Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
File: 6zlyC79FBhEPkD017RJJvUkeqLs.mft (raw, json)
Hash identifier: rskt2JNDknjqdIJSM5rmpvQZR2mMsTrpDjXLsETPTnM=
Subject key identifier: 74:5E:EE:44:83:DC:2B:DD:8E:65:B0:6B:F0:04:FC:DF:F7:9E:75:48
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Certificate issuer: /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial: 019F921170876CE0452ABF67925E6C60EDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
Manifest number: 017F
Signing time: Fri 24 Jul 2026 03:00:44 +0000
Manifest this update: Fri 24 Jul 2026 03:00:44 +0000
Manifest next update: Sat 25 Jul 2026 03:00:44 +0000
Files and hashes: 1: 03p-Qz6XRyJNNeVn4ckBquqSilU.roa (hash: ysNzZw8fmnL30nJOwCbMlcySw0Zqlls7bKqqA6kBPb4=)
2: 6zlyC79FBhEPkD017RJJvUkeqLs.crl (hash: DuVUfbya+k6+VzWCJc1v9169WnINk9gJRb2U3LuZ9pQ=)
3: mAUXHWg9xwo5F85IXm5SVffTuuA.roa (hash: GCJWVxe5b23c6JrLrMVtSOWuGjfgn1uA/TJ0/8z7eXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:70:87:6c:e0:45:2a:bf:67:92:5e:6c:60:ed:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Validity
Not Before: Jul 24 03:00:44 2026 GMT
Not After : Jul 25 03:00:44 2026 GMT
Subject: CN=745eee4483dc2bdd8e65b06bf004fcdff79e7548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:d1:d6:03:c9:c0:e2:8c:c4:e6:ea:91:6d:
16:fa:b6:d5:be:b0:dc:73:fa:90:80:f0:35:d8:cc:
92:26:a8:00:54:1b:dc:d3:7b:f5:c6:de:cf:4a:3b:
97:49:75:7d:b1:6b:bc:b5:ab:3d:cf:2c:8e:88:bf:
7e:2c:38:fc:7a:25:66:de:61:68:54:81:0d:da:94:
87:93:cc:53:e6:d5:89:b9:c8:54:62:19:cc:84:90:
08:e7:ec:7a:f0:d8:6e:1f:5e:0f:b7:e5:dc:f3:1c:
49:7a:04:84:03:8c:98:20:ad:1f:f1:c3:05:ed:af:
69:4f:14:f3:7f:a7:5e:4b:c6:53:cd:c9:46:8e:2b:
63:9a:79:b2:0f:58:c4:8d:c2:7d:f4:78:79:ab:5f:
ce:3d:f7:89:3f:bf:7c:97:a8:4b:08:0c:2d:a6:c7:
39:ba:3c:71:7d:37:2d:ee:b2:48:e3:b5:58:7d:72:
fe:c8:95:97:d3:47:8d:fc:0b:b5:20:ae:f4:75:a3:
9b:bf:97:f0:d2:ae:74:19:7b:f8:61:4a:1b:a5:2b:
6b:04:38:62:97:57:fb:1c:69:29:ed:6c:7f:e0:55:
9c:cb:ed:79:b4:f0:7a:38:ef:76:3b:ed:4f:04:59:
d8:00:c5:bd:c9:fc:27:7c:a3:73:be:21:10:9d:f1:
f4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:EE:44:83:DC:2B:DD:8E:65:B0:6B:F0:04:FC:DF:F7:9E:75:48
X509v3 Authority Key Identifier:
keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:90:9c:c8:fc:85:da:93:51:41:b1:21:1f:8d:68:7d:c7:d6:
