Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: WtOHH7h3/tTNnIyWe0zq4IKAcn9C9sllJ/gZ7ALmLtQ=
Subject key identifier: 74:C2:DE:F0:6B:A2:DE:D6:71:6D:F0:2F:DD:E5:C5:E0:CB:73:04:7D
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 019FA8CFF51B47790C9CFC60B4AEC01EFABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 13:00:28 +0000
Manifest this update: Tue 28 Jul 2026 13:00:28 +0000
Manifest next update: Wed 29 Jul 2026 13:00:28 +0000
Files and hashes: 1: 4ZkKYT4tRABWwIPFtbKwFSuv7hE.roa (hash: D0yakznjZ4GLkw8PJfZndlmaCDEdQxVUthJnURjvcH4=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: s0/0UdXjh8udgnqi6J9ce9ewEB+bUfiPdHuZJq3YpGU=)
3: MUlaySuRJAJWjFOIuDQTeuxgbkI.roa (hash: k8la9Hpl6/O/fQnwY4pQN76Y+PJ8sXIpVpbtRiPNQgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:f5:1b:47:79:0c:9c:fc:60:b4:ae:c0:1e:fa:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Jul 28 13:00:28 2026 GMT
Not After : Jul 29 13:00:28 2026 GMT
Subject: CN=74c2def06ba2ded6716df02fdde5c5e0cb73047d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:9a:2c:02:60:e4:b0:48:a5:8a:66:99:68:
3f:55:7b:24:72:37:9f:cc:1f:e9:db:17:4d:51:eb:
32:ee:e8:ae:1d:9c:f1:3d:44:af:78:ea:66:3b:ed:
a2:d4:ad:6a:63:a3:61:41:39:2c:e9:97:7d:78:bb:
0d:29:b3:7d:de:b1:46:bc:3c:07:94:ff:ec:4d:d3:
a3:92:cd:ff:92:20:83:4e:13:52:55:e1:63:04:2a:
ec:58:5f:60:ae:15:b7:de:40:f8:18:bf:e8:27:48:
08:62:ff:6e:11:0b:9c:9c:47:c2:73:02:36:48:b0:
2e:40:4a:1b:76:b3:dd:02:96:da:69:38:f6:c3:9c:
d1:7f:2a:2a:b1:82:e6:f0:4b:20:81:55:5f:3c:25:
57:f4:5b:f0:2d:74:55:22:12:64:e1:88:a0:29:0b:
28:53:75:be:4b:31:c7:d3:82:af:33:bc:91:b6:97:
14:50:60:c6:fe:4f:fe:2a:22:b7:17:60:97:c3:e7:
b2:47:da:ce:c3:85:fc:ba:1b:e6:98:f0:35:5c:f3:
59:5c:53:0a:88:b5:85:ab:93:d1:40:37:fe:78:4f:
c0:f0:1d:42:92:6d:e7:9c:e8:2f:3e:59:c6:5e:82:
c2:2c:2b:56:36:e4:40:b4:92:f5:b5:65:ad:19:92:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C2:DE:F0:6B:A2:DE:D6:71:6D:F0:2F:DD:E5:C5:E0:CB:73:04:7D
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1d:16:63:97:b4:24:01:b0:3b:1b:04:31:12:17:c3:56:d3:
50:65:ca:11:67:3c:09:75:3a:30:37:f0:6e:8d:c1:7a:f4:32:
21:3a:1a:6e:af:41:79:2d:64:3f:6c:82:1f:5e:7e:ca:b0:98:
aa:95:ca:d8:dc:34:a8:9d:5c:31:9f:17:e2:d5:97:4e:9c:05:
4a:bc:31:4f:45:f2:4d:93:ae:1c:ba:c2:2a:c0:17:9a:78:da:
65:d5:67:57:45:af:1e:7c:2e:f2:ee:48:2a:ba:67:55:ad:0e:
ac:8d:95:08:91:f7:39:2d:a7:01:b4:e0:6d:26:5b:9e:de:32:
d7:0a:80:b1:1e:58:77:8a:4a:1e:1b:96:46:96:be:4f:7a:fe:
95:65:9b:1f:45:9f:30:e3:d3:67:78:c3:3e:93:79:59:ad:ea:
57:23:44:6e:4f:bc:5d:65:cb:5f:33:60:37:65:c1:c4:63:46:
8f:9f:83:6a:ba:5a:d7:3a:48:be:3b:bc:8f:6c:f5:da:40:c8:
ad:c1:7d:06:8e:35:2d:7a:37:5d:f3:d7:47:9d:54:75:6e:3b:
55:15:28:c5:c5:20:0e:d5:73:bf:1c:5b:f5:c0:fb:26:2f:3e:
3f:ad:4c:bc:4b:c5:28:9f:2c:2b:c2:df:a9:ee:29:91:6e:85:
28:06:ff:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oz/UbR3kMnPxgtK7AHvq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzY1NmYyMjAxNTU4OWZmN2NjNjYwNTY4NjdmNjA1ZDgx
NDQ5YmMwHhcNMjYwNzI4MTMwMDI4WhcNMjYwNzI5MTMwMDI4WjAzMTEwLwYDVQQD
Eyg3NGMyZGVmMDZiYTJkZWQ2NzE2ZGYwMmZkZGU1YzVlMGNiNzMwNDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArueaLAJg5LBIpYpmmWg/VXskcjef
zB/p2xdNUesy7uiuHZzxPUSveOpmO+2i1K1qY6NhQTks6Zd9eLsNKbN93rFGvDwH
lP/sTdOjks3/kiCDThNSVeFjBCrsWF9grhW33kD4GL/oJ0gIYv9uEQucnEfCcwI2
SLAuQEobdrPdApbaaTj2w5zRfyoqsYLm8EsggVVfPCVX9FvwLXRVIhJk4YigKQso
U3W+SzHH04KvM7yRtpcUUGDG/k/+KiK3F2CXw+eyR9rOw4X8uhvmmPA1XPNZXFMK
iLWFq5PRQDf+eE/A8B1Ckm3nnOgvPlnGXoLCLCtWNuRAtJL1tWWtGZKwWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTC3vBrot7WcW3wL93lxeDLcwR9MB8GA1UdIwQY
MBaAFOl2VvIgFVif98xmBWhn9gXYFEm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1Mzct
NjgxMmJhYmM1YThiLzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1MzctNjgxMmJhYmM1YThi
LzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdx0WY5e0
JAGwOxsEMRIXw1bTUGXKEWc8CXU6MDfwbo3BevQyIToabq9BeS1kP2yCH15+yrCY
qpXK2Nw0qJ1cMZ8X4tWXTpwFSrwxT0XyTZOuHLrCKsAXmnjaZdVnV0WvHnwu8u5I
KrpnVa0OrI2VCJH3OS2nAbTgbSZbnt4y1wqAsR5Yd4pKHhuWRpa+T3r+lWWbH0Wf
MOPTZ3jDPpN5Wa3qVyNEbk+8XWXLXzNgN2XBxGNGj5+Darpa1zpIvju8j2z12kDI
rcF9Bo41LXo3XfPXR51UdW47VRUoxcUgDtVzvxxb9cD7Ji8+P61MvEvFKJ8sK8Lf
qe4pkW6FKAb/jA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:23 2026 by rpki-client