Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: yD3f2h86DteZpg3f3YWHOsSNV3Xq52paziUE4KswIhY=
Subject key identifier: 6F:92:7A:0E:1D:2F:86:FE:D3:BF:A9:A4:17:F5:97:28:6E:4E:38:39
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 019F92ECB6B90D867D0E728565FF00D7A7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 19A2
Signing time: Fri 24 Jul 2026 07:00:14 +0000
Manifest this update: Fri 24 Jul 2026 07:00:14 +0000
Manifest next update: Sat 25 Jul 2026 07:00:14 +0000
Files and hashes: 1: KVyFy8VhCmWDFDfi6hznjqY-CiM.roa (hash: gxDIq6BgrSNUPikORcjw6F0p9+XkSRUjM2gZnMVK/i4=)
2: mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa (hash: ndDoF5lyW5EcQE2tsppbm+3E+OkI4cfheb+pzHW2skk=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: 6hx/KSK9/AixwpK+liIeYCI/cwyd46vbZz+x0t6F4is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:b6:b9:0d:86:7d:0e:72:85:65:ff:00:d7:a7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Jul 24 07:00:14 2026 GMT
Not After : Jul 25 07:00:14 2026 GMT
Subject: CN=6f927a0e1d2f86fed3bfa9a417f597286e4e3839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:58:73:d5:c3:c4:a2:ac:94:49:05:5b:16:
dc:48:d0:2f:64:73:17:fe:2b:19:fb:6a:c5:75:9d:
24:a3:85:e2:d0:c7:6a:ca:50:e6:8d:20:46:50:20:
d5:ca:8d:39:70:22:c5:04:13:de:47:04:85:7c:3b:
57:f0:c6:e3:ee:c3:67:bd:ec:23:38:7f:c1:17:64:
b4:62:82:ae:43:3b:63:cd:0f:80:7c:38:6a:0c:85:
9d:5e:9e:1b:61:c7:31:60:4d:0e:18:84:07:9c:2d:
75:93:29:a5:5b:72:ab:c9:77:e6:e6:72:a4:24:4c:
d1:49:23:67:2c:65:ec:b0:2a:c8:80:03:1c:a6:85:
be:ff:2a:b3:f3:5f:9b:16:05:f7:95:10:19:55:82:
ce:65:91:26:b2:ba:7c:41:e3:8b:36:45:51:ec:7f:
26:d8:b3:26:0b:5a:99:94:2b:f8:48:14:d1:99:99:
d1:d2:3a:5d:91:a9:94:97:1f:06:5c:b6:77:f6:1a:
1d:34:5e:da:f4:b2:b1:37:3e:56:be:89:4b:e1:dd:
59:10:77:48:b6:e1:03:4c:f3:78:24:f4:59:e3:4e:
60:ed:85:a8:9f:10:b2:7c:91:b7:7c:30:be:16:2a:
06:01:c2:f6:75:b7:b0:e0:f2:f0:91:0e:40:1b:10:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:92:7A:0E:1D:2F:86:FE:D3:BF:A9:A4:17:F5:97:28:6E:4E:38:39
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:63:a4:a2:d6:5f:36:75:ad:f3:af:7d:21:6f:64:c4:2b:a5:
57:a7:71:79:6a:1e:93:2e:03:8e:d5:5d:80:89:f6:fa:3c:4f:
81:95:b2:c7:a0:a9:7e:b4:fa:68:22:a0:81:05:be:a5:c7:12:
fc:7d:8d:43:ca:00:8f:42:e3:da:3d:eb:a7:c2:01:8e:f8:c5:
be:df:13:64:a1:3e:87:29:6a:8e:3c:ad:fb:2d:a4:05:19:2a:
17:04:b2:8f:45:27:07:4d:7b:6c:49:5c:32:b4:17:72:d4:9d:
93:49:85:ed:67:af:26:28:d5:a9:0b:3c:2c:d9:32:70:3e:89:
bc:2e:c9:c2:5d:a3:12:d8:00:24:96:84:e1:64:e1:d6:52:d7:
9f:40:ac:35:eb:7f:b7:d0:4f:76:83:b2:59:56:77:aa:d6:00:
17:72:0a:1f:99:96:ba:ba:9b:82:6e:2e:a3:38:b0:f8:61:29:
41:9b:5a:c1:11:80:e4:5b:9a:b4:a4:0a:c4:48:14:09:62:4d:
37:c1:2b:4a:16:a5:e8:32:d2:5a:05:77:00:f5:9b:01:55:ad:
3e:1a:3e:2f:cf:50:25:f3:d9:b7:e6:23:87:2b:29:e7:6d:cc:
ff:b4:2d:bf:46:b2:cb:e0:2f:e3:23:fb:46:8c:e6:da:b1:4c:
da:7c:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:13:49 2026 by rpki-client