Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: NCKhFc9zHBb6mmdG8jw/y5O954SNqNHYqU8YRvV06Ro=
Subject key identifier: D8:6D:74:37:98:79:45:EA:01:DA:2C:A3:0E:BC:FF:A4:CC:0C:6A:57
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 019FA9E30A058C573C390D012E9FE4B536BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 11D8
Signing time: Tue 28 Jul 2026 18:00:56 +0000
Manifest this update: Tue 28 Jul 2026 18:00:56 +0000
Manifest next update: Wed 29 Jul 2026 18:00:56 +0000
Files and hashes: 1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: chpacssHYQkaibEsjQgcJ6wnVCQh+8qCT8bDOWKTpMc=)
2: BDoL8rUpvbaK_16BWlbfMCNWUSU.roa (hash: GfKO3arzoWGyw+NdQY8Rv86I2fy83YtHFt/TTLJyJno=)
3: hvVtewn6w22bnIW8yznhNvKtiF4.roa (hash: m3PFir5NovTfkiQPZLXiwU+9sgPb6SDjnc3/rkv8wo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:0a:05:8c:57:3c:39:0d:01:2e:9f:e4:b5:36:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Jul 28 18:00:56 2026 GMT
Not After : Jul 29 18:00:56 2026 GMT
Subject: CN=d86d7437987945ea01da2ca30ebcffa4cc0c6a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:8f:11:46:9b:87:af:53:e3:1c:38:5b:7e:
33:37:b1:d7:14:6d:e6:b6:4d:cf:24:c5:9d:d8:bb:
5c:a7:1f:71:d2:85:78:c9:bd:18:b8:a8:a6:dc:77:
8d:fe:a1:4b:0b:82:92:c5:37:0f:2f:5c:fb:25:d9:
09:12:e7:26:88:ab:e8:82:68:61:4a:3f:51:67:5f:
4c:42:d6:ed:5a:1a:87:3f:9c:47:4d:fd:31:04:fa:
73:41:28:77:c0:ae:f3:4d:c4:b0:69:36:bc:06:bc:
b9:c4:37:2e:d3:95:36:4e:33:fd:98:94:c2:fc:b7:
f8:40:16:2d:de:28:0b:c7:ca:0f:bd:92:49:00:41:
43:f5:31:b7:ab:8d:d0:d5:c0:ba:2e:a2:8b:a8:cd:
a4:92:dc:d3:c3:53:d8:cb:98:b6:db:b1:21:c2:0b:
3d:c9:5f:bf:4c:d4:fd:0f:65:f1:19:20:f3:65:47:
26:3f:f1:5a:cf:88:34:97:d6:17:6d:5b:6a:e0:04:
7d:da:17:fc:40:ca:4d:c0:28:6d:d8:f3:a3:17:24:
31:28:05:0f:96:ff:90:fe:b9:a0:da:d5:5f:88:9a:
d4:59:e0:67:85:3b:66:53:87:f0:ff:e9:90:fb:05:
e5:9b:9a:f2:69:9a:7a:b8:9b:2e:63:db:82:f3:e5:
0b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6D:74:37:98:79:45:EA:01:DA:2C:A3:0E:BC:FF:A4:CC:0C:6A:57
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d9:45:48:0d:85:6d:b6:84:86:ef:a0:37:53:f2:ba:d4:95:
9a:9f:20:ee:5a:1a:7d:4a:c2:ec:d7:99:4a:0b:ba:5a:5f:45:
d2:21:01:0c:f2:23:36:9c:72:b4:79:6c:00:13:a1:83:56:52:
4d:49:ae:a5:67:83:b9:cd:30:f7:43:da:db:6e:9a:82:e8:e9:
7f:27:76:12:c8:fc:cc:cb:fe:09:33:c4:22:3d:56:d5:3b:9b:
0d:6c:f5:00:ea:4d:ef:a2:44:c8:f3:8a:4b:6b:02:49:8d:b0:
35:ff:98:cd:5b:74:d0:62:18:7d:fc:39:64:99:db:ef:c0:c7:
7d:b3:af:e2:58:df:5a:13:e6:e3:19:1e:7f:82:1d:33:cd:67:
4b:d6:4e:b5:c2:df:87:b7:ed:51:c2:57:8c:d4:71:f1:39:6f:
79:b4:0e:95:f8:8d:ef:a6:86:04:b7:99:bb:03:4c:c8:f3:54:
3f:e4:37:56:84:6e:10:6c:a7:e3:c1:dd:87:72:45:9a:cb:71:
7c:0e:4e:f4:55:f0:e0:8d:0a:53:d5:93:cb:6a:96:25:72:b5:
b6:50:cf:3a:b7:48:9b:95:f4:8a:95:16:dc:e9:55:64:38:eb:
81:25:00:7b:c7:72:bf:ab:97:99:35:22:60:de:b3:a6:de:50:
c3:03:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:12:38 2026 by rpki-client