Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: imDBwJF+/0eDgj27jV5WfXdqDJcPdyxzGHzpKNRms5g=
Subject key identifier: D6:3A:1A:BE:7B:3C:81:DC:97:7C:AA:03:18:8A:15:E7:FF:10:5D:90
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 019FA9750534DAA5A8AF92B920ECE46B4AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 16:00:46 +0000
Manifest this update: Tue 28 Jul 2026 16:00:46 +0000
Manifest next update: Wed 29 Jul 2026 16:00:46 +0000
Files and hashes: 1: HZ8AlFPzeSKwnlXCV6rGz71Kb2g.roa (hash: cBgiVMyfZ1wPdRLeBDUH3L49HCW6dnbKeTA2KaOoCyo=)
2: k9Qt8bd5mtUe8WkBxy0-PnZZYDQ.roa (hash: 4cUGdQJG54wz4ImSZGhzke5tGudVY4frq/07PWJo/ug=)
3: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: 5jP7EayzVjDcMnrF9yjUf3JhqlyZbQpz7DwMvF6E6B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:05:34:da:a5:a8:af:92:b9:20:ec:e4:6b:4a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Jul 28 16:00:46 2026 GMT
Not After : Jul 29 16:00:46 2026 GMT
Subject: CN=d63a1abe7b3c81dc977caa03188a15e7ff105d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:4d:ca:71:e2:d7:ea:47:07:62:a6:09:79:
c1:8e:c5:3f:6f:8c:e6:4e:ed:08:15:a5:94:c9:09:
9d:b5:0c:7e:77:bd:96:95:53:50:af:57:da:59:07:
a0:e2:c1:ff:0b:6a:c9:43:97:85:ae:9c:2c:8e:97:
ba:78:08:77:a0:75:22:b4:8b:45:88:bb:5e:17:dc:
b2:e7:22:ae:05:04:91:2f:f6:1f:5c:0b:3b:3a:f9:
fe:f4:84:b6:09:cb:52:3f:0e:d9:b6:ed:d1:07:ac:
ac:f4:44:96:eb:b0:1b:08:53:92:83:80:38:5e:17:
6f:d7:4d:21:83:ac:c0:64:c2:d0:e0:25:4a:c9:01:
7c:12:93:eb:50:11:77:fa:98:a3:4b:f8:b3:ed:f1:
56:d9:be:47:23:eb:08:91:9b:64:2d:b2:54:7a:d2:
15:60:81:16:0a:fd:28:cc:00:d1:6a:e6:a0:ac:6d:
20:5e:7d:4e:2f:66:70:b9:b5:01:c5:71:5b:99:6a:
65:1e:80:a8:35:54:0c:d9:4a:93:dd:50:38:42:16:
36:95:9e:c6:23:cc:43:39:28:14:e2:c8:9f:c5:1b:
be:b9:ae:5e:8d:a3:fe:8a:c4:33:28:d8:80:5f:52:
9a:29:bb:b2:33:24:23:dd:47:fc:ae:96:c4:47:d7:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3A:1A:BE:7B:3C:81:DC:97:7C:AA:03:18:8A:15:E7:FF:10:5D:90
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:74:a1:c3:2a:09:d1:55:e2:7c:12:b2:57:99:6c:ad:32:fa:
73:47:24:b1:6f:04:0d:16:a6:63:e4:a5:85:9e:c2:22:e2:c3:
c9:e7:6c:74:3e:36:19:25:3e:18:6b:63:18:29:9c:5f:8f:65:
43:fe:91:50:65:54:25:0b:8d:0d:ff:6e:5c:2c:6a:68:e7:bd:
12:43:d4:f2:2a:d7:d2:1a:d0:a7:f3:40:94:a6:d1:e3:97:be:
cd:33:88:89:34:a2:69:aa:6b:1e:77:13:5e:ac:86:dc:63:a3:
12:dc:30:fa:2e:ec:ff:a8:7b:96:ce:b6:5d:d3:db:de:0c:93:
28:93:16:79:7c:4d:d6:2d:7d:30:f5:48:36:61:21:10:85:a4:
f0:19:be:25:40:1a:ed:47:bf:82:d2:54:91:ff:72:07:e7:9d:
e5:fd:20:f4:74:65:92:35:f0:ad:e3:e7:98:0a:6b:fb:46:a6:
7a:05:e8:06:38:6d:b7:fc:c7:21:5c:c9:c8:fb:18:ee:17:7b:
66:63:90:cf:2a:ca:58:b1:9f:aa:8a:03:a7:dd:26:44:35:64:
73:cd:79:56:34:d7:2c:37:c2:ed:97:ec:8d:55:9e:f9:e3:eb:
38:8b:4d:16:68:80:be:7d:64:59:ae:30:07:79:ae:f9:21:68:
2d:9e:2d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:34 2026 by rpki-client