Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: LcM5ICdoyiZDqSUVVDkws+usMdCt4rQFX6p6CAeiFj0=
Subject key identifier: BD:C3:DE:BA:1D:76:BD:16:3C:5A:C5:24:7D:0C:AA:B9:43:7A:27:35
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 019E1FB5C47538AB4025BAD235FC75ED196F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 174B
Signing time: Wed 13 May 2026 05:01:06 +0000
Manifest this update: Wed 13 May 2026 05:01:06 +0000
Manifest next update: Thu 14 May 2026 05:01:06 +0000
Files and hashes: 1: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: wW+jc3kPYdXPxOhDHeQ9GPuswCs6IBaQwbDFsk9KZFk=)
2: FD6SignaLxU1mMOUn7_cvBf_Yic.roa (hash: Cvxq3OA+d6hTWKtzWj2Wc5SlJWItEo3HQpee1TIc39M=)
3: jwNcE1s-makAFRG_Z0YpC8tgTEA.roa (hash: UWEBlXajJs0PyfeEOQvBkjJjVBwaTr2pthi+ykCI4sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:c4:75:38:ab:40:25:ba:d2:35:fc:75:ed:19:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: May 13 05:01:06 2026 GMT
Not After : May 14 05:01:06 2026 GMT
Subject: CN=bdc3deba1d76bd163c5ac5247d0caab9437a2735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:2d:2f:07:43:08:f4:78:ea:53:96:ef:77:
22:05:28:70:60:2a:5f:ec:75:57:35:61:a7:6e:fd:
63:8d:97:93:cf:cc:ad:ec:3b:8e:d6:3b:96:89:b8:
74:79:af:07:75:10:f6:98:87:c7:1d:2f:b6:69:9c:
8b:63:ae:b3:b5:f6:5d:3d:89:d5:ad:31:59:62:40:
6d:7c:8c:5c:36:2e:7c:8a:29:a3:a5:57:ae:2f:31:
b1:a0:c3:bd:aa:9d:85:2f:cb:36:0b:0b:0e:71:ea:
5d:4f:e4:7e:f2:36:74:26:df:e5:fd:e5:f7:ef:dc:
24:31:91:d3:65:7b:5d:b0:e1:2f:3f:2e:67:0f:09:
4c:fc:26:6b:ca:70:fd:49:27:92:77:0c:1d:52:f2:
ef:93:c2:97:d9:24:6e:3f:46:b7:3f:d2:36:d0:ef:
4c:37:d8:2a:77:9e:d9:d8:f2:46:1e:86:de:4f:3f:
1f:49:7c:66:e6:44:e8:99:9a:f7:3f:d2:d5:43:f5:
40:94:89:65:0c:6f:c4:fa:50:2c:71:bc:74:b9:28:
1b:57:9c:af:98:37:3e:ba:21:eb:68:e0:f2:f1:e3:
89:d8:5f:52:91:22:4d:db:ab:1d:03:8a:fb:37:7c:
af:fd:0e:ff:17:fa:ac:c7:d2:54:d0:00:77:1f:0c:
2d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C3:DE:BA:1D:76:BD:16:3C:5A:C5:24:7D:0C:AA:B9:43:7A:27:35
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f7:08:18:5e:e5:0f:d0:9d:3d:62:e9:c5:4c:60:00:27:b9:
6b:7e:af:4f:6b:da:ab:7d:47:6b:17:4c:bc:ad:52:3e:4e:0d:
c7:fd:0c:a3:e4:fc:3b:dd:34:5a:44:e2:85:2c:8d:23:38:42:
7a:0b:0b:fe:10:40:68:d8:41:a6:fc:af:61:36:2d:e9:3e:bb:
81:82:31:9f:c5:f7:8e:89:a4:fc:f8:6d:b8:c7:10:5a:35:56:
69:0b:f0:c6:54:82:54:a9:0f:1c:20:22:39:10:78:68:7d:80:
8f:3b:2d:f8:65:32:c7:a8:8f:0b:a4:3b:70:1b:fb:9f:c6:6b:
4f:46:5a:dc:5a:e9:5a:24:28:38:cb:63:69:7d:7a:92:5a:b0:
ba:dd:39:5b:e8:4c:53:7b:54:3c:4f:32:56:3e:c6:5c:36:81:
74:39:4c:59:55:ff:fb:f6:a7:39:76:97:04:01:25:c0:a3:3f:
21:14:e0:8a:5d:00:12:1b:89:eb:a1:09:eb:c9:62:9f:fc:84:
cc:9d:ab:55:ea:a7:bf:c4:67:44:cb:94:a8:39:b8:b2:4e:ed:
7e:5c:e8:5a:d5:66:02:d4:3a:3c:e0:a9:66:a1:30:bf:70:e0:
a5:01:56:38:57:ff:6a:87:a5:4b:e2:53:0e:cd:1e:c9:ae:6b:
a9:23:60:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:04 2026 by rpki-client