89:bd:a8:
06:82:8c:27:e0:8b:af:2d:e3:d0:53:d4:87:32:76:7f:6b:de:
0e:c6:24:6f:b4:9b:ea:56:f3:fc:72:b1:28:82:90:b7:0f:63:
79:59:55:df:ec:0f:42:27:63:3d:c7:9a:55:d2:f4:d2:d5:65:
2c:ae:77:5e:65:c5:56:61:a5:a2:7a:52:ef:60:32:52:52:c0:
39:2e:ab:bc:b1:89:14:d2:41:44:35:75:52:81:73:ee:5e:3b:
9b:03:29:1f:4f:9b:0c:1a:0c:b7:e4:87:f1:03:ac:2a:8f:c8:
5a:90:67:eb:22:4c:6e:a2:53:6d:98:35:fa:f3:cf:36:ee:d5:
24:87:4a:c5:c1:4f:af:a5:f0:4f:64:53:a8:79:ec:9c:6d:f9:
c4:f6:b1:51:b5:bf:5d:df:47:80:b3:ad:4a:f7:e6:ed:5c:de:
c4:13:12:a3:6a:d3:1e:a4:be:40:31:0b:a1:c6:5b:c6:3b:ad:
d0:30:01:b4:8f:2b:7d:7e:16:5f:cd:4a:13:66:fe:85:d8:c3:
bb:52:1a:3e:c1:c9:c0:9b:00:b2:8d:1b:b0:4e:0f:fa:d6:88:
2f:92:73:95:d6:15:b5:d6:02:c7:23:34:73:3f:d6:55:63:74:
06:12:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:50 2026 by rpki-client