05:24:a9:34:67:05:87:80:8e:5a:af:ff:00:c2:9b:4b:6f:1e:
f7:c9:c2:3a:c3:fd:9f:c1:26:8b:96:01:18:34:38:42:5a:86:
91:2c:01:e1:5e:fb:34:f1:f8:b2:c4:b5:55:25:63:05:1e:bf:
04:ae:42:06:79:35:a7:13:42:ff:d6:29:5c:6b:be:07:5a:35:
9f:36:ae:bd:39:63:ee:f8:43:06:12:8f:53:1e:de:6a:a1:e4:
55:87:e8:7a:f1:bb:58:cb:7c:75:84:e1:ab:d2:25:ec:b9:50:
5d:63:97:b4:e1:b5:76:08:71:de:13:1a:07:b7:da:20:3e:01:
63:63:f4:17:c7:66:ef:44:b3:94:a1:32:17:07:15:65:75:5d:
57:cb:be:86:7b:29:bd:76:b5:9b:6d:95:13:2b:e2:75:9f:4e:
3a:76:96:8e:1c:24:b1:a6:06:e6:0c:88:55:b0:c4:eb:16:2f:
98:c8:72:a3:46:5c:14:07:61:bc:99:a8:e3:34:14:ab:80:9c:
2c:51:84:e9:c5:b6:24:f1:b6:91:c4:29:d8:02:b0:e3:27:b0:
96:59:77:c7:62:81:a9:b8:8a:e5:32:19:3d:05:80:e8:1e:2c:
76:e3:6d:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEXCHbOBFKr9nkl5sYO3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzk3MjBiYmY0NTA2MTEwZjkwM2QzNWVkMTI0OWJkNDkx
ZWE4YmIwHhcNMjYwNzI0MDMwMDQ0WhcNMjYwNzI1MDMwMDQ0WjAzMTEwLwYDVQQD
Eyg3NDVlZWU0NDgzZGMyYmRkOGU2NWIwNmJmMDA0ZmNkZmY3OWU3NTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj7R1gPJwOKMxObqkW0W+rbVvrDc
c/qQgPA12MySJqgAVBvc03v1xt7PSjuXSXV9sWu8tas9zyyOiL9+LDj8eiVm3mFo
VIEN2pSHk8xT5tWJuchUYhnMhJAI5+x68NhuH14Pt+Xc8xxJegSEA4yYIK0f8cMF
7a9pTxTzf6deS8ZTzclGjitjmnmyD1jEjcJ99Hh5q1/OPfeJP798l6hLCAwtpsc5
ujxxfTct7rJI47VYfXL+yJWX00eN/Au1IK70daObv5fw0q50GXv4YUobpStrBDhi
l1f7HGkp7Wx/4FWcy+15tPB6OO92O+1PBFnYAMW9yfwnfKNzviEQnfH04wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRe7kSD3CvdjmWwa/AE/N/3nnVIMB8GA1UdIwQY
MBaAFOs5cgu/RQYRD5A9Ne0SSb1JHqi7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YWZlZTYtZDJkOS00ZTk2LThmMjMt
Yjg4N2UzMjIyMjllLzEvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80YWZlZTYtZDJkOS00ZTk2LThmMjMtYjg4N2UzMjIyMjll
LzEvNnpseUM3OUZCaEVQa0QwMTdSSkp2VWtlcUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpCcyPyF
2pNRQbEhH41ofcfWBSSpNGcFh4COWq//AMKbS28e98nCOsP9n8Emi5YBGDQ4QlqG
kSwB4V77NPH4ssS1VSVjBR6/BK5CBnk1pxNC/9YpXGu+B1o1nzauvTlj7vhDBhKP
Ux7eaqHkVYfoevG7WMt8dYThq9Il7LlQXWOXtOG1dghx3hMaB7faID4BY2P0F8dm
70SzlKEyFwcVZXVdV8u+hnspvXa1m22VEyvidZ9OOnaWjhwksaYG5gyIVbDE6xYv
mMhyo0ZcFAdhvJmo4zQUq4CcLFGE6cW2JPG2kcQp2AKw4yewlll3x2KBqbiK5TIZ
PQWA6B4sduNtvA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:39 2026 by rpki-client