Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File: b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier: 9aoAlZPmyWNEIIJKJ498WIL8sEopBGhPbRE29rNDYQY=
Subject key identifier: 91:35:48:DF:A7:A9:D3:58:10:FA:EB:93:2F:FD:63:94:4E:CC:A0:1B
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 019F94002A61E99A6935185024402EC7245F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number: 0D33
Signing time: Fri 24 Jul 2026 12:01:06 +0000
Manifest this update: Fri 24 Jul 2026 12:01:06 +0000
Manifest next update: Sat 25 Jul 2026 12:01:06 +0000
Files and hashes: 1: Xe7Q3eQ_zRFoXx82N03IjvhgxdM.roa (hash: f1v3DQ+f28VV3rL9c+CaytHItkv+65iYkUhizFS/GxE=)
2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: sxV1GF9363cfAoKB6xpJgv29KdvMog5jAHTUxc91lhQ=)
3: xWhq4pJqpBDCOAn9j2p-jZnUVxw.roa (hash: 1dUwvyE89fb3mgfozy7QJGPfLkBx30lg9K5/pQzltFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:2a:61:e9:9a:69:35:18:50:24:40:2e:c7:24:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Jul 24 12:01:06 2026 GMT
Not After : Jul 25 12:01:06 2026 GMT
Subject: CN=913548dfa7a9d35810faeb932ffd63944ecca01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:42:62:2a:54:28:a3:2a:24:76:6d:85:47:
6b:5b:0f:74:7c:e5:f6:e0:0b:c1:c4:3b:b6:25:ee:
bc:45:e4:3e:7a:c1:dd:cf:d7:bc:b7:37:2c:76:78:
e6:fa:3e:2c:e2:4e:2d:d4:78:5f:f9:81:68:11:00:
dc:a3:b7:0e:21:3e:1d:06:24:6f:eb:3e:35:28:3f:
e9:a8:19:8d:ff:0a:3a:c5:78:92:a5:cc:ea:61:5a:
f8:6b:44:48:67:8a:7a:c7:c8:15:a5:f5:ab:50:f4:
da:5d:1a:70:ed:83:b2:a9:e6:4e:91:82:97:d2:0e:
3e:6a:d6:d1:8f:26:fe:fb:9f:d1:b6:a3:27:c3:ed:
96:50:ef:0f:d8:82:40:34:6f:80:c6:8b:c9:b5:8f:
ae:c6:0d:ae:f0:00:43:4e:b4:1f:fa:e7:61:63:8c:
e5:50:37:57:33:5d:e8:92:bb:c6:3a:33:ca:d3:bf:
fe:2a:a8:e4:9e:ff:e3:e4:a8:7b:61:e4:38:96:6b:
80:24:79:86:8b:1a:e9:28:11:6b:53:d7:33:16:4c:
65:11:89:f5:d5:7e:ac:60:15:c1:0a:c3:ec:9e:39:
d1:85:9f:4a:1d:52:7a:28:3e:6d:d9:06:6a:ee:40:
ea:af:b5:a3:b4:12:d9:b4:7a:5f:c3:38:23:ff:0d:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:35:48:DF:A7:A9:D3:58:10:FA:EB:93:2F:FD:63:94:4E:CC:A0:1B
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7c:8e:89:5e:c8:64:76:bc:ef:74:0c:df:1f:51:36:6d:02:
a6:68:e3:64:d8:f1:93:25:37:69:11:6b:ac:47:11:e7:d9:cf:
77:ee:12:36:e1:3d:e2:68:30:bc:f8:a6:77:8e:82:cc:52:04:
99:9a:db:8f:9f:bc:91:6a:a5:88:b7:60:d5:77:73:ef:60:ff:
8d:f8:a9:8c:8e:8a:04:af:86:08:37:9d:a0:b7:a5:1d:06:5d:
c0:03:66:ab:9a:33:bf:00:07:3e:2c:c5:82:57:e2:ae:84:e1:
40:47:ec:9d:81:f6:46:d6:35:bd:78:b1:92:c4:23:88:34:19:
6e:8f:9d:82:9a:b5:11:0f:dc:88:3f:83:9b:7d:d3:5f:74:ec:
0b:7e:58:d5:2e:96:e4:0a:6a:ac:b2:64:01:89:42:6d:dc:40:
83:1d:54:52:4d:de:27:c0:d2:63:35:ef:ee:48:e1:12:ba:f4:
68:19:bf:e8:07:60:14:fc:76:0a:59:b6:2b:7d:53:2f:bc:d1:
9c:4e:4e:68:5a:51:01:15:1b:9c:e7:fa:75:43:cf:b4:7e:2c:
69:5e:62:32:c0:9f:94:5d:05:7e:53:7e:03:7e:0b:46:cb:e7:
71:f6:fc:ad:d4:c2:93:96:a4:46:4f:a2:d1:4f:77:dc:e8:67:
13:02:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:32 2026 by rpki-